Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A0E496B624D511F0BD77200BC4F9AE02.roa
File:                     A0E496B624D511F0BD77200BC4F9AE02.roa (raw, json)
Hash identifier:          hUae6GG4r11bNvfnjvtx2UEPGQLZhoga/Qcly66k9uc=
Subject key identifier:   B1:7B:42:6D:20:0A:98:27:03:07:CB:05:BB:38:7B:E7:B9:D1:34:0E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F1ED
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A0E496B624D511F0BD77200BC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:03:39 +0000
ROA not before:           Mon 06 Jul 2026 17:03:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138302
IP address blocks:        2001:df4:4040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61933 (0xf1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:03:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdfeb-0f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0d:ee:fc:31:8d:e4:4f:d1:dc:e8:88:f2:98:
                    41:d5:63:17:c1:00:a7:67:04:09:74:8c:7c:1a:44:
                    1d:b3:ed:88:c0:05:c3:b0:32:7b:00:52:af:ac:a0:
                    0e:de:8a:cf:74:dc:21:fa:f3:be:2b:82:d9:10:d4:
                    ae:1b:4e:14:e1:01:ae:32:40:45:f2:49:05:f1:62:
                    5d:19:1d:52:89:1f:9b:20:4f:da:f5:99:a7:64:7f:
                    aa:95:f9:8c:12:6d:58:7a:a1:0b:fd:21:6c:9f:ec:
                    ab:78:90:bf:35:69:3e:0b:5e:f7:3f:6c:3f:ce:85:
                    b4:9b:5d:9f:b6:79:9e:eb:e1:b1:3b:09:7f:6f:2c:
                    7f:fb:00:00:26:50:f1:f2:16:d2:25:5a:bf:ad:55:
                    ba:26:f7:36:a9:61:85:a6:c2:bd:b5:bd:5b:05:03:
                    e5:8c:9a:6e:6a:6d:c2:43:3f:83:27:fc:60:f4:ad:
                    b2:05:f0:49:af:f4:83:82:03:74:90:a9:4a:37:3b:
                    02:52:5f:a1:7b:88:f0:cc:6c:9c:aa:2a:73:01:cc:
                    3f:e2:2a:20:47:29:93:e2:a1:bd:bc:37:71:d0:1b:
                    e3:c5:c4:b8:c4:5e:44:8b:5c:60:88:22:e8:83:b2:
                    1d:3d:aa:17:5c:98:af:c0:0d:5d:c6:5d:62:cf:76:
                    8d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7B:42:6D:20:0A:98:27:03:07:CB:05:BB:38:7B:E7:B9:D1:34:0E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A0E496B624D511F0BD77200BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:4040::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:ed:45:7e:ea:d9:d1:63:56:73:95:92:45:7f:73:13:11:91:
         df:c1:fb:0a:b4:db:c8:db:2b:a2:01:e8:57:ac:20:57:84:5d:
         54:a8:33:e2:c9:9a:a7:46:22:be:b5:45:30:5b:9c:53:9f:61:
         c8:86:60:44:08:c7:94:16:cc:69:ed:e4:42:29:2a:86:bc:f7:
         1c:e5:32:e0:c5:a9:83:99:73:4f:16:fa:66:d1:03:2c:a6:57:
         52:a5:10:0b:22:c1:28:5d:da:b9:14:74:ee:26:6a:80:af:04:
         b5:71:54:69:e2:34:2e:a5:6a:04:da:86:e5:82:15:30:7b:a8:
         18:23:65:49:3e:d2:58:69:c5:b3:8f:31:86:c0:2f:04:5f:b4:
         19:bc:15:19:3a:0c:82:6c:e3:e4:99:17:f5:52:be:08:d6:3c:
         ae:65:73:3b:b3:73:26:8e:62:75:3d:3a:1b:6a:27:b7:9c:64:
         2b:1e:13:ca:4b:8b:ed:0a:a8:3c:9e:a2:89:7c:cc:74:5b:2c:
         fb:13:f9:32:d6:fa:d8:a0:53:cb:43:30:31:66:d0:cc:37:e4:
         e4:6f:4f:83:e0:14:6c:ec:ae:01:1c:5a:84:f7:d0:41:49:b1:
         a7:e6:14:a1:83:f5:93:89:68:2a:d3:1b:4d:68:5a:dc:25:b7:
         04:7a:e0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:47:53 2026 by rpki-client