Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/68A16594719E11EF85215E2CC4F9AE02.roa
File:                     68A16594719E11EF85215E2CC4F9AE02.roa (raw, json)
Hash identifier:          EfTZtccPjzw9ok1FGb92O8OvYOtW/S4uGlk5ToOXv5E=
Subject key identifier:   99:3D:CE:2C:E5:58:02:7D:4E:D1:C5:96:F9:97:5E:B8:8C:7A:DB:4D
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EA5D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/68A16594719E11EF85215E2CC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:43:35 +0000
ROA not before:           Sun 31 May 2026 17:43:35 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     153208
IP address blocks:        2401:c260::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59997 (0xea5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:43:35 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7347-4886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6f:53:a4:80:d6:aa:f3:42:a6:7d:e5:a9:36:
                    76:bc:88:cc:e8:35:18:95:9c:f9:87:be:26:d3:47:
                    3f:92:8d:90:92:a1:3a:61:34:92:51:7f:9f:fb:c3:
                    48:8a:ed:f1:ed:2d:2e:8d:dd:1b:a4:32:cd:b6:cc:
                    64:cb:ab:d7:d1:82:a7:77:33:9e:94:a9:56:a2:48:
                    3d:6d:9b:6d:5f:ae:bf:b3:cc:55:e8:66:e7:59:1d:
                    65:3c:31:2e:7c:49:aa:01:51:20:5b:3e:67:73:6f:
                    94:76:ab:31:6a:c1:a0:b2:51:5c:22:f2:59:42:1e:
                    df:f8:fe:89:46:f7:43:49:96:f7:e5:38:03:37:98:
                    60:89:5c:32:d0:8f:d2:2f:87:6a:71:2f:e4:9f:e6:
                    0c:4b:f3:c8:b1:80:f3:79:e5:70:eb:0a:81:2b:f1:
                    7f:02:ec:63:c9:1b:e0:56:70:30:16:98:8d:6f:f6:
                    eb:35:ab:d8:da:0a:16:98:f3:56:77:30:d9:bc:87:
                    e3:0e:c2:51:b0:d8:4d:ea:20:eb:c6:02:23:91:cd:
                    3f:72:c0:2b:b1:5e:8f:bb:e2:20:88:26:da:77:5e:
                    39:e1:6c:3b:44:f5:51:b3:36:23:b7:13:b1:ae:d4:
                    1d:a0:6d:b7:8e:c3:9a:9f:03:37:c6:4b:e9:b8:32:
                    fc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3D:CE:2C:E5:58:02:7D:4E:D1:C5:96:F9:97:5E:B8:8C:7A:DB:4D
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/68A16594719E11EF85215E2CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:c260::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:9f:ef:c0:9b:b5:67:e8:c1:5e:cb:15:92:24:9c:d6:f9:c0:
         b3:0e:f9:87:ec:76:94:17:cb:69:c3:9a:9e:d6:87:5e:10:35:
         1e:6b:cf:8e:f9:00:79:97:fb:b1:08:93:f5:da:a5:14:f8:58:
         f2:48:61:5f:54:ad:6f:8c:83:a4:d8:df:ba:a0:c4:33:e1:83:
         cd:2b:31:2a:f9:09:c7:d1:61:b0:a1:d0:a9:8c:99:75:20:c6:
         20:7e:db:78:5c:a9:51:2b:4a:8b:64:20:27:48:81:f4:4f:2f:
         77:c7:7f:ed:49:2c:d9:ca:e7:8b:04:11:ea:f0:38:43:df:8d:
         e4:05:df:b3:f0:bb:71:37:fd:61:cf:80:35:56:43:fc:ce:05:
         eb:9f:b8:ce:14:84:d9:65:db:8f:69:82:04:fc:ba:39:f1:46:
         8d:66:ec:74:03:df:e6:4e:b0:ac:f7:ea:38:11:46:af:5c:3d:
         f7:70:6d:7d:ed:2e:60:62:a9:87:3b:c4:a2:64:6e:2b:70:1c:
         0a:6f:85:61:0a:a0:a3:15:ab:a4:77:d8:02:34:0e:92:a0:93:
         d6:65:39:c3:11:c1:e6:25:6f:97:f0:12:20:df:54:b7:68:60:
         b3:08:1f:d3:37:27:f2:1e:2e:aa:23:3b:b3:c0:af:44:66:77:
         03:08:8e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:08:51 2026 by rpki-client