Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9964ACAACBFC11EFB0D4E371C4F9AE02.roa
File:                     9964ACAACBFC11EFB0D4E371C4F9AE02.roa (raw, json)
Hash identifier:          KYpj709ti2EFENl6Ds6TLpdIT1wT7Yg1VRFEipV5NLg=
Subject key identifier:   DA:B5:DF:85:F1:8C:B7:C9:B3:DE:9B:27:46:30:AD:DA:D7:60:B8:C1
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EA38
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9964ACAACBFC11EFB0D4E371C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:42:23 +0000
ROA not before:           Sun 31 May 2026 17:42:23 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     152509
IP address blocks:        2401:b320::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59960 (0xea38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:42:23 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c72ff-103c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e0:2e:48:9d:0d:67:f4:fb:b3:d3:6b:f8:55:
                    da:bc:da:e7:01:bc:d1:27:3c:7f:20:da:e6:b4:93:
                    95:31:6b:78:2a:2c:04:bf:d2:43:d5:0d:07:57:c6:
                    78:c8:40:05:ad:c5:48:88:87:0c:bd:17:db:5d:4b:
                    a6:14:59:7a:39:84:ea:ad:3f:27:f7:36:e3:55:3c:
                    15:c6:62:d2:5b:7d:fa:8d:b2:29:9d:15:de:4a:52:
                    40:c8:1f:c4:a4:e9:db:fd:66:d4:6c:18:26:22:3f:
                    a4:48:56:6b:5f:ab:4c:e8:55:28:5a:24:e3:98:12:
                    c7:a9:31:75:dd:4e:77:28:1c:c2:72:37:af:a8:67:
                    43:4e:3a:28:27:bd:e7:3b:9a:ed:cc:44:79:8e:15:
                    e1:8d:4a:2f:b0:de:a8:95:2c:16:e4:62:36:ae:50:
                    c5:1b:a3:df:3e:03:23:eb:3f:23:79:eb:c2:57:80:
                    6b:7a:72:ff:02:17:69:46:ac:e0:3d:67:f7:2f:05:
                    39:d9:6b:8f:d2:9f:d0:3f:0f:cb:e5:db:4c:62:a3:
                    11:61:a7:86:20:6f:cf:06:22:e8:3d:6c:4e:12:49:
                    d7:1e:c7:82:f0:65:0e:2a:58:0d:c6:52:11:6c:ce:
                    85:f5:60:5e:9b:75:67:a7:81:b7:a3:fd:2e:91:8f:
                    73:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B5:DF:85:F1:8C:B7:C9:B3:DE:9B:27:46:30:AD:DA:D7:60:B8:C1
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9964ACAACBFC11EFB0D4E371C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b320::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:30:bd:c5:81:36:bb:ad:7a:9f:92:7d:a1:6c:21:95:f1:03:
         8e:10:88:3c:45:f4:4a:d8:3e:81:c0:2b:21:ea:d2:ac:a2:df:
         2c:40:27:af:92:67:24:0b:a6:0c:10:9a:00:f1:f8:31:42:7e:
         2f:74:a4:6c:09:c4:d9:8c:59:19:b7:53:db:7b:f4:9d:82:b0:
         36:62:0a:f8:c8:83:5d:6e:ee:a8:1e:ee:a4:0f:08:66:69:3b:
         95:eb:84:9e:f2:be:e0:c1:36:a5:28:66:85:be:d0:70:4c:84:
         35:c5:a1:68:bf:19:ee:a9:65:d7:e3:5d:6d:1d:86:40:e6:ed:
         1e:a9:e3:09:ff:e0:d7:bf:e7:f5:21:b7:f3:c3:cf:bb:89:5c:
         b8:ef:39:28:db:96:6c:05:5b:e6:7c:3f:be:37:99:97:dc:07:
         03:6c:b8:42:d2:7d:0c:bd:02:36:11:9a:73:c4:50:84:27:e9:
         b9:8f:78:71:40:4b:5a:b5:96:b4:49:ef:a5:ff:38:04:be:43:
         30:54:e5:0b:7d:ce:6d:79:94:23:8c:33:d0:9f:a8:e6:85:09:
         c8:4b:c2:f5:0f:c0:59:20:42:10:59:07:b4:b6:6c:c8:02:10:
         ca:6a:f1:5e:bb:42:f3:55:de:45:48:8b:47:9f:11:6e:36:45:
         20:87:73:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:17 2026 by rpki-client