Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8544960E09E11F0A23310EA446F56BC.roa
File:                     B8544960E09E11F0A23310EA446F56BC.roa (raw, json)
Hash identifier:          9mWB8WF4n0o/kW5P57Dgw1Tpt4LrDYWSpSFKPeDUw8w=
Subject key identifier:   F6:27:5E:76:5C:66:A0:3D:BD:7F:1C:15:88:25:C4:BD:12:29:03:77
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EAE6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8544960E09E11F0A23310EA446F56BC.roa
Signing time:             Sun 31 May 2026 17:47:48 +0000
ROA not before:           Sun 31 May 2026 17:47:48 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     154436
IP address blocks:        2001:df6:7240::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 08:52:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60134 (0xeae6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:47:48 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7444-eb7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fa:b7:1a:76:c0:a9:94:0b:8e:57:48:7b:0a:
                    26:cd:a6:d6:80:7e:e0:40:bd:59:cc:e9:65:a6:81:
                    4a:3d:17:6e:5d:d0:92:0e:ac:e5:d4:aa:25:69:54:
                    96:42:11:44:7f:96:24:57:39:59:cb:e9:42:3e:85:
                    71:1d:46:10:86:21:e0:67:42:84:6a:4e:fc:21:74:
                    86:04:53:47:c2:17:d1:06:61:f9:00:74:c3:39:37:
                    a1:57:92:91:b1:ff:2c:fe:de:10:85:e2:e4:4f:6b:
                    db:82:f4:29:34:02:2a:7d:69:a0:aa:9e:08:6b:ee:
                    1c:f0:83:c7:a1:75:b1:b0:0b:a0:b4:64:71:96:65:
                    df:79:a2:1e:44:42:e9:dc:2a:c1:ca:50:b0:e9:16:
                    71:76:1d:fa:18:de:aa:d0:cf:05:3d:41:30:c1:b0:
                    a0:8f:41:b0:52:be:2b:4e:85:0e:ac:90:6c:05:92:
                    08:bf:6a:57:46:48:e4:da:5b:15:80:78:9e:a4:bb:
                    17:21:20:7b:82:b1:ef:39:45:50:9b:f2:80:c0:df:
                    d0:a7:b9:88:ec:a1:5f:43:96:59:fd:37:04:50:1d:
                    66:6b:d0:fc:c0:95:c3:fb:50:44:b6:10:59:af:e4:
                    3b:69:4d:c9:9a:f1:36:32:a4:76:0b:c8:58:9c:59:
                    5a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:27:5E:76:5C:66:A0:3D:BD:7F:1C:15:88:25:C4:BD:12:29:03:77
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B8544960E09E11F0A23310EA446F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:7240::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:6a:05:e1:04:20:ed:b6:c1:f8:88:d3:67:14:cb:c1:9b:47:
         63:26:61:dc:02:b3:b0:4b:9b:71:0f:5e:b7:9a:71:fe:9b:54:
         82:12:8b:9b:60:b0:79:c5:68:24:d6:eb:5c:13:a4:05:b5:04:
         21:53:48:9a:ef:01:5d:42:a2:e2:87:a1:11:9e:93:95:86:86:
         31:60:65:67:c6:db:d8:3b:7f:b4:3c:ca:5b:4d:45:ef:7e:be:
         d8:2b:d0:d4:77:7f:1a:45:3b:08:71:c5:10:87:b8:9f:ab:50:
         52:9b:07:76:dc:8d:29:55:04:c3:e4:41:d5:61:dc:40:11:aa:
         8b:f7:93:3d:68:cf:c7:25:e5:d2:f5:b9:83:0e:fe:06:53:e9:
         0b:6c:ee:a4:49:69:5a:20:4a:09:8b:76:36:3f:88:1c:63:12:
         b2:1a:19:a8:fd:b4:f8:33:e7:ff:b9:f3:89:98:de:cf:60:96:
         67:15:ec:94:1c:b0:09:7c:fc:5e:34:84:80:87:27:36:29:32:
         ba:d8:d3:78:97:23:bb:5a:42:f9:9c:d4:d8:e0:76:b5:52:c7:
         d8:f6:6a:83:af:74:f3:73:fb:a4:62:38:54:71:66:9d:e0:d0:
         2c:6a:7e:5e:28:25:35:6d:75:0b:eb:b5:a6:31:07:92:10:d3:
         5d:44:43:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:58:25 2026 by rpki-client