Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7F95C2205E2111F08BF3D883C4F9AE02.roa
File:                     7F95C2205E2111F08BF3D883C4F9AE02.roa (raw, json)
Hash identifier:          c/2pB9BWNEa5jyG9lB3RZfDXEkwOglS1J8svTzsmRfo=
Subject key identifier:   33:7E:48:07:34:7A:28:80:BE:51:AF:60:3A:45:9F:07:46:28:F6:85
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EABD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7F95C2205E2111F08BF3D883C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:46:31 +0000
ROA not before:           Sun 31 May 2026 17:46:31 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     154043
IP address blocks:        2402:1620::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60093 (0xeabd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:46:31 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c73f7-253a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:1c:a2:4e:1f:c0:5a:f7:68:eb:cb:75:ba:7e:
                    9b:f5:62:85:d7:e1:60:d1:13:61:06:35:0f:0c:a6:
                    d8:d7:26:3e:2a:1d:1e:58:9d:29:9f:75:e8:4a:0f:
                    10:b8:57:87:2a:7f:ae:51:c8:20:aa:84:cb:02:af:
                    c2:97:29:c3:92:cc:af:0e:eb:40:42:e5:23:a9:87:
                    dc:bf:17:73:2b:bb:54:65:94:67:ad:7c:e4:5d:90:
                    17:9b:53:47:71:04:9c:ce:3c:58:49:43:c8:64:00:
                    11:cf:d8:0a:35:c3:fb:d6:01:0e:50:2b:a1:b6:22:
                    c1:ac:c2:a5:62:fe:a1:67:65:22:93:3b:87:5a:61:
                    1f:b4:d2:bc:e8:a5:be:35:cd:e7:3b:52:d6:2c:53:
                    42:8e:98:3f:ec:91:b2:8d:8f:e9:c9:38:27:61:d8:
                    93:c8:e7:68:45:fa:a1:93:2a:de:49:bd:22:8c:84:
                    81:65:31:ed:86:bc:ce:29:28:c7:fd:f0:df:8b:32:
                    99:cf:99:68:ee:33:e3:80:cd:99:24:06:ea:f1:9f:
                    a1:7f:f0:80:47:74:86:d1:d2:a4:df:1b:84:8c:19:
                    78:5b:c9:e4:b3:69:c9:b0:c4:e2:2f:11:f7:7d:a0:
                    b8:3d:a9:fc:13:a3:eb:11:fc:34:32:99:8b:ab:13:
                    ee:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7E:48:07:34:7A:28:80:BE:51:AF:60:3A:45:9F:07:46:28:F6:85
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7F95C2205E2111F08BF3D883C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1620::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:5a:63:94:1a:ee:e8:a6:e7:68:61:c8:0e:24:a1:cb:28:ac:
         a6:aa:9b:d1:2d:44:b6:ca:dc:33:33:f8:3b:bd:4f:e9:e1:90:
         b5:33:3f:3a:8a:e0:7f:40:bc:58:48:d1:de:1d:a9:ad:48:65:
         4a:27:dd:29:ae:2c:7d:3c:4a:f2:29:b0:55:95:38:b6:7f:e9:
         84:7e:3b:c7:64:04:b0:2a:cd:3c:c6:d7:90:64:45:19:5b:ef:
         c7:9b:08:38:01:fa:41:fd:7a:a0:85:0e:49:8b:84:1d:30:7f:
         a3:ec:f0:8c:d8:a8:1c:3d:a3:4e:13:89:b1:f0:23:f3:2f:6e:
         0f:3f:ee:01:00:ca:93:2e:eb:86:d3:d6:c5:a9:bf:2a:5f:d4:
         ae:b0:34:99:20:1a:56:0a:f4:f9:e2:e1:97:a2:11:24:06:c1:
         89:ad:46:75:2c:78:e6:92:3a:4a:8e:57:86:4e:5a:b0:ea:59:
         fe:2a:48:f1:8c:bd:90:ae:be:03:0b:d0:55:8a:b5:60:4b:09:
         2f:c0:a0:7a:68:bc:64:85:43:82:01:e8:66:bf:b8:b5:cf:0c:
         0d:a3:d8:cc:77:ca:ce:3e:8a:25:9d:ee:1b:a1:7d:11:3e:b1:
         95:00:2e:c8:89:27:fa:eb:93:e9:c6:15:1a:fc:6d:6f:bb:d1:
         69:03:9e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:55 2026 by rpki-client