Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9DBC65C6FE8D11F0B80832995C6F56BC.roa
File:                     9DBC65C6FE8D11F0B80832995C6F56BC.roa (raw, json)
Hash identifier:          UpS4DpEmnA3Jm9e0Z1agVaqpjZXGvgBtnrGNEceEjwA=
Subject key identifier:   77:A7:0E:FA:78:B5:E9:DD:52:49:41:F6:3D:34:B6:2A:0E:12:61:EF
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F294
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9DBC65C6FE8D11F0B80832995C6F56BC.roa
Signing time:             Mon 06 Jul 2026 17:09:11 +0000
ROA not before:           Mon 06 Jul 2026 17:09:11 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     140131
IP address blocks:        2001:df1:9c40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62100 (0xf294)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:09:11 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be137-7fd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ae:e0:b4:ac:db:6c:30:b6:87:db:e8:07:0f:
                    e4:8f:35:47:fa:45:71:6b:42:53:cc:88:27:e8:65:
                    25:96:4c:4c:5f:58:3b:d5:6a:04:56:a6:33:a4:a3:
                    ac:3e:23:1f:91:4b:9f:b5:94:6e:b6:c9:86:2c:64:
                    70:06:fa:74:66:58:19:4f:e5:73:90:55:51:f6:68:
                    52:48:9c:65:4e:67:1d:78:50:b7:e8:c6:3d:4c:bf:
                    59:ad:d7:aa:61:c7:8a:3f:ed:d3:7f:ff:19:8c:d0:
                    f7:e3:89:c8:44:4b:d1:ab:d5:50:36:fd:e5:72:e8:
                    38:52:60:f7:58:bf:39:91:5e:ed:db:05:97:16:7c:
                    05:90:23:1e:7f:2d:9f:30:37:f1:d9:80:22:53:51:
                    4e:8b:b8:47:51:d6:db:75:50:ae:cc:ff:b5:5c:9a:
                    af:40:b6:9a:02:82:d0:0a:cc:de:11:a0:3e:7e:ac:
                    3c:6e:3d:61:65:e2:41:3c:59:45:8c:a0:f2:f7:c3:
                    0d:78:81:23:a7:61:86:a5:8b:32:f3:b6:9a:5a:df:
                    f6:a6:f0:30:ec:b2:8c:68:ce:8b:01:e5:04:6a:77:
                    17:03:b2:19:86:f1:f6:4e:ee:10:62:08:fe:b2:db:
                    34:10:d3:9d:63:13:e2:f3:ac:69:fa:06:5e:0a:8d:
                    0e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:A7:0E:FA:78:B5:E9:DD:52:49:41:F6:3D:34:B6:2A:0E:12:61:EF
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/9DBC65C6FE8D11F0B80832995C6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:9c40::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:95:49:dd:04:c3:3d:f6:69:16:ea:c1:da:aa:13:1c:33:ea:
         6d:01:2d:6c:76:69:8e:d9:4f:0a:46:02:2d:7f:89:ba:f8:a0:
         5b:60:48:57:7f:be:63:84:22:65:46:60:57:aa:f3:dc:a8:6a:
         78:a2:33:fd:a9:8c:35:2e:83:95:0a:ca:8c:e9:bf:59:5a:63:
         ff:00:75:84:4d:05:23:78:2d:ed:69:c6:c1:ab:ff:15:52:5c:
         3f:e6:d3:e3:d1:58:40:b4:4c:86:28:dc:a4:1c:ce:0b:9f:5b:
         9b:19:96:49:3d:a9:a5:58:40:7d:8f:9f:78:3e:9e:d6:db:49:
         b2:12:4d:4d:32:52:08:c2:98:7c:58:a8:5f:16:d4:df:d7:c4:
         cb:0d:e9:a3:2d:cb:28:96:45:8b:76:af:8b:82:88:17:e3:c1:
         7a:58:90:42:84:bc:5c:76:f0:88:04:0c:a0:f2:54:8d:fb:f2:
         32:12:03:fd:b8:80:e8:ec:99:ad:84:84:c1:14:06:95:68:37:
         b0:47:e6:34:72:95:24:1f:c7:12:10:96:4b:89:d9:5e:86:cd:
         da:9f:e5:9c:4e:43:a5:f8:89:ef:4e:59:0c:e0:72:f1:30:69:
         49:9e:18:84:9b:e0:87:3f:76:c0:a8:f6:d0:2a:55:47:b1:8a:
         f3:60:5f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:21:15 2026 by rpki-client