Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46264E4A70F211F0BA760575C4F9AE02.roa
File:                     46264E4A70F211F0BA760575C4F9AE02.roa (raw, json)
Hash identifier:          QHLT1Q6+k9QEn9rYTGld0Og8bXxTFDjfKq3It/BO3wI=
Subject key identifier:   11:06:67:79:E6:63:DF:6A:06:AC:9F:20:A2:D4:00:20:1D:8B:26:48
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EABF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46264E4A70F211F0BA760575C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:46:34 +0000
ROA not before:           Sun 31 May 2026 17:46:34 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     154052
IP address blocks:        2001:df5:da40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60095 (0xeabf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:46:34 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c73fa-68d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:57:83:db:39:2f:4d:bf:0f:30:e5:e5:70:
                    68:c0:85:51:b6:05:cd:6a:de:51:47:b2:20:97:92:
                    60:e3:95:7f:a5:83:c0:8a:6b:8d:09:e7:96:d5:3a:
                    6a:64:9b:10:c4:a5:7a:3d:ba:88:0e:08:69:66:7f:
                    cb:4e:04:70:a4:2e:85:3a:c9:5c:0f:22:44:56:b4:
                    35:86:88:68:90:f4:ca:03:d6:f3:d5:10:84:19:d2:
                    66:e5:c6:2c:94:e5:3d:2f:90:40:ea:f2:ce:eb:45:
                    71:55:24:4e:65:48:aa:15:19:b0:3f:7b:5a:a8:41:
                    c6:b2:1a:8f:2b:a7:77:6c:f7:b7:b6:af:a1:37:ef:
                    94:03:90:9c:27:09:1f:ab:63:4f:42:b1:f0:b9:91:
                    98:cf:5d:a0:bb:cb:35:b9:6c:15:a5:d5:ad:20:26:
                    90:ac:e6:7e:f4:6e:88:22:4a:67:5e:50:a5:f2:c1:
                    50:e6:23:63:f2:e4:b5:6b:81:a7:7c:34:1e:3e:7b:
                    23:55:01:c4:00:53:31:f6:09:4a:10:f3:e8:1f:85:
                    4d:0e:39:32:72:04:a4:ff:60:24:f9:91:a4:a4:91:
                    64:38:b5:9e:3a:9f:55:f1:46:41:9b:f6:32:c6:37:
                    fd:55:e0:c8:3a:49:6f:01:d3:31:fd:ec:63:50:f1:
                    1b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:06:67:79:E6:63:DF:6A:06:AC:9F:20:A2:D4:00:20:1D:8B:26:48
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46264E4A70F211F0BA760575C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:da40::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:ec:fc:a5:43:dd:29:af:3e:ba:d1:a9:9d:c1:25:15:0c:20:
         30:8f:c1:f8:d9:d2:7c:e0:0f:b2:b1:19:4f:f0:1e:f9:d6:b6:
         e0:29:9e:5c:b2:bc:21:24:e3:ea:7e:b5:1b:67:18:01:61:fb:
         89:1d:3e:12:2b:8b:e3:fa:c2:a3:8f:22:e5:10:0a:cf:5f:b0:
         33:56:64:50:aa:80:33:5b:0e:68:f0:cf:78:00:34:e4:d3:b8:
         5c:45:94:30:e3:ef:5c:b1:fb:90:34:f3:00:1a:00:30:29:b7:
         cf:25:27:e0:66:1c:ca:f4:12:06:9f:13:d8:95:30:1f:ea:67:
         bd:5a:df:88:40:d5:1f:e0:94:bb:17:5c:b9:c0:6e:bf:33:77:
         8c:49:06:32:7b:eb:02:5c:56:bf:1a:b6:12:6c:8e:c5:56:59:
         92:02:f5:dd:d5:c7:45:d8:a3:92:be:4c:e2:ee:00:7c:60:b9:
         04:01:85:84:49:0f:a6:d6:c8:d9:9f:0b:02:a8:1a:43:c4:64:
         0d:b7:ee:80:d1:11:ff:04:bf:20:2b:9e:6a:30:15:cc:a3:4e:
         d4:71:22:7f:9e:47:10:fb:af:ff:e7:a2:fb:ae:54:b1:69:da:
         c7:14:f3:27:bd:a4:01:6c:90:51:83:7e:be:2b:2a:0c:ee:d7:
         82:1d:57:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:30 2026 by rpki-client