Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83AF3E1A1C1211EFAD06D26DC4F9AE02.roa
File:                     83AF3E1A1C1211EFAD06D26DC4F9AE02.roa (raw, json)
Hash identifier:          OYZnlRIvXBzadNqMhjaINa2evXyO3+2Q5gjaqQEA7vE=
Subject key identifier:   82:B7:6D:48:45:9F:75:49:EC:EC:F6:7E:3F:12:EB:40:48:D9:13:D0
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F664
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83AF3E1A1C1211EFAD06D26DC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:41:34 +0000
ROA not before:           Mon 06 Jul 2026 17:41:34 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     152533
IP address blocks:        2400:4f20::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63076 (0xf664)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:41:34 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be8ce-e54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9d:6b:ad:ff:4e:62:bf:b6:c7:08:b2:19:59:
                    8a:93:e5:b4:94:b4:8e:3b:1f:a1:b3:ca:50:3f:7b:
                    2c:b6:f6:f3:3f:16:0c:dd:7a:30:c5:80:a5:57:d8:
                    3b:a3:7d:1b:b4:8d:04:20:e1:da:9f:f3:79:f1:ed:
                    d2:d1:0c:73:9f:87:06:95:5e:16:5c:ca:fc:76:5b:
                    7a:77:26:a3:c3:55:e8:ef:a2:7e:1c:a1:e7:45:74:
                    0d:a6:d5:b6:f2:e9:76:46:1b:fa:f6:d6:37:b1:72:
                    38:1e:95:d6:1c:6f:88:71:0b:5a:49:e8:58:26:1e:
                    d2:e8:31:91:a2:da:a8:e3:67:27:e1:55:2b:2d:0a:
                    a6:0b:bb:13:6e:91:c9:da:1d:b7:d9:2c:e8:34:f6:
                    62:23:61:36:9e:21:3a:1b:62:0e:90:85:c9:1b:b7:
                    66:84:e2:db:44:1d:e6:de:fd:db:65:4a:ba:a7:0c:
                    f1:a4:a0:9b:af:d7:65:af:f3:b1:81:a5:72:18:dd:
                    42:20:d4:58:89:ba:68:93:64:b8:43:bd:ac:c1:56:
                    15:9b:e6:4a:2a:0e:7b:bf:18:63:9d:60:38:1b:92:
                    78:55:ed:e5:84:e7:a6:d7:0c:98:00:e4:57:bf:a4:
                    21:77:19:0a:5c:f4:83:c2:01:c2:9e:7c:a2:04:c6:
                    03:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B7:6D:48:45:9F:75:49:EC:EC:F6:7E:3F:12:EB:40:48:D9:13:D0
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/83AF3E1A1C1211EFAD06D26DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:4f20::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:cd:91:ab:f4:06:56:1d:f8:5a:1c:ff:b3:1d:3c:da:7b:70:
         f8:5e:9d:b3:1e:10:b0:0b:f0:63:22:ae:ce:02:9e:3c:4b:d8:
         07:b5:70:71:cb:af:9e:0b:d4:32:0b:2a:3c:d7:db:8d:3e:89:
         fd:c0:dd:85:3c:40:45:84:ee:78:3b:04:04:5d:c2:c9:bc:9c:
         9a:cd:3f:53:4f:59:ff:c4:2f:aa:52:ef:bf:db:dd:2f:91:db:
         ca:52:85:f7:37:85:7f:bd:f1:34:55:e0:49:bb:18:47:54:57:
         b4:0f:56:af:25:97:b7:96:1b:6e:7b:33:d1:32:f7:1d:d0:ef:
         dc:34:b5:f1:e7:9c:5a:87:d9:4b:51:32:23:4c:32:3b:fe:ab:
         d0:56:08:16:6a:00:a6:b4:1f:2a:42:cb:0c:cf:a9:4d:54:88:
         9e:d4:98:b7:bf:c0:b7:b0:b4:50:fa:9a:50:40:11:5c:dc:63:
         88:be:cc:32:b6:22:84:b1:91:56:44:78:e2:2e:de:27:01:4a:
         a6:9b:5b:6f:57:32:b4:60:b5:0d:fa:fe:b2:c3:0d:a2:b7:31:
         39:af:19:1a:95:97:b3:6f:04:2e:95:d7:7e:19:b9:03:37:dd:
         a8:ba:ae:4a:b0:07:e9:9b:fb:cf:97:7a:e2:c3:0c:ea:4a:b5:
         bf:80:17:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:19 2026 by rpki-client