Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4739D47076A411F09585BA6DC4F9AE02.roa
File:                     4739D47076A411F09585BA6DC4F9AE02.roa (raw, json)
Hash identifier:          SS3OOmqhSUaSVMrpayjMDi05nfvhSFOuEiTxzcB+Pds=
Subject key identifier:   5E:43:72:E7:7F:FE:8F:59:7E:45:F3:B9:AB:8C:F0:0C:2C:5A:A9:5E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F3E6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4739D47076A411F09585BA6DC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:20:34 +0000
ROA not before:           Mon 06 Jul 2026 17:20:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     142524
IP address blocks:        2001:df1:7ac0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62438 (0xf3e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:20:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be3e2-1470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ac:d6:d2:b7:69:11:3f:7c:c9:24:ec:c2:59:
                    da:78:36:89:29:74:cf:66:92:47:b2:bc:21:0d:3e:
                    a2:e2:da:54:24:21:48:7a:3a:8a:5e:56:79:b5:1f:
                    84:66:a6:2a:77:0d:91:fe:f1:c5:5f:95:b6:65:45:
                    eb:0b:8c:eb:18:d6:bc:23:68:cf:4c:7d:5a:3d:4a:
                    f0:61:3e:90:fe:8f:54:3c:f3:c1:b0:b9:44:da:eb:
                    96:fb:be:44:cf:d8:e9:de:7e:35:6f:69:09:3d:7c:
                    4d:9c:eb:55:15:4a:77:20:43:89:1d:e6:c9:60:b5:
                    f8:e9:ef:7c:1b:48:cd:73:8d:ae:46:7c:fa:e1:0b:
                    fb:7c:b0:87:45:b2:5d:75:a9:fa:d7:0d:2b:21:c0:
                    bc:03:e5:98:5b:ef:f6:24:0f:51:c5:e1:5d:c8:d0:
                    a6:7c:e3:f8:f0:9c:9c:a9:19:94:e6:0a:5d:b0:3a:
                    ba:0f:a7:33:20:2a:c8:a9:47:7b:3f:ca:e0:bd:6c:
                    ec:90:61:e5:94:11:a6:37:21:7f:f3:c8:6c:10:84:
                    31:a3:2a:e9:5c:a2:36:12:02:ae:f2:8e:c2:52:79:
                    82:79:8a:f8:8a:23:6f:81:76:01:5a:55:cc:1f:f2:
                    59:31:ba:5f:9d:3f:5e:96:ae:c0:2e:db:79:0e:a5:
                    f7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:43:72:E7:7F:FE:8F:59:7E:45:F3:B9:AB:8C:F0:0C:2C:5A:A9:5E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4739D47076A411F09585BA6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:7ac0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:db:a8:bc:4d:f9:aa:3d:4e:ed:4c:cd:52:93:00:08:19:7d:
         de:f7:fa:4c:f6:29:61:78:f1:97:27:d3:66:23:09:9b:8e:f7:
         ae:85:75:7f:8f:cc:5a:d0:75:d4:fa:7e:e4:e2:67:af:b1:b3:
         3c:f8:a3:0f:92:02:89:96:b8:0a:81:c8:08:40:5a:6c:e5:e1:
         57:2e:5d:40:29:4d:4d:e4:0f:bb:8e:94:21:04:b5:c4:9f:5c:
         a7:3b:db:de:52:1d:38:28:db:2c:b0:36:bc:07:e0:cd:5d:92:
         5c:11:4e:94:59:40:48:96:4d:24:01:2f:a4:04:1b:a9:f5:c6:
         d2:19:f1:fa:2b:69:81:2f:d6:1c:df:65:7c:d8:39:96:14:98:
         a7:b5:89:83:83:b8:ba:6d:1d:e6:66:03:74:64:4b:55:9d:c8:
         63:3f:5d:e9:bc:ab:d4:f1:2a:f3:cb:e6:4d:69:73:0f:51:fb:
         5e:49:a2:fe:79:51:14:c5:f0:5c:66:86:c3:6a:53:8e:18:77:
         a9:52:e3:bd:41:39:b9:9d:e9:fa:bd:f2:43:50:fb:35:31:e9:
         b7:55:0c:b4:67:88:24:d8:f1:be:49:09:fc:e7:b4:57:ee:66:
         34:75:02:d7:20:d2:0b:2f:a5:6b:63:fd:f4:57:a0:02:c5:88:
         9d:a4:94:57
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAPPmMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3MjAzNFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmUzZTItMTQ3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM2s1tK3aRE/fMkk7MJZ2ng2iSl0z2aSR7K8IQ0+ouLaVCQhSHo6il5WebUf
hGamKncNkf7xxV+VtmVF6wuM6xjWvCNoz0x9Wj1K8GE+kP6PVDzzwbC5RNrrlvu+
RM/Y6d5+NW9pCT18TZzrVRVKdyBDiR3myWC1+OnvfBtIzXONrkZ8+uEL+3ywh0Wy
XXWp+tcNKyHAvAPlmFvv9iQPUcXhXcjQpnzj+PCcnKkZlOYKXbA6ug+nMyAqyKlH
ez/K4L1s7JBh5ZQRpjchf/PIbBCEMaMq6VyiNhICrvKOwlJ5gnmK+Iojb4F2AVpV
zB/yWTG6X50/XpauwC7beQ6l92UCAwEAAaOCAmMwggJfMB0GA1UdDgQWBBReQ3Ln
f/6PWX5F87mrjPAMLFqpXjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQ3MzlENDcw
NzZBNDExRjA5NTg1QkE2REM0RjlBRTAyLnJvYTAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACABDfF6wDANBgkqhkiG9w0BAQsFAAOCAQEAjNuovE35qj1O7UzN
UpMACBl93vf6TPYpYXjxlyfTZiMJm473roV1f4/MWtB11Pp+5OJnr7GzPPijD5IC
iZa4CoHICEBabOXhVy5dQClNTeQPu46UIQS1xJ9cpzvb3lIdOCjbLLA2vAfgzV2S
XBFOlFlASJZNJAEvpAQbqfXG0hnx+itpgS/WHN9lfNg5lhSYp7WJg4O4um0d5mYD
dGRLVZ3IYz9d6byr1PEq88vmTWlzD1H7Xkmi/nlRFMXwXGaGw2pTjhh3qVLjvUE5
uZ3p+r3yQ1D7NTHpt1UMtGeIJNjxvkkJ/Oe0V+5mNHUC1yDSCy+la2P99FegAsWI
naSUVw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:44:28 2026 by rpki-client