Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8B1BFFAEB94F11F099382719C4F9AE02.roa
File:                     8B1BFFAEB94F11F099382719C4F9AE02.roa (raw, json)
Hash identifier:          xdqqyz0XFATbU5aEyBmnTLQptQKzL62/6hf0J7LtVas=
Subject key identifier:   BC:A1:D7:65:E0:06:A4:78:C7:F1:DC:0B:B9:96:45:8D:7F:CD:47:EC
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EADF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8B1BFFAEB94F11F099382719C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:47:35 +0000
ROA not before:           Sun 31 May 2026 17:47:35 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     154298
IP address blocks:        2402:31a0::/48 maxlen: 48
                          2402:31a0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 09:04:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60127 (0xeadf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:47:35 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7436-aa2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b5:fd:26:93:40:f0:07:1a:35:9f:ff:d0:17:
                    77:cf:96:5d:7b:8c:6e:a5:c7:16:2a:df:14:a2:65:
                    56:ff:81:08:b2:6f:d8:13:c1:0b:89:6d:15:06:49:
                    fa:e7:a1:9b:98:70:42:c3:5a:54:f1:43:70:5c:ae:
                    7b:4b:db:c7:5c:d7:df:c4:1b:0b:fa:87:4d:83:00:
                    33:07:37:5d:09:03:ae:41:85:cd:fe:69:3e:cb:a7:
                    06:f4:dd:0d:e5:4c:80:ba:b7:1a:46:0d:a0:bb:12:
                    72:2a:39:b9:55:84:13:f6:ce:bd:f0:1a:60:dd:cd:
                    57:97:58:19:9c:f6:8e:4c:c7:c6:a3:d5:c1:2e:20:
                    33:da:77:9f:a6:1f:a9:fb:9a:27:f5:b5:8b:71:b5:
                    47:4d:60:d5:e6:27:e8:c7:6a:51:66:73:0f:87:59:
                    a3:7e:02:ad:9e:01:b2:bb:e1:61:0b:dc:22:aa:b8:
                    67:db:51:83:e2:58:86:fd:a6:b4:e1:43:60:55:18:
                    8e:cb:cc:5e:04:bb:9e:47:00:0c:57:b8:0f:17:76:
                    9d:fb:14:ee:a8:ba:01:ac:6c:5c:31:8c:a7:24:4c:
                    85:18:38:d2:51:a7:ed:5a:8f:9e:c5:61:fd:40:ae:
                    39:26:9e:b4:ee:a1:7d:4d:10:3e:e3:45:4a:c1:81:
                    cf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A1:D7:65:E0:06:A4:78:C7:F1:DC:0B:B9:96:45:8D:7F:CD:47:EC
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/8B1BFFAEB94F11F099382719C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:31a0::/47

    Signature Algorithm: sha256WithRSAEncryption
         2e:8d:6c:11:31:40:f2:9f:5c:4e:1b:47:61:b4:76:ec:63:12:
         5e:9c:e7:c3:7a:c3:17:8a:f4:b0:f0:93:b4:2b:3f:6c:e4:12:
         f7:28:bb:92:04:a9:2d:6b:0b:94:23:58:43:88:b3:6b:71:84:
         42:2e:5f:4d:c5:4a:22:14:66:14:a7:32:da:50:63:3a:55:0b:
         06:f9:b1:bb:0e:8a:62:8d:bf:cf:ed:19:f7:4f:39:13:3f:9c:
         f8:1e:e6:0a:4b:c0:4c:1d:b1:86:11:c7:fe:f5:2e:07:87:03:
         c4:88:0f:70:d8:49:c7:58:b1:5f:06:3f:8e:33:03:05:02:3b:
         b1:5c:9f:5c:ee:96:9e:ec:ac:de:28:0b:b2:f0:93:f1:5d:90:
         1d:13:87:b0:ce:d7:71:fb:a7:cf:9b:8d:3a:7b:fa:11:26:2b:
         86:bb:bf:69:60:7b:80:61:39:f4:60:cc:ed:6e:ce:88:57:f0:
         d8:59:2b:1a:f6:81:fc:f0:f5:7f:73:9c:74:81:65:bd:13:b8:
         41:2a:32:b4:f5:bf:46:b2:68:fd:50:78:af:5d:61:61:24:1b:
         6a:20:49:b7:fb:02:6c:c0:92:27:a4:fc:0d:a2:18:0b:05:8a:
         81:a8:3c:39:10:3c:01:77:e6:6b:73:53:dc:ac:0a:d2:b9:98:
         1b:ae:46:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:14:25 2026 by rpki-client