Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6837609C10F811EF964F242CC4F9AE02.roa
File:                     6837609C10F811EF964F242CC4F9AE02.roa (raw, json)
Hash identifier:          1VfZWIm0k0W5EYz/M2hAYx3gIOeNxXAYWrbv3cVd3c4=
Subject key identifier:   E3:24:A1:0F:03:E3:0A:B3:4D:A3:10:25:53:9A:72:EC:05:F9:9F:B4
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F661
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6837609C10F811EF964F242CC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:41:27 +0000
ROA not before:           Mon 06 Jul 2026 17:41:27 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     152527
IP address blocks:        2001:df3:cb40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63073 (0xf661)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:41:27 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be8c7-c36a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e7:09:50:7b:85:e5:43:b5:df:bf:ed:4c:d7:
                    61:70:5d:00:ef:21:25:ef:1e:a5:fd:4d:76:82:5a:
                    42:ff:41:4c:37:56:bd:bd:77:e6:8a:9f:09:0e:a5:
                    26:ca:fc:5c:b5:98:b8:a0:14:ab:18:86:c7:41:1e:
                    2b:73:e1:68:8f:e5:07:4c:ad:6c:1d:38:93:d9:1b:
                    1f:8c:53:3c:40:6f:d8:14:c1:22:4f:0d:e5:ed:be:
                    c8:5c:5c:09:64:ce:86:f8:7e:1f:ac:13:f2:80:1d:
                    a8:f8:f5:1e:d9:fa:4a:d9:60:49:55:83:58:86:06:
                    b6:29:51:80:e7:22:57:f5:11:14:f1:3c:2d:40:2f:
                    22:50:7e:85:c2:61:c4:39:45:f7:fd:02:f5:86:2e:
                    7a:5d:f0:e7:f7:6a:25:be:6b:1c:04:bf:11:d1:4a:
                    3b:82:ea:91:de:c8:59:8c:34:21:2d:6d:4a:27:fe:
                    4b:4d:53:da:91:fd:c7:f7:95:67:6f:65:bc:a5:a6:
                    89:fd:05:fe:08:aa:19:52:6c:c3:40:af:9f:04:75:
                    58:42:cb:66:90:6d:68:95:ec:51:27:ef:5b:16:16:
                    b6:a1:7c:f5:96:6f:02:30:8d:6c:ad:64:b4:7b:54:
                    81:30:32:74:81:c6:47:1a:3a:1d:21:68:7d:60:4f:
                    ba:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:24:A1:0F:03:E3:0A:B3:4D:A3:10:25:53:9A:72:EC:05:F9:9F:B4
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6837609C10F811EF964F242CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:cb40::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:53:ec:df:62:9c:5c:e3:5b:1a:97:9a:38:3e:9e:9c:f7:b2:
         a5:f5:88:69:db:8a:e2:d6:15:e6:54:15:65:a1:08:85:69:ab:
         02:6a:b9:39:df:da:d1:cd:e2:89:22:d0:0e:1d:f1:4f:ee:4c:
         4d:fd:62:1c:0d:1d:72:7b:fb:5a:11:c5:01:b1:6c:6c:ae:aa:
         87:54:8e:d3:d8:4d:59:7d:bb:de:41:18:04:49:59:bb:07:47:
         02:48:e5:ce:93:c4:7b:dc:52:5e:4f:1a:bd:e7:c7:84:af:c7:
         f8:43:05:f6:5d:4f:d4:89:70:11:09:c6:39:76:b0:d3:2e:d3:
         ed:b5:4c:c6:53:cc:ae:75:21:64:3d:2b:7d:17:6f:1a:56:48:
         b8:0a:8f:58:f7:b5:37:36:47:49:45:d6:29:a0:27:da:43:84:
         12:fe:79:24:8a:87:cf:69:90:c0:a3:9d:ef:e3:f7:45:1a:0d:
         dc:9d:bc:0e:54:47:b2:68:3f:25:02:2e:13:0d:fe:8f:d7:1f:
         39:12:bc:97:4d:38:9e:6f:44:b6:c8:56:5a:4c:c6:d2:f4:1c:
         36:a4:46:c6:a0:0b:3d:32:94:98:ca:ea:4c:5e:ab:80:18:b0:
         80:ad:6e:86:f2:39:d0:d6:12:f7:ce:3b:74:61:56:04:b9:a0:
         b4:90:99:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:59 2026 by rpki-client