Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5FD572E2FD9A11EFB5743F49C4F9AE02.roa
File:                     5FD572E2FD9A11EFB5743F49C4F9AE02.roa (raw, json)
Hash identifier:          aGKvwo147XU8fEkM0/kGzY528E/i1XhM2TVifYNmv5g=
Subject key identifier:   2C:35:51:DF:B0:74:EF:9D:F4:34:72:95:FC:59:FA:D5:83:35:D6:BD
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E900
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5FD572E2FD9A11EFB5743F49C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:32:21 +0000
ROA not before:           Sun 31 May 2026 17:32:21 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     150007
IP address blocks:        2001:df1:6940::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59648 (0xe900)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:32:21 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c70a4-8d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:58:b6:57:fb:ba:55:94:08:b4:02:4b:d2:f4:
                    db:fa:14:10:11:e6:b9:15:49:52:11:35:90:12:0b:
                    6e:d7:7a:1e:81:87:22:7b:62:70:57:64:bc:ec:11:
                    11:43:df:a7:60:52:65:03:12:f2:a2:d4:89:bf:a2:
                    2e:cc:e6:c7:13:0d:4b:08:0d:f0:25:74:0d:a1:5e:
                    ac:30:7e:42:86:96:30:28:e8:b8:0b:92:2f:e9:03:
                    bc:66:34:5d:17:41:ae:27:6f:54:55:74:ce:95:f5:
                    d3:9b:f9:a7:87:1f:5d:4b:9f:7c:b9:f3:29:be:2e:
                    e5:4f:23:47:1a:a1:67:ea:65:6d:b8:67:28:8f:04:
                    45:49:61:8a:0f:d2:af:09:ee:62:96:c7:c6:dc:62:
                    ae:89:2e:48:c5:6f:03:4f:f0:ee:6b:ef:db:9b:a4:
                    4a:70:79:fe:b6:2e:2c:01:08:6b:b4:81:b2:0e:c4:
                    b8:77:9b:cb:7b:6e:b3:8e:d8:85:04:de:28:74:1c:
                    cb:8a:6c:81:f4:cf:77:9d:dc:fd:86:39:7a:d0:0c:
                    1f:81:bd:d4:6a:90:02:6f:64:fc:7c:e9:50:55:8d:
                    66:ba:28:bd:ca:8f:cf:b6:92:0e:6f:87:04:96:e3:
                    af:4b:7d:92:ca:c6:bd:88:50:ff:f4:a9:04:46:30:
                    b0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:35:51:DF:B0:74:EF:9D:F4:34:72:95:FC:59:FA:D5:83:35:D6:BD
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5FD572E2FD9A11EFB5743F49C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:6940::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:65:b4:ae:44:bd:b0:4b:ee:27:a7:c6:30:b6:a9:8c:cf:cf:
         fa:fb:a4:07:20:e1:18:70:d9:c7:68:f1:52:3b:2f:c0:80:d1:
         dc:5d:db:d6:d9:3f:9d:3c:c6:b3:a6:5b:fc:1c:17:ca:b9:61:
         85:e6:73:1e:3f:40:49:70:e0:8a:b2:c5:59:d5:7a:46:ea:69:
         8d:e7:c3:dc:9d:17:ec:54:1a:65:3e:1c:57:7b:40:9d:5a:ac:
         be:37:ec:2a:22:a3:8e:e5:ab:9b:00:ee:1d:4b:12:c4:c7:22:
         b8:33:39:16:67:cf:37:57:b9:a8:02:7c:7c:ed:16:c6:bc:f8:
         79:db:87:56:95:a4:2f:5e:d7:a7:27:8d:d2:ea:d9:97:3c:da:
         4f:e9:9e:f8:fd:b8:66:98:9c:1e:c0:85:c8:b7:0e:58:00:59:
         55:22:73:49:74:82:7c:14:08:27:5f:e5:ee:87:04:ee:50:ea:
         e8:b1:7d:86:7e:35:27:01:48:29:12:bd:9a:87:7d:71:80:90:
         6b:04:b5:27:d4:4b:59:8c:b9:b0:6d:36:65:51:cb:d0:ad:ac:
         e4:1f:35:32:fa:3e:c8:08:51:e8:15:a9:5f:91:e1:3d:27:12:
         d7:f3:13:9f:f8:89:91:16:99:41:1a:f2:b3:89:05:e3:95:72:
         f1:d0:ca:c1
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAOkAMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MzIyMVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzcwYTQtOGQ1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM9Ytlf7ulWUCLQCS9L02/oUEBHmuRVJUhE1kBILbtd6HoGHInticFdkvOwR
EUPfp2BSZQMS8qLUib+iLszmxxMNSwgN8CV0DaFerDB+QoaWMCjouAuSL+kDvGY0
XRdBridvVFV0zpX105v5p4cfXUuffLnzKb4u5U8jRxqhZ+plbbhnKI8ERUlhig/S
rwnuYpbHxtxirokuSMVvA0/w7mvv25ukSnB5/rYuLAEIa7SBsg7EuHeby3tus47Y
hQTeKHQcy4psgfTPd53c/YY5etAMH4G91GqQAm9k/HzpUFWNZroovcqPz7aSDm+H
BJbjr0t9ksrGvYhQ//SpBEYwsJMCAwEAAaOCAmMwggJfMB0GA1UdDgQWBBQsNVHf
sHTvnfQ0cpX8WfrVgzXWvTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzVGRDU3MkUy
RkQ5QTExRUZCNTc0M0Y0OUM0RjlBRTAyLnJvYTAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACABDfFpQDANBgkqhkiG9w0BAQsFAAOCAQEAAmW0rkS9sEvuJ6fG
MLapjM/P+vukByDhGHDZx2jxUjsvwIDR3F3b1tk/nTzGs6Zb/BwXyrlhheZzHj9A
SXDgirLFWdV6RuppjefD3J0X7FQaZT4cV3tAnVqsvjfsKiKjjuWrmwDuHUsSxMci
uDM5FmfPN1e5qAJ8fO0Wxrz4eduHVpWkL17XpyeN0urZlzzaT+me+P24ZpicHsCF
yLcOWABZVSJzSXSCfBQIJ1/l7ocE7lDq6LF9hn41JwFIKRK9mod9cYCQawS1J9RL
WYy5sG02ZVHL0K2s5B81Mvo+yAhR6BWpX5HhPScS1/MTn/iJkRaZQRrys4kF45Vy
8dDKwQ==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:03:20 2026 by rpki-client