Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4CC02204AE7C11F0B332D54CC4F9AE02.roa
File:                     4CC02204AE7C11F0B332D54CC4F9AE02.roa (raw, json)
Hash identifier:          zJk0oTOnUgwq1g7uIIs+1RtiCqOuVS0Wkkxxo5y+R4E=
Subject key identifier:   38:B2:1F:30:E1:BB:1E:E7:DE:25:54:D0:9A:0D:BC:C9:8A:20:D8:22
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EA3A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4CC02204AE7C11F0B332D54CC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:42:27 +0000
ROA not before:           Sun 31 May 2026 17:42:27 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     152512
IP address blocks:        2001:df3:9640::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59962 (0xea3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:42:27 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7303-2c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:63:6f:a6:ab:30:7c:53:18:60:7d:3a:e9:ef:
                    78:cf:e2:84:02:0f:28:c8:71:6c:ba:4e:dd:75:7f:
                    60:58:4d:94:64:ba:89:e5:20:74:af:de:2f:bb:55:
                    d7:83:3f:87:5a:42:69:7b:cb:80:c5:9b:f2:5e:55:
                    e5:f2:35:98:43:f7:28:47:e2:a5:df:95:97:45:90:
                    f0:59:ea:e5:aa:45:5a:7a:7c:50:bf:ed:90:05:c9:
                    90:8b:2c:eb:3c:12:db:26:6e:cb:f4:e1:3b:1b:3b:
                    f9:07:c0:dd:c3:dd:3e:f6:07:7b:a2:38:2f:27:20:
                    27:6c:56:83:4b:e4:69:e6:a0:2f:a0:5a:d8:f8:bb:
                    25:a8:13:7e:f7:aa:27:df:d7:c5:c5:80:df:38:a9:
                    c4:b8:6e:15:63:af:fc:42:31:9e:8a:97:ca:d0:2e:
                    0f:d7:b0:9b:e7:d2:ee:ba:a2:6b:04:ae:56:63:f8:
                    3c:c1:64:7b:3f:b6:35:67:4c:58:e6:41:8a:46:5d:
                    e7:35:23:fc:75:10:81:21:b6:59:69:b1:e0:99:e3:
                    88:50:45:f4:91:3a:fe:7d:de:67:c9:ea:2a:78:70:
                    c4:8b:75:4b:26:73:c3:14:7f:c5:f7:c9:f6:f8:86:
                    60:47:13:1f:c1:ff:07:c2:a1:3d:f2:01:af:f7:c7:
                    c2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:B2:1F:30:E1:BB:1E:E7:DE:25:54:D0:9A:0D:BC:C9:8A:20:D8:22
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4CC02204AE7C11F0B332D54CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:9640::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:6b:4f:03:4e:a0:d7:b6:6a:f6:01:c3:96:5a:49:02:de:f7:
         53:1f:b2:e8:a4:06:4f:9e:15:f7:ed:79:c6:8d:c7:0a:a5:85:
         a9:01:ff:2d:0e:19:af:13:e9:4b:73:48:d0:95:8a:11:1a:d3:
         01:4e:3a:15:92:f0:05:9e:f9:25:67:7e:40:53:7c:0a:ef:97:
         e1:1a:d2:73:20:e2:b6:06:4d:4a:bd:52:6e:fe:4d:e9:f4:bf:
         07:d8:2a:45:69:73:1d:5f:c8:3f:3d:8f:de:6e:1f:3f:c0:49:
         6d:f6:7c:84:7d:a9:74:48:9c:2e:b4:ff:95:00:3d:83:89:1c:
         3f:6e:30:ea:2a:26:18:93:03:22:af:0a:69:97:95:aa:57:50:
         27:92:c2:bf:a4:f4:33:12:22:e6:29:44:3e:73:0f:f4:1d:c8:
         bb:7f:47:d2:86:ce:59:85:87:91:35:f8:97:ad:d1:79:47:52:
         87:49:33:e3:27:8f:bb:3b:2f:cc:28:49:72:a4:13:80:79:9b:
         ae:f1:df:b7:e6:58:51:2f:26:c4:0c:04:df:e4:44:c5:2c:bc:
         df:c6:ab:ef:c1:90:7c:1d:7b:a6:b7:8a:46:f0:22:df:e2:e5:
         c0:03:cc:61:28:30:25:d2:f7:a9:e5:ae:1f:a7:4b:89:aa:d5:
         48:86:f2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:16 2026 by rpki-client