Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7597821E0BD611F1AB419EC22E3D8C67.roa
File:                     7597821E0BD611F1AB419EC22E3D8C67.roa (raw, json)
Hash identifier:          EPnFCgzcyjqrRJ+49sx8XIzPIvj5LtMteeD7CGhKXj8=
Subject key identifier:   74:40:CB:81:07:80:BD:70:3B:33:39:C3:FC:F7:FB:1C:27:60:24:B1
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F691
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7597821E0BD611F1AB419EC22E3D8C67.roa
Signing time:             Mon 06 Jul 2026 17:43:03 +0000
ROA not before:           Mon 06 Jul 2026 17:43:03 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153259
IP address blocks:        2401:e220::/32 maxlen: 32
                          2401:e220::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63121 (0xf691)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:43:03 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be927-d2f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:69:a1:a1:e2:da:1e:b4:50:2e:fe:00:23:ea:
                    30:17:4e:2d:92:57:f6:9d:f8:0e:2e:33:d5:51:c2:
                    1c:8f:19:fa:02:5d:79:12:18:15:4f:c9:68:98:b4:
                    3b:c8:b7:0f:e5:3d:36:32:f0:8c:69:57:ad:90:85:
                    95:6a:c3:ac:a8:eb:68:d6:2c:7e:4b:4c:ea:ca:77:
                    a9:94:9c:d3:76:e1:7a:2e:99:c7:7e:47:ed:dd:3b:
                    1a:b7:a9:a8:23:bf:83:03:63:79:e4:21:7b:63:19:
                    66:f3:fe:06:1b:61:59:c7:74:24:6c:cb:86:c7:38:
                    56:6c:b5:10:2f:58:b3:67:12:d8:97:57:07:19:42:
                    a0:8a:16:72:dd:57:32:cb:85:64:16:e4:eb:9d:5a:
                    03:8e:73:48:f6:eb:11:81:89:a8:cb:45:aa:99:93:
                    b1:7d:a6:32:ae:1a:30:a7:20:3d:d0:be:eb:89:c9:
                    48:f1:c7:0a:e0:de:1e:83:86:2e:34:2c:39:c9:69:
                    e6:ce:ae:5f:6e:9b:c6:be:40:b9:05:16:07:e0:b1:
                    20:1e:d3:28:59:bb:48:f3:b8:5d:48:7b:dd:8c:a9:
                    f2:76:26:3a:cd:f8:c0:8c:48:92:fd:9c:03:64:fd:
                    9c:26:62:91:13:a3:55:1f:d5:2d:30:41:e7:c7:34:
                    07:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:40:CB:81:07:80:BD:70:3B:33:39:C3:FC:F7:FB:1C:27:60:24:B1
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7597821E0BD611F1AB419EC22E3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:e220::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:5d:42:0c:23:3e:c4:d4:d8:b0:38:ab:7d:16:1e:38:a6:1b:
         a1:d2:75:57:b5:91:72:9a:fc:54:15:ed:8f:3c:44:b4:62:28:
         46:8b:55:c2:39:72:5f:33:0e:f8:88:d8:83:9c:df:f5:e3:cb:
         f6:35:d8:29:5f:3e:be:56:5b:fc:88:c3:4c:0f:ae:72:9e:40:
         32:9c:0d:56:ae:a4:78:82:32:95:3d:70:9a:94:de:fc:00:4a:
         9e:b0:d0:e4:0d:c9:ae:22:01:c0:50:6e:ea:4d:5c:06:c9:e4:
         06:fa:ad:6c:94:55:fc:21:1d:b6:ba:cb:20:45:87:96:c8:0d:
         2d:88:8d:55:2c:d7:c7:4e:e7:8e:2b:67:f3:68:c3:2a:70:9f:
         6f:a0:98:a0:bf:c0:3f:1b:16:74:a3:01:0e:5a:eb:cf:87:0e:
         7b:2b:d1:1c:52:b6:b5:5a:b4:96:72:10:5c:50:45:06:0e:9c:
         26:e5:b6:58:b0:e0:b8:6b:2e:a3:0c:27:33:f4:c9:c8:d3:33:
         2e:1a:6b:0b:a9:a1:1a:86:20:2a:8a:c6:d8:c0:bd:45:8d:fe:
         31:f5:19:bf:b0:cb:71:49:74:78:b3:12:a0:6d:f3:0c:eb:c2:
         c3:8b:92:bd:e7:5d:bd:59:b4:41:ab:ae:6d:da:86:89:db:56:
         a6:69:5b:31
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIDAPaRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3NDMwM1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmU5MjctZDJmODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALppoaHi2h60UC7+ACPqMBdOLZJX9p34Di4z1VHCHI8Z+gJdeRIYFU/JaJi0
O8i3D+U9NjLwjGlXrZCFlWrDrKjraNYsfktM6sp3qZSc03bhei6Zx35H7d07Grep
qCO/gwNjeeQhe2MZZvP+BhthWcd0JGzLhsc4Vmy1EC9Ys2cS2JdXBxlCoIoWct1X
MsuFZBbk651aA45zSPbrEYGJqMtFqpmTsX2mMq4aMKcgPdC+64nJSPHHCuDeHoOG
LjQsOclp5s6uX26bxr5AuQUWB+CxIB7TKFm7SPO4XUh73Yyp8nYmOs34wIxIkv2c
A2T9nCZikROjVR/VLTBB58c0B3ECAwEAAaOCAmEwggJdMB0GA1UdDgQWBBR0QMuB
B4C9cDszOcP89/scJ2AksTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzc1OTc4MjFF
MEJENjExRjFBQjQxOUVDMjJFM0Q4QzY3LnJvYTAgBggrBgEFBQcBBwEB/wQRMA8w
DQQCAAIwBwMFACQB4iAwDQYJKoZIhvcNAQELBQADggEBACFdQgwjPsTU2LA4q30W
HjimG6HSdVe1kXKa/FQV7Y88RLRiKEaLVcI5cl8zDviI2IOc3/Xjy/Y12ClfPr5W
W/yIw0wPrnKeQDKcDVaupHiCMpU9cJqU3vwASp6w0OQNya4iAcBQbupNXAbJ5Ab6
rWyUVfwhHba6yyBFh5bIDS2IjVUs18dO544rZ/Nowypwn2+gmKC/wD8bFnSjAQ5a
68+HDnsr0RxStrVatJZyEFxQRQYOnCbltliw4LhrLqMMJzP0ycjTMy4aawupoRqG
ICqKxtjAvUWN/jH1Gb+wy3FJdHizEqBt8wzrwsOLkr3nXb1ZtEGrrm3ahonbVqZp
WzE=
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:58:06 2026 by rpki-client