Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F001FCE6FEC11F1A65066DC8BA30FBC.roa
File:                     4F001FCE6FEC11F1A65066DC8BA30FBC.roa (raw, json)
Hash identifier:          dK6SFyW3x2W2x+/2Er/ZdbrWoREMZ16+9goeoI3ViGM=
Subject key identifier:   B4:52:36:0D:EF:B8:C0:34:26:86:A1:F1:01:CB:41:B6:01:13:12:D9
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F75F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F001FCE6FEC11F1A65066DC8BA30FBC.roa
Signing time:             Mon 06 Jul 2026 17:50:11 +0000
ROA not before:           Mon 06 Jul 2026 17:50:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     395931
IP address blocks:        2402:61a0:2000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63327 (0xf75f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:50:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bead3-8ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d4:fe:e9:b1:df:99:0e:f8:15:cd:26:73:73:
                    6d:1e:a7:6e:d7:17:ae:2a:c8:28:52:f0:60:b1:2a:
                    2f:9d:a3:69:8e:b6:f6:15:f3:22:a5:32:18:91:17:
                    60:0f:3c:7f:9a:cb:0c:87:77:84:1b:57:4f:e4:81:
                    51:ff:5c:af:e2:60:98:e8:8c:85:3e:62:da:01:f1:
                    a7:12:e7:92:12:02:05:b5:c4:0a:89:2e:06:e5:53:
                    03:eb:d9:7a:3a:b2:39:f6:d1:96:5a:b0:df:54:34:
                    b1:32:82:65:4e:80:e1:3f:46:03:26:55:c9:24:1c:
                    13:fb:87:d4:01:ed:a6:fe:6c:3b:8e:5c:51:d0:ff:
                    31:d6:8d:13:ce:e0:32:99:03:9a:95:9f:71:ab:93:
                    24:97:2a:c0:34:3a:62:9a:57:a5:42:b1:ed:5c:61:
                    e7:9b:6e:7f:22:1a:f2:5c:47:dd:bf:94:28:38:68:
                    77:2f:1e:b7:b3:62:01:31:b6:3e:5f:c5:d1:73:19:
                    8e:f7:a9:82:ae:91:59:56:fb:dd:f6:a8:9b:79:78:
                    78:23:b1:46:ff:a8:d7:7e:f9:5b:38:24:d8:c7:13:
                    33:91:03:a5:a4:17:5d:5a:bb:15:cd:f9:76:61:80:
                    17:46:e8:7e:08:e8:f7:f8:f4:09:02:bb:75:57:f8:
                    55:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:52:36:0D:EF:B8:C0:34:26:86:A1:F1:01:CB:41:B6:01:13:12:D9
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F001FCE6FEC11F1A65066DC8BA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:61a0:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2b:4f:3c:c6:94:1c:7d:84:24:30:a7:6d:07:36:a2:7f:7e:4b:
         26:d2:d3:5f:34:1d:ee:af:58:a7:c6:17:d0:66:99:cc:1d:da:
         bc:67:2a:e9:51:e5:aa:02:e0:9e:d7:31:fc:76:a8:54:e8:26:
         b2:22:31:d9:13:a2:ca:8d:32:5e:90:b4:98:e3:52:9e:5c:88:
         5f:0e:83:b4:c3:dd:14:e2:2a:d2:b6:14:70:01:45:06:0c:ab:
         4e:e1:0a:bb:b0:7c:84:20:18:93:73:1a:63:ba:8e:06:c5:ae:
         6d:ad:7a:3e:97:a8:c4:fe:55:07:f9:61:fd:c0:b1:b5:d7:21:
         21:cb:b3:e0:4f:a3:b6:71:8a:c0:2b:b9:6e:66:e3:04:59:ee:
         03:7d:e4:6c:28:3a:56:cd:c9:7e:ba:0f:de:52:30:e1:af:97:
         27:c8:18:69:81:4e:59:93:f9:87:82:27:93:95:68:05:9f:8c:
         9f:49:88:54:2b:51:b0:31:02:12:0a:63:24:3c:de:f1:73:23:
         b8:f0:b4:fe:39:61:c7:4a:13:54:3a:11:08:61:6b:14:0a:e0:
         cf:a2:71:50:b9:c6:d4:0e:ed:13:99:f4:b2:b8:17:a1:e9:84:
         7c:d4:31:0c:e9:e0:45:25:85:8a:20:c0:23:6d:b4:80:40:81:
         d2:11:25:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:27 2026 by rpki-client