Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/592D4ACA5F2B11F197337A0E7747A888.roa
File:                     592D4ACA5F2B11F197337A0E7747A888.roa (raw, json)
Hash identifier:          qrdrpZiQX9+noNNymhe6fSTeZefN2k/Eu07cFzN7l64=
Subject key identifier:   1D:BE:A4:74:28:56:1C:DD:F6:0B:B0:DB:D9:CA:EF:A8:3B:BD:F7:EE
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F5D3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/592D4ACA5F2B11F197337A0E7747A888.roa
Signing time:             Mon 06 Jul 2026 17:36:46 +0000
ROA not before:           Mon 06 Jul 2026 17:36:46 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151119
IP address blocks:        2001:df2:9040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 15:24:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62931 (0xf5d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:36:46 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be7ae-792f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:45:7d:db:52:e9:42:78:55:0c:bb:7b:37:fd:
                    16:7b:bd:30:82:b7:3e:91:28:20:37:30:86:82:fa:
                    ba:f5:99:ca:84:db:60:25:0e:b0:08:93:81:9a:69:
                    5f:5f:ef:04:48:fb:f8:f8:cb:8f:05:33:7b:20:99:
                    b1:90:f6:f0:ac:93:3e:3d:f5:8a:fd:8e:73:f6:c6:
                    fc:51:12:7b:8d:a6:51:ee:5c:ec:59:74:e6:a4:90:
                    a2:a3:e5:de:6c:b0:95:c1:10:e7:dc:34:f5:39:2a:
                    cd:98:28:0e:53:83:81:6c:0f:ba:6c:e8:3c:5a:92:
                    3e:8d:84:2d:c8:eb:80:c8:8d:61:20:af:9b:7a:18:
                    6f:6a:64:33:07:39:75:e0:49:f2:94:f0:62:80:72:
                    d0:8e:09:96:63:cd:90:9a:2a:30:90:55:22:1f:0e:
                    81:cb:c7:43:c9:44:58:ba:89:3c:15:44:f2:0e:9d:
                    25:5d:4a:42:01:e1:c6:a9:61:78:43:5a:ac:88:74:
                    cc:e3:8e:36:5d:3c:0c:e6:b8:a2:c2:a2:33:14:3e:
                    df:91:f4:d5:89:48:19:c1:ce:95:15:b3:04:12:9c:
                    59:43:a1:06:8f:e8:86:eb:71:69:52:9c:7c:8c:bf:
                    ab:4c:a1:1d:ec:4b:e9:7c:9a:e8:3b:03:b9:21:8f:
                    91:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BE:A4:74:28:56:1C:DD:F6:0B:B0:DB:D9:CA:EF:A8:3B:BD:F7:EE
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/592D4ACA5F2B11F197337A0E7747A888.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:9040::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:3f:8b:09:7c:93:ad:3b:61:27:bc:c0:b0:6d:b1:f1:2b:dd:
         56:f3:cb:21:02:9c:cb:6f:21:24:fc:d4:06:ae:26:ec:9f:12:
         64:4b:eb:14:be:1b:0d:8d:34:94:0b:b2:40:d2:65:4d:3f:cf:
         35:08:5e:61:8f:c8:6d:77:a6:8b:f6:5c:5d:4b:e7:11:12:0d:
         d8:8a:13:bf:e4:cf:a5:07:76:9b:0e:b1:38:c2:03:ea:40:50:
         8e:34:c9:9d:7d:99:af:bb:e5:56:da:75:74:09:6c:62:fc:b2:
         d5:3d:1a:cf:14:e1:98:14:c0:ec:30:f2:4f:6b:b4:43:0a:2f:
         1a:9e:ef:5f:00:6b:f3:1d:61:35:49:c5:59:0b:39:83:09:e9:
         85:c2:42:85:2b:94:3f:65:f5:0b:e8:7a:bf:54:a8:56:2f:b6:
         7d:b6:9f:c6:ce:84:3f:2b:43:1d:d8:5e:6b:2e:56:76:32:3a:
         9b:e6:73:27:cd:0d:9d:ad:1c:4d:13:8c:8b:3e:3f:f2:cf:ef:
         1a:da:50:25:81:07:1e:75:48:97:58:6c:fc:41:be:7e:5f:f1:
         9c:40:dc:24:27:d7:dc:42:ba:69:fe:07:d6:bb:fa:9f:40:a4:
         35:22:a8:53:e2:58:bd:84:12:07:be:2d:01:83:76:b2:c8:dc:
         5f:99:9c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:40:50 2026 by rpki-client