Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82D4CB6666BE11F0B34BB550C4F9AE02.roa
File:                     82D4CB6666BE11F0B34BB550C4F9AE02.roa (raw, json)
Hash identifier:          5/3DrvNHeBkFQTxiwWunXdhaf3TNp725P82+XZWHq7Q=
Subject key identifier:   AF:6F:BC:68:16:E1:DE:DD:3B:A6:CC:48:A2:DF:0B:0A:67:A8:E4:B8
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F6E2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82D4CB6666BE11F0B34BB550C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:45:47 +0000
ROA not before:           Mon 06 Jul 2026 17:45:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154069
IP address blocks:        2402:1a20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63202 (0xf6e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:45:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be9cb-37cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1d:81:c6:7c:b8:32:e2:ee:e5:4c:d2:8e:a9:
                    31:24:cf:9b:6a:a0:5f:7c:6d:ff:ea:e7:79:ef:f0:
                    31:47:5e:98:5e:0a:4e:a6:bf:39:06:5e:96:35:e0:
                    91:17:17:f8:fe:1c:29:1b:3b:6e:5c:4b:b1:fb:fa:
                    fe:6b:dd:03:34:b6:fd:d5:06:e8:9e:14:ba:d8:0e:
                    fc:fc:07:70:bc:d8:31:e4:94:0e:e4:df:88:44:ea:
                    b2:38:fb:c6:e1:b3:25:af:64:15:5c:13:43:b3:82:
                    74:30:e6:e2:17:81:6f:8e:09:cd:6f:73:0b:67:3b:
                    72:82:13:6e:ce:ad:e0:f6:fc:0a:1e:ae:ae:06:34:
                    3e:89:f4:16:3e:7c:71:31:ca:f7:87:c9:10:5d:8c:
                    25:2d:fe:93:e1:04:8f:68:99:3a:b0:8a:c6:32:a6:
                    a1:c9:cc:47:61:2a:67:0b:7f:06:6e:ea:7e:ef:68:
                    eb:46:1e:a8:54:0a:bc:56:c5:76:5f:0a:8f:36:a2:
                    6d:92:68:cc:c3:5d:0f:3d:69:91:b8:b2:17:b6:ce:
                    7a:5f:48:55:04:29:38:1b:9b:15:72:3b:cd:af:fb:
                    60:fc:a6:ab:95:c6:fc:a3:6c:4c:89:36:a6:cf:93:
                    f9:f7:52:f7:28:62:73:15:e1:27:43:41:e9:7a:1b:
                    b4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:6F:BC:68:16:E1:DE:DD:3B:A6:CC:48:A2:DF:0B:0A:67:A8:E4:B8
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/82D4CB6666BE11F0B34BB550C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1a20::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:f0:89:cd:d1:7c:c2:07:d7:5d:02:85:e1:c6:f6:53:90:c7:
         1c:29:97:74:7b:90:b2:7b:14:7d:73:d8:63:87:28:d9:18:d9:
         e2:6c:ed:87:1b:75:18:fa:19:08:54:e2:03:70:54:57:ce:4b:
         1d:45:96:be:cb:96:25:84:10:7b:6e:da:c7:6c:05:92:dd:8b:
         00:a9:8d:79:be:a6:fb:3e:6c:c0:0c:fb:ba:fd:ab:be:a5:fe:
         91:45:ad:1a:9e:9e:2c:7f:d5:e9:b4:13:ad:a2:60:36:10:6c:
         48:b3:ef:a9:26:84:7d:f6:ef:e7:60:f1:c4:07:3b:df:ee:ce:
         73:37:b6:7e:76:18:02:fd:be:37:30:03:43:78:b4:02:a4:be:
         e3:7c:a5:01:91:e1:14:c3:3a:77:5f:01:ae:78:d1:5d:5c:22:
         37:d1:13:e5:75:d1:9e:fe:d2:a7:20:7f:00:a2:26:37:1d:24:
         ab:93:73:4d:7d:46:ea:59:6a:81:46:1c:5e:10:0c:5f:e3:33:
         8e:18:0e:6d:08:a2:1d:0c:89:4a:9b:2c:ef:d1:5f:6a:c3:2c:
         74:17:41:f4:37:48:e4:50:d1:31:dc:36:78:af:14:5e:cd:64:
         fe:35:3d:38:9e:bb:fe:d8:68:da:84:a1:ae:03:5e:fa:71:98:
         1a:f2:64:b9
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIDAPbiMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3NDU0N1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmU5Y2ItMzdjZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAK0dgcZ8uDLi7uVM0o6pMSTPm2qgX3xt/+rnee/wMUdemF4KTqa/OQZeljXg
kRcX+P4cKRs7blxLsfv6/mvdAzS2/dUG6J4UutgO/PwHcLzYMeSUDuTfiETqsjj7
xuGzJa9kFVwTQ7OCdDDm4heBb44JzW9zC2c7coITbs6t4Pb8Ch6urgY0Pon0Fj58
cTHK94fJEF2MJS3+k+EEj2iZOrCKxjKmocnMR2EqZwt/Bm7qfu9o60YeqFQKvFbF
dl8KjzaibZJozMNdDz1pkbiyF7bOel9IVQQpOBubFXI7za/7YPymq5XG/KNsTIk2
ps+T+fdS9yhicxXhJ0NB6XobtOsCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBSvb7xo
FuHe3TumzEii3wsKZ6jkuDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzgyRDRDQjY2
NjZCRTExRjBCMzRCQjU1MEM0RjlBRTAyLnJvYTAgBggrBgEFBQcBBwEB/wQRMA8w
DQQCAAIwBwMFACQCGiAwDQYJKoZIhvcNAQELBQADggEBAGnwic3RfMIH110CheHG
9lOQxxwpl3R7kLJ7FH1z2GOHKNkY2eJs7YcbdRj6GQhU4gNwVFfOSx1Flr7LliWE
EHtu2sdsBZLdiwCpjXm+pvs+bMAM+7r9q76l/pFFrRqenix/1em0E62iYDYQbEiz
76kmhH327+dg8cQHO9/uznM3tn52GAL9vjcwA0N4tAKkvuN8pQGR4RTDOndfAa54
0V1cIjfRE+V10Z7+0qcgfwCiJjcdJKuTc019RupZaoFGHF4QDF/jM44YDm0Ioh0M
iUqbLO/RX2rDLHQXQfQ3SORQ0THcNnivFF7NZP41PTieu/7YaNqEoa4DXvpxmBry
ZLk=
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:58:09 2026 by rpki-client