Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/501ADBCAD01D11F08945F535C4F9AE02.roa
File:                     501ADBCAD01D11F08945F535C4F9AE02.roa (raw, json)
Hash identifier:          HYHnBYZRy+lofg9EPAhRfXaVikagaW2RuU9vnbNFdFM=
Subject key identifier:   BB:43:81:1D:2A:F7:0D:4D:C4:4B:60:13:9D:89:E3:41:2E:A8:BF:6C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EAE1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/501ADBCAD01D11F08945F535C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:47:39 +0000
ROA not before:           Sun 31 May 2026 17:47:39 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     154384
IP address blocks:        2001:df6:5840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60129 (0xeae1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:47:39 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c743b-b783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a0:2a:e9:d4:4e:a1:a1:19:7c:67:c3:39:3c:
                    1a:67:ca:62:64:f5:cc:7f:22:95:55:5a:4b:93:4d:
                    43:6c:ec:a5:c9:4f:9a:56:9d:8a:3c:10:1e:f5:af:
                    04:20:c2:4e:33:48:06:83:ec:27:32:96:9e:30:93:
                    a8:48:ef:4c:e9:d5:63:1c:35:a2:d9:d7:58:85:f8:
                    ff:e2:d7:47:cd:92:96:96:ff:6f:70:a0:d5:bb:dd:
                    b1:52:b8:66:df:7b:67:34:b8:00:1a:85:4d:19:d0:
                    16:1b:84:19:33:ea:42:73:fa:9a:5e:f0:4d:2a:b2:
                    90:a6:ff:a6:a2:52:fd:5c:96:3b:64:94:d8:51:e9:
                    cc:c5:42:b0:9a:16:8f:13:5a:2f:7e:ab:67:d0:4d:
                    8b:3e:e8:93:a0:45:dd:6f:a8:d3:cb:89:75:70:58:
                    a6:d7:67:7b:1c:1b:fe:ec:b0:95:37:1a:28:02:37:
                    93:7c:76:f4:44:be:6f:a3:bc:dc:01:53:11:fc:87:
                    09:ff:cf:25:6d:6b:9b:95:17:ff:bb:61:42:dc:0c:
                    d7:7f:6a:d8:06:28:bd:58:6b:59:e2:d0:12:49:85:
                    77:89:5c:01:1f:ba:97:17:48:dd:2e:89:1a:6f:d0:
                    b4:53:ce:50:dd:a9:4c:2f:42:55:8d:73:bb:b8:77:
                    b7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:43:81:1D:2A:F7:0D:4D:C4:4B:60:13:9D:89:E3:41:2E:A8:BF:6C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/501ADBCAD01D11F08945F535C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:5840::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:ee:77:b1:32:7c:3f:bf:27:3f:f9:74:b4:ce:b7:42:0a:89:
         06:71:ac:94:0b:ea:7d:90:60:a7:aa:db:9d:3d:42:a4:bd:2f:
         3d:27:bc:c3:e4:ed:ee:96:e9:33:c9:53:06:e5:3f:27:4b:28:
         42:02:50:94:48:93:74:18:03:2f:c2:95:33:33:65:7e:0b:4d:
         58:07:a6:cb:54:57:bc:e8:9f:b9:c5:45:55:e8:b0:ba:49:cd:
         0b:bc:52:0c:46:80:63:d4:bc:76:0b:3b:9d:f8:07:ac:a2:08:
         3f:e5:7f:bc:c2:40:b1:24:ce:41:3c:f8:d3:a7:b4:6e:49:0c:
         3f:2f:3e:b6:45:94:a6:6e:0b:58:ac:5a:ca:13:6c:22:c1:dc:
         3c:fb:cb:f3:5c:0d:b5:45:d5:4c:6d:89:02:16:b3:8a:73:a7:
         a1:10:cd:a5:30:d2:dc:67:a5:6e:e3:b6:60:7e:99:4c:d5:4c:
         96:34:14:af:8c:2c:ba:72:1a:ae:ed:18:0d:85:38:bc:4c:cf:
         fa:a1:80:8a:d8:4f:57:5e:23:96:6b:8d:c7:b9:66:19:60:78:
         72:61:de:f7:d8:97:ba:2a:71:b8:fe:af:25:91:3f:16:f3:f6:
         af:d7:ce:37:13:d3:9e:fd:8a:3c:40:36:de:30:80:47:14:77:
         7b:c9:74:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:33 2026 by rpki-client