Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/415CC3C8604311EF88ACB764C4F9AE02.roa
File:                     415CC3C8604311EF88ACB764C4F9AE02.roa (raw, json)
Hash identifier:          6A0n/BWZuYCqf9HEZGcpPfVAiacyJDDa/oJ/XYrl3do=
Subject key identifier:   6D:E5:35:40:36:E5:EB:94:87:65:63:A4:61:ED:C3:4B:00:EA:83:D0
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F64B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/415CC3C8604311EF88ACB764C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:40:43 +0000
ROA not before:           Mon 06 Jul 2026 17:40:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     152488
IP address blocks:        2001:df3:bfc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63051 (0xf64b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:40:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be89b-12f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3e:d3:ae:be:5b:05:3d:09:7c:60:0d:cf:d8:
                    c6:7c:13:c9:3e:bf:27:53:b1:cc:d9:73:0b:03:64:
                    0c:6b:4b:98:4a:74:63:24:6f:74:f7:a8:31:61:ae:
                    4e:99:d2:18:a8:ef:2b:50:8f:b0:8a:f0:b3:49:72:
                    d1:7d:47:53:ca:38:4d:f7:2f:8b:1d:c4:60:7f:9b:
                    60:cf:06:54:83:f5:0b:39:43:7c:cb:d1:b3:5f:0e:
                    32:6b:a6:6d:39:9a:96:00:98:20:ee:92:10:01:1b:
                    0a:e5:ab:2d:b1:ab:0a:f4:91:e9:95:dd:6b:ac:c8:
                    6f:3a:ea:df:14:79:72:8f:c4:4f:a1:32:f7:23:7d:
                    e9:c1:9d:c5:ba:54:b9:e6:33:d7:20:fc:99:4e:37:
                    65:d4:92:85:33:23:fc:6c:b7:e4:63:31:e7:1d:4f:
                    46:fc:df:7a:dc:14:af:c0:45:bf:d5:12:26:ea:23:
                    e1:01:46:82:ab:d1:1b:66:93:13:bf:25:07:e8:a9:
                    a1:48:d6:d8:3c:73:c2:9c:00:ef:2e:05:bc:46:62:
                    a7:85:e4:5d:0d:be:3d:07:dd:c3:ad:75:4f:7b:b2:
                    51:97:01:48:3b:a7:c8:15:f3:1f:04:32:cc:c5:63:
                    ad:fa:c3:29:d8:20:6f:67:02:74:c5:6e:e8:fe:19:
                    62:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E5:35:40:36:E5:EB:94:87:65:63:A4:61:ED:C3:4B:00:EA:83:D0
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/415CC3C8604311EF88ACB764C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:bfc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:eb:9b:b3:d6:26:c1:8c:4f:1e:90:ca:4b:35:6f:d7:0f:f7:
         99:73:64:f8:83:7c:d2:9d:10:9b:c8:4e:85:bd:ef:73:d7:79:
         65:fd:d6:0b:79:70:c2:fa:47:b2:07:3c:8e:60:ab:45:38:47:
         17:fb:30:e4:da:d9:ad:87:b2:4b:d9:d7:74:f6:f3:5e:f9:28:
         39:8d:16:ec:99:c5:b3:76:1a:0b:6d:da:86:c2:43:4b:04:d8:
         ab:c9:69:57:12:2a:94:b9:6b:bc:58:cb:85:23:69:2e:f6:cd:
         bd:55:8f:22:08:c9:5e:a5:60:13:9b:72:f1:57:34:c2:8c:1e:
         b1:8a:f9:37:c6:35:99:52:e9:7f:2a:79:12:23:f9:4a:35:ed:
         7a:ad:b2:56:c6:16:c6:86:2e:79:f9:62:8c:83:f8:48:f8:a0:
         fe:dc:85:f3:20:49:cc:b3:a8:31:a7:4f:a5:3f:5f:70:e1:c0:
         45:a1:1f:9d:53:2d:00:1f:26:1a:ab:40:98:a8:79:4a:37:3f:
         c2:4e:23:b7:d9:19:75:ac:f8:7a:d8:a8:a1:a2:a1:ed:dc:db:
         07:03:96:00:88:89:0c:81:3f:96:ce:58:ee:76:a3:e7:96:fa:
         42:d5:50:af:e7:21:06:34:2d:97:a4:c7:cf:e2:1f:5a:28:39:
         d6:71:09:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:46:51 2026 by rpki-client