Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/61E0CE4ED20611EEAD3BE953C4F9AE02.roa
File:                     61E0CE4ED20611EEAD3BE953C4F9AE02.roa (raw, json)
Hash identifier:          CDsIuRZmNcpLrbttxLEZqLsSoT6w0dUMxIKrXFJ8o5c=
Subject key identifier:   EB:A3:33:BF:D3:E2:48:D5:3C:53:D7:3E:7B:11:02:1B:83:50:E4:76
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EA0B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/61E0CE4ED20611EEAD3BE953C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:40:57 +0000
ROA not before:           Sun 31 May 2026 17:40:57 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     151747
IP address blocks:        2001:df3:7a40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59915 (0xea0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:40:57 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c72a9-4de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b3:38:14:79:10:76:c2:d8:bb:eb:73:cb:e1:
                    fa:20:ae:98:fc:54:6d:51:b1:cf:a6:ce:c5:da:77:
                    6e:60:b0:73:a1:f9:40:10:34:1e:59:70:77:11:c4:
                    50:8f:f6:c9:90:8b:48:fe:c2:fa:69:38:e8:b4:c3:
                    0f:d9:ff:e1:e3:ea:68:18:07:23:a9:57:60:c8:bb:
                    7b:a0:cc:10:71:95:91:d4:4c:46:1a:f0:bf:18:c0:
                    3c:c0:9a:71:d7:49:78:2f:eb:7d:a7:b2:4b:59:2e:
                    56:1b:3b:6e:67:ea:f8:d9:45:30:24:17:be:19:80:
                    a9:60:26:43:5a:af:01:39:ae:4d:3d:1a:2c:90:08:
                    21:9b:1f:8a:97:ad:74:7a:cd:cc:fa:a5:11:6a:63:
                    e4:d9:f9:2e:a3:a4:9e:5a:52:cd:d1:2d:09:dc:4b:
                    33:e4:ed:06:da:8d:44:ec:85:ff:6f:68:dd:2f:e6:
                    97:e3:35:a2:24:ad:ab:c2:8a:b4:93:8b:c8:cc:15:
                    82:38:d2:f9:24:7f:cc:85:2f:dc:c6:e7:a1:d5:12:
                    15:fc:4d:dd:a0:da:8d:da:7f:07:7e:d3:43:8b:65:
                    f2:87:88:85:65:45:45:2d:55:38:b5:70:76:f7:32:
                    48:1a:39:bc:66:ee:ba:ca:1c:09:0c:ad:32:03:0f:
                    0b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A3:33:BF:D3:E2:48:D5:3C:53:D7:3E:7B:11:02:1B:83:50:E4:76
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/61E0CE4ED20611EEAD3BE953C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:7a40::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:38:2a:f1:89:59:37:a4:5a:22:ca:92:a2:2a:f4:bc:87:fa:
         e4:96:57:ac:22:b5:38:fe:62:6c:8d:62:3c:af:86:bd:4a:21:
         2b:28:d1:fc:2d:f4:1d:12:90:98:8b:60:a2:36:58:6e:a5:99:
         ed:55:15:41:07:99:58:e3:4a:df:17:a2:69:14:9e:92:79:bc:
         78:9e:bd:02:ce:ca:ff:b1:40:db:35:07:05:f1:f7:4a:94:f8:
         b6:e7:68:3d:a4:6c:b8:3f:de:86:aa:26:a4:6d:42:c9:20:77:
         69:a4:f5:84:fb:d5:78:47:ca:3b:b7:61:03:95:49:6b:e2:b8:
         22:cc:d9:87:03:37:37:1a:c1:70:19:7c:99:78:ae:10:95:c1:
         25:42:4a:bd:0b:67:e0:05:db:c1:83:32:57:ce:e6:7c:db:16:
         c1:12:f7:dd:cc:30:37:11:0b:8b:9b:28:68:f1:a4:fa:49:9c:
         3b:ec:e1:05:93:2b:93:f2:d9:2f:f8:c8:6d:8a:f0:5e:a8:70:
         a7:31:c6:40:af:15:71:54:35:2a:bc:6c:04:86:e3:38:ac:d6:
         a9:50:4c:7e:16:43:bc:8e:9d:26:63:47:7b:ee:41:39:0b:74:
         49:b0:2b:ac:a6:cf:44:d6:d5:e2:22:5e:f0:2d:85:18:08:d4:
         e2:72:34:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:06:22 2026 by rpki-client