Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5AD6E95441EE11F083FC6C54C4F9AE02.roa
File:                     5AD6E95441EE11F083FC6C54C4F9AE02.roa (raw, json)
Hash identifier:          sN86i7dEeUby4+nz7w3quh0vk4gbR5wgwdEkPjvg6zY=
Subject key identifier:   AC:5B:58:D2:33:8A:98:CC:7C:C8:52:CC:36:08:05:B5:16:C6:D8:51
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F6D1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5AD6E95441EE11F083FC6C54C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:45:15 +0000
ROA not before:           Mon 06 Jul 2026 17:45:15 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153926
IP address blocks:        2001:df5:9f40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63185 (0xf6d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:45:15 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be9ab-3591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4b:10:26:82:86:33:b4:aa:e4:b0:c9:c1:55:
                    d0:2b:b2:18:48:5f:a6:fa:65:2e:40:84:ef:72:cb:
                    70:3f:80:62:e6:6a:0c:b1:ef:31:fe:7c:9d:61:79:
                    89:64:f1:6a:b7:9c:de:13:7b:0c:28:60:9b:ec:26:
                    4b:9e:4d:9d:92:a7:af:d9:5b:80:1a:a6:e5:0c:7c:
                    b4:a4:33:40:a5:3e:7d:7e:ca:80:a0:53:08:cc:4c:
                    9c:20:78:e6:23:25:dd:4f:5d:fe:7f:4b:ea:48:84:
                    54:62:cf:9b:56:94:56:9a:a5:ea:9a:19:7e:f7:4c:
                    c6:ac:d0:8f:12:cd:8b:46:10:18:07:8c:26:ec:96:
                    4d:11:aa:b4:0d:1e:c8:d0:d7:95:6b:6b:21:5d:e1:
                    48:cf:55:bc:38:24:87:81:2f:a5:58:d3:50:26:e1:
                    b4:56:80:e1:51:7e:5b:92:3a:09:87:de:b6:5a:0f:
                    b1:3a:28:8c:a3:00:8c:df:1e:c2:d9:3b:7d:c6:ce:
                    15:54:e3:c3:67:1c:a6:28:e8:55:48:89:7e:82:cb:
                    75:01:3a:b0:ee:91:81:33:af:aa:b5:82:5f:00:f8:
                    36:b6:ff:d9:b5:69:96:2e:a2:e2:53:b8:65:1c:ee:
                    50:b0:68:d5:04:9f:95:1e:43:63:e1:6a:51:af:dd:
                    dd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5B:58:D2:33:8A:98:CC:7C:C8:52:CC:36:08:05:B5:16:C6:D8:51
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5AD6E95441EE11F083FC6C54C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:9f40::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:d6:86:df:f1:48:1f:1a:9c:31:e7:9b:9c:0e:41:39:a6:4d:
         0d:0d:13:cc:c7:95:30:cb:d2:84:06:48:98:8c:e3:4b:f3:ba:
         a4:3b:6e:a0:0a:5e:f2:c1:71:59:99:85:2b:c1:a0:d0:68:47:
         f4:eb:39:3d:2c:7e:3a:fe:2b:d1:68:fb:8c:bf:81:67:48:2f:
         b2:0e:39:be:84:4d:42:6b:45:e8:08:5a:f1:5d:aa:b5:5f:1b:
         8f:17:68:fe:6c:62:1f:5f:ce:4a:fb:ca:ca:2d:0a:d1:7e:b0:
         ea:75:18:16:9f:1c:d1:76:af:e1:73:f9:b4:af:2f:99:76:79:
         a3:9b:20:fa:c2:64:dd:38:cd:49:3b:bf:c9:fa:b2:d3:86:ac:
         81:00:ec:12:6e:4d:71:3d:48:8a:8a:7b:92:d5:81:48:94:51:
         09:f0:06:8a:da:6c:a2:02:6d:94:0e:f9:ad:6c:67:1a:18:84:
         dd:ff:f1:b8:95:17:14:8c:a0:7c:d7:ef:74:d2:4e:0a:98:2b:
         19:00:0d:76:32:35:ed:02:4c:38:24:53:69:b7:87:00:3e:8f:
         96:7c:6d:14:6d:a7:01:c1:f3:4b:4e:b0:9b:b7:b4:41:31:b5:
         6c:1b:f5:ba:e3:b7:69:a8:35:0f:71:5c:7f:ca:7b:d1:a8:e6:
         9d:77:58:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:05 2026 by rpki-client