Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46A40894FAA411EBBCCC9633C4F9AE02.roa
File:                     46A40894FAA411EBBCCC9633C4F9AE02.roa (raw, json)
Hash identifier:          Ake6CXcStJVy+xeaYMQfLXBfs1bcB6OjdttNLTYsHf0=
Subject key identifier:   38:23:80:81:8A:B5:6C:ED:2C:66:DC:61:70:88:40:1B:68:9B:FD:D1
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E7B6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46A40894FAA411EBBCCC9633C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:21:07 +0000
ROA not before:           Sun 31 May 2026 17:21:07 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     142500
IP address blocks:        1.10.10.0/24 maxlen: 24
                          2001:de2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59318 (0xe7b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:21:07 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6e03-c01a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:73:b0:d3:d0:0a:60:29:73:e5:b1:7b:b6:f1:
                    ca:e4:9c:8e:93:e6:c0:fe:c8:9c:03:21:0e:3d:46:
                    84:6e:10:54:54:3b:5d:46:1e:8f:99:f5:bd:2e:b5:
                    a5:de:32:fa:ec:3f:e5:f5:5e:01:01:01:20:0e:af:
                    08:f1:7e:2b:bc:2d:41:fe:d4:9f:90:c2:34:aa:07:
                    ec:ae:51:c5:e4:84:12:ac:7e:05:76:26:ad:2b:08:
                    4d:97:b6:a6:b9:ea:b5:27:2f:0e:9c:84:a1:a2:31:
                    80:d9:27:91:16:04:fe:7a:7d:d7:f0:10:cc:88:e4:
                    8d:1d:52:14:f7:2c:51:82:83:2e:5d:2e:ff:43:14:
                    7c:a1:73:2c:ab:ce:50:c2:99:1a:7d:77:4e:65:37:
                    e1:c0:0d:bc:69:51:e6:bb:0e:53:7a:c3:68:88:fb:
                    94:45:78:4d:ab:c8:7a:6b:18:77:d6:7c:32:31:2c:
                    01:4a:c4:d6:01:05:c0:9e:f8:14:e5:d9:91:a5:14:
                    c2:78:a0:ec:ed:c1:06:ee:76:2f:8c:1f:b9:e4:3a:
                    e9:23:b3:ac:bd:3d:c2:89:98:78:19:e8:0c:a4:c7:
                    e3:52:b9:86:2c:38:34:93:5f:0b:b5:69:55:f7:70:
                    ab:cd:3e:03:6b:13:fb:64:f2:99:f8:37:aa:31:ac:
                    bf:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:23:80:81:8A:B5:6C:ED:2C:66:DC:61:70:88:40:1B:68:9B:FD:D1
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46A40894FAA411EBBCCC9633C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.10.10.0/24
                IPv6:
                  2001:de2::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:db:2d:1a:39:60:0d:a2:90:36:e8:5a:58:63:33:62:4c:8a:
         79:1d:6d:11:80:33:8c:2c:21:49:a8:0b:b1:a2:87:51:65:dd:
         37:8e:02:1a:d1:9d:56:39:a7:cf:85:42:7c:df:5c:7c:5a:4d:
         16:17:23:02:d2:26:a5:a8:84:14:58:e6:c4:68:31:6b:70:ae:
         16:78:77:7b:42:e0:93:f6:95:ec:cb:9d:65:3f:16:f2:7d:de:
         44:ea:ff:42:49:08:9e:bf:e0:be:10:12:6e:f1:c8:de:13:41:
         f7:ed:1d:25:64:3e:78:08:c7:3f:1e:b3:d9:1f:14:45:5a:84:
         72:e9:d4:38:9c:aa:8b:e0:9f:99:81:49:10:fa:47:4f:60:c3:
         66:25:39:06:c5:1f:14:c8:8e:83:62:9f:cc:76:11:67:89:04:
         ec:6c:66:e8:db:8e:f8:8b:24:5d:ba:21:de:e1:0a:57:ae:38:
         04:7f:10:b8:4d:51:84:74:4d:d3:13:b2:fc:45:16:06:8c:66:
         f2:e1:42:df:c3:51:da:1f:e4:d8:c7:f4:18:17:c6:56:c6:c9:
         76:61:66:c5:0d:9e:06:d8:1f:03:b5:6c:29:e4:a9:8b:27:08:
         62:20:18:43:a1:58:47:af:aa:4e:84:fb:8e:20:0a:b8:db:55:
         4e:11:ca:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:21 2026 by rpki-client