Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A13501B0CF8C11F1B0BEBD130866CEF9.roa
File:                     A13501B0CF8C11F1B0BEBD130866CEF9.roa (raw, json)
Hash identifier:          JyBXYC9R7ajbvF61tsGfszK19G8k8QhsNjyokqYgOhI=
Subject key identifier:   F4:7B:26:2F:F0:FB:2B:EC:F5:A4:80:8F:C5:42:D4:3E:B2:82:F9:C6
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       FEB5
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A13501B0CF8C11F1B0BEBD130866CEF9.roa
Signing time:             Sat 24 Oct 2026 09:23:53 +0000
ROA not before:           Sat 24 Oct 2026 09:23:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154961
IP address blocks:        2402:79e0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65205 (0xfeb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Oct 24 09:23:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6adc7929-a35b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:52:2d:4f:53:1e:fc:f0:80:ba:75:a1:26:a0:
                    06:04:97:eb:00:a8:7b:f6:a4:9f:ae:d6:3c:3d:1d:
                    e3:c7:7e:ef:57:f4:b2:e2:19:e1:fe:8d:d1:c2:60:
                    46:23:49:10:28:a9:1a:04:c9:73:aa:58:3d:a2:50:
                    8f:74:97:b4:62:73:ee:b6:29:f6:66:c8:26:58:92:
                    b3:98:47:3d:93:94:77:84:ad:d6:70:8d:79:33:a9:
                    96:88:c8:23:eb:13:f4:9a:bd:75:71:4f:7f:95:c9:
                    11:85:ed:64:00:db:2e:66:f9:94:fc:53:74:ae:d5:
                    6d:1d:21:9d:59:c0:11:a2:d0:7a:cf:14:24:63:c4:
                    d5:64:f6:4e:9e:86:6c:10:0c:21:05:08:10:12:07:
                    2d:18:f9:f9:67:72:63:54:ea:2e:ca:26:cd:09:5a:
                    6b:13:29:ba:c5:9a:82:d7:62:2e:fa:f3:ac:96:bc:
                    3d:f7:eb:20:40:45:90:09:0e:a3:2c:ef:33:08:f8:
                    49:c1:70:f3:47:27:e8:7a:4f:94:fc:d5:e3:44:22:
                    8c:5c:d9:3f:fe:bc:a6:81:1d:1b:ed:ed:2d:64:55:
                    8d:8d:af:78:d5:cf:01:9b:bf:f2:b3:3c:f0:5b:14:
                    ff:e5:49:dc:c9:8a:a2:97:b2:33:2d:f9:64:2e:db:
                    69:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:7B:26:2F:F0:FB:2B:EC:F5:A4:80:8F:C5:42:D4:3E:B2:82:F9:C6
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A13501B0CF8C11F1B0BEBD130866CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:79e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:ad:e0:da:ca:be:17:b7:14:62:08:bc:eb:26:13:86:66:53:
         0f:45:33:ca:52:8e:83:97:c1:2b:6d:2d:1f:ff:23:82:02:30:
         31:5e:2b:f9:26:bc:4a:9a:a6:56:27:ec:85:05:d3:a1:ce:11:
         d8:f9:15:e5:d5:b7:77:f1:8a:13:c1:f2:0b:6a:b7:fb:23:7e:
         0f:f2:b4:3c:5b:3a:6e:7d:09:5a:24:fc:d5:0f:75:3e:d8:fb:
         c9:c4:db:4c:d4:1d:d5:f8:8d:34:2a:0c:30:19:2c:eb:9a:5d:
         4d:7e:f7:f9:60:34:da:61:4c:5a:12:81:b7:51:5d:f3:ed:d7:
         78:d6:47:8b:6a:86:04:12:35:14:0c:f6:20:d6:a6:98:45:14:
         1c:38:b2:31:e1:35:69:ab:8a:db:cd:6d:a2:cd:e3:fa:ee:8c:
         0e:81:92:fb:d4:8b:80:66:ce:cc:8f:e7:d1:2a:f5:9e:8e:e9:
         e4:e5:db:71:94:fb:00:92:1a:bc:8c:42:e6:11:f4:6d:55:b8:
         8e:13:4f:1e:bb:67:2d:f1:1a:63:82:f2:21:1d:bc:5a:39:78:
         ec:67:4e:43:f6:94:9a:93:e3:53:28:3a:dc:cc:81:2c:70:35:
         47:00:8d:d7:3a:bc:8d:76:69:5c:5b:d8:0f:16:b5:8c:ac:b8:
         f8:4e:b4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:07:34 2026 by rpki-client