Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7874A15AAEAB11EDAC77C14DC4F9AE02.roa
File:                     7874A15AAEAB11EDAC77C14DC4F9AE02.roa (raw, json)
Hash identifier:          uoJIW3Xn/cRDxUXSUlg27kXDuL2/M1RifKKXGtYzl/w=
Subject key identifier:   97:3F:78:F1:4B:F3:5D:4B:38:BC:BE:DF:8C:8B:1A:9E:AD:22:A4:91
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E270
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7874A15AAEAB11EDAC77C14DC4F9AE02.roa
Signing time:             Sun 31 May 2026 16:37:13 +0000
ROA not before:           Sun 31 May 2026 16:37:13 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     133306
IP address blocks:        2402:740:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 09:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57968 (0xe270)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:37:13 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c63b9-1c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:98:14:5b:89:28:1a:43:7e:c4:5b:b1:0c:db:
                    59:dc:e5:ec:bf:2c:cf:6f:76:bc:5e:6e:b6:f5:16:
                    f9:91:2b:bb:28:cc:43:82:61:58:1e:c4:e1:68:7d:
                    78:d3:6a:21:d0:eb:c5:92:bd:84:17:50:33:7b:24:
                    48:3b:c9:33:49:65:7f:82:06:1a:e9:22:f1:0f:88:
                    77:54:fe:95:e8:c3:3c:fc:19:31:b4:ba:ff:f0:de:
                    bb:f0:6b:83:d6:7f:07:95:6d:b3:cc:94:1b:fa:07:
                    18:6b:a4:40:62:86:7b:72:2c:bf:bd:ae:9c:c3:05:
                    7d:ed:ac:3a:ce:e8:b1:b3:09:a7:b6:cf:d7:e0:73:
                    59:b5:1f:41:17:c7:6a:88:a1:0c:5d:ea:c1:cf:81:
                    3b:07:d6:7f:8c:06:44:3c:d0:9e:72:83:b9:58:42:
                    3d:f9:15:29:95:2d:45:89:8c:d5:08:88:b8:16:fc:
                    4b:46:39:a8:69:d2:30:67:84:fe:87:2b:32:e0:8e:
                    d6:12:bb:23:4a:f4:57:fc:e7:77:ac:d9:64:d1:50:
                    a5:73:34:db:ae:78:65:96:91:dc:e9:34:2b:7c:3f:
                    96:ff:49:36:e1:f5:c9:d1:56:fc:53:c2:7a:ae:ab:
                    ce:82:49:49:c8:83:b5:78:f2:91:19:60:19:2a:6b:
                    fe:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3F:78:F1:4B:F3:5D:4B:38:BC:BE:DF:8C:8B:1A:9E:AD:22:A4:91
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7874A15AAEAB11EDAC77C14DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:740:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:0f:c8:24:f3:9a:0a:b6:76:30:6d:c7:05:aa:ad:c7:e4:61:
         e7:1e:32:c1:4b:6b:1a:61:4d:8e:09:8f:fe:47:cd:80:96:4d:
         4f:39:ee:06:68:dc:b1:e1:26:49:d3:ee:8a:7d:99:3b:cf:39:
         27:af:a6:55:18:9e:fc:1d:99:9a:59:23:b9:15:01:bc:e6:79:
         68:c8:2c:92:cc:f6:04:cd:68:5f:0f:22:f6:6a:97:32:85:2e:
         84:4f:3c:4c:f4:7b:ce:6b:8d:4d:ec:e5:39:87:4c:c8:ed:98:
         92:61:85:e5:50:a3:bd:b8:91:9a:14:11:cd:23:f1:54:d7:30:
         e9:5f:dd:ac:4f:a4:16:68:7a:5a:d8:63:70:a1:28:7b:5f:cf:
         bf:4d:27:88:4f:5f:3a:1d:97:bc:61:8a:bd:f2:73:47:85:f4:
         ca:9e:9c:7c:18:e2:4e:4b:81:cb:f4:4e:55:3f:dc:21:19:be:
         6a:03:a3:1b:1c:fa:ad:18:73:51:b3:ac:c8:6f:da:e1:1d:08:
         dc:2a:ac:56:6a:95:e9:eb:b8:e4:9a:23:ae:4d:63:30:bf:bd:
         9c:02:08:ab:13:05:2b:f2:19:e7:56:09:7d:d4:cf:8f:be:e9:
         73:4f:39:6d:8b:ae:a7:1d:cc:61:4d:1e:a3:85:79:a8:be:ae:
         12:05:bf:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:17:40 2026 by rpki-client