Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3469BD8A3D4A11F08AE43354C4F9AE02.roa
File:                     3469BD8A3D4A11F08AE43354C4F9AE02.roa (raw, json)
Hash identifier:          9gg8GsdhPNDiSX9JYSh90jlhDb4yjKGKkcU3MCVhDqU=
Subject key identifier:   B1:A0:B0:BC:73:0B:13:01:EE:01:28:12:20:9F:2D:2C:F9:F5:67:BE
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E4D6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3469BD8A3D4A11F08AE43354C4F9AE02.roa
Signing time:             Sun 31 May 2026 16:57:04 +0000
ROA not before:           Sun 31 May 2026 16:57:04 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     136677
IP address blocks:        2001:df4:a840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58582 (0xe4d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:57:04 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6860-c561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:34:d1:68:dd:ac:fb:53:b5:92:9a:00:e6:38:
                    a4:b2:98:df:da:cc:7c:88:34:33:7c:f0:71:f0:65:
                    8e:8c:13:dd:72:68:72:3c:31:d5:b5:a3:5e:7d:76:
                    12:46:1d:60:e8:6c:8e:30:85:c2:ec:89:75:f9:ac:
                    8e:c2:6e:1e:01:1b:e3:21:81:22:7d:17:e0:25:9a:
                    c5:9c:e5:02:af:dc:3c:4d:d6:f5:f9:c5:4b:37:e8:
                    ef:5a:31:2c:3b:65:74:be:b2:fc:e8:68:fc:e9:8b:
                    65:8b:8d:c7:6a:3b:b8:8e:52:34:bf:be:33:ad:20:
                    a9:80:fc:2b:29:01:20:f7:ac:73:d2:17:56:2b:7e:
                    f0:79:7b:c2:dc:f8:3d:d8:8e:c2:aa:2c:4c:c5:dd:
                    ce:4a:87:6a:ce:d4:0d:4c:89:92:75:06:21:f6:ea:
                    ad:a0:c1:3a:0d:09:6d:56:14:1d:3d:4a:19:79:54:
                    ab:b7:2a:c2:3a:ee:1f:7b:81:a8:d0:f2:31:ac:7e:
                    c2:b0:9b:a0:f3:88:dc:a0:0c:0b:0b:c3:85:06:33:
                    51:2e:d6:fc:09:bb:8a:33:7f:d0:f4:ba:dd:f2:2d:
                    c6:f2:dd:2e:2a:8f:39:22:19:11:7d:30:68:b0:17:
                    83:57:0a:44:4d:07:d9:3e:85:cc:cc:dc:80:15:de:
                    63:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A0:B0:BC:73:0B:13:01:EE:01:28:12:20:9F:2D:2C:F9:F5:67:BE
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3469BD8A3D4A11F08AE43354C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:a840::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:19:78:a9:39:96:7c:11:90:04:8a:d1:5f:4b:7a:22:61:5b:
         ef:93:5b:e5:0b:79:28:79:a9:76:fa:da:2b:e0:2f:60:39:9f:
         8e:1a:bc:c6:e8:b0:59:b9:6a:9b:ef:17:16:08:b1:97:ec:a8:
         cc:6b:12:1d:67:6c:3a:49:e6:26:9e:f3:a1:38:74:1a:eb:c2:
         6a:25:00:ea:29:65:0b:7b:9c:84:49:29:9c:53:db:ca:dd:5a:
         7c:f6:76:30:2c:9c:19:69:ab:27:73:c6:a5:f1:86:de:92:0c:
         fe:42:3c:c0:06:ec:b8:6b:83:33:d9:c4:3d:1f:7b:26:11:08:
         22:42:55:f9:a6:7d:d2:90:34:ec:ee:72:49:fe:d4:9d:43:38:
         43:92:ff:5b:40:09:a9:55:27:bd:de:37:b3:c5:ce:84:9e:cd:
         af:ac:cb:84:a2:8f:c2:ba:8c:83:f2:1e:ce:e1:da:98:c3:5c:
         c7:e6:e2:1e:3e:e1:99:68:4a:25:19:ec:d0:00:b2:89:ba:30:
         20:77:40:48:d2:5d:6d:07:2a:96:3b:22:0e:e7:67:c7:9a:a4:
         a4:68:5d:52:64:a6:6a:b4:ca:68:08:28:69:09:07:57:bd:d7:
         87:8f:25:73:94:60:85:6c:61:6c:71:f4:5d:54:d6:c5:74:d2:
         bc:b3:04:f6
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAOTWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE2NTcwNFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzY4NjAtYzU2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOY00WjdrPtTtZKaAOY4pLKY39rMfIg0M3zwcfBljowT3XJocjwx1bWjXn12
EkYdYOhsjjCFwuyJdfmsjsJuHgEb4yGBIn0X4CWaxZzlAq/cPE3W9fnFSzfo71ox
LDtldL6y/Oho/OmLZYuNx2o7uI5SNL++M60gqYD8KykBIPesc9IXVit+8Hl7wtz4
PdiOwqosTMXdzkqHas7UDUyJknUGIfbqraDBOg0JbVYUHT1KGXlUq7cqwjruH3uB
qNDyMax+wrCboPOI3KAMCwvDhQYzUS7W/Am7ijN/0PS63fItxvLdLiqPOSIZEX0w
aLAXg1cKRE0H2T6FzMzcgBXeYwcCAwEAAaOCAmMwggJfMB0GA1UdDgQWBBSxoLC8
cwsTAe4BKBIgny0s+fVnvjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzM0NjlCRDhB
M0Q0QTExRjA4QUU0MzM1NEM0RjlBRTAyLnJvYTAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACABDfSoQDANBgkqhkiG9w0BAQsFAAOCAQEAERl4qTmWfBGQBIrR
X0t6ImFb75Nb5Qt5KHmpdvraK+AvYDmfjhq8xuiwWblqm+8XFgixl+yozGsSHWds
OknmJp7zoTh0GuvCaiUA6illC3uchEkpnFPbyt1afPZ2MCycGWmrJ3PGpfGG3pIM
/kI8wAbsuGuDM9nEPR97JhEIIkJV+aZ90pA07O5ySf7UnUM4Q5L/W0AJqVUnvd43
s8XOhJ7Nr6zLhKKPwrqMg/IezuHamMNcx+biHj7hmWhKJRns0ACyibowIHdASNJd
bQcqljsiDudnx5qkpGhdUmSmarTKaAgoaQkHV73Xh48lc5RghWxhbHH0XVTWxXTS
vLME9g==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:07 2026 by rpki-client