Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CD00AFA60B7111EF96420153C4F9AE02.roa
File:                     CD00AFA60B7111EF96420153C4F9AE02.roa (raw, json)
Hash identifier:          5Z1OO7maVlh3+YNbVAApjDJZJSKNGreihwuhjlFp7qY=
Subject key identifier:   2B:1E:FF:08:95:F4:95:9C:45:6D:6D:53:33:16:C0:98:92:E7:BB:A4
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E958
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CD00AFA60B7111EF96420153C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:35:18 +0000
ROA not before:           Sun 31 May 2026 17:35:18 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     150581
IP address blocks:        2401:9120::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59736 (0xe958)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:35:18 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7156-2885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:33:59:07:55:20:68:22:2d:6b:50:01:64:f5:
                    b7:50:a9:e8:ad:ff:74:93:7a:a9:69:06:da:3d:83:
                    6c:db:c1:74:bb:9d:12:18:08:09:f2:d8:79:ad:71:
                    35:b5:ec:ef:e8:f5:33:47:77:99:49:43:72:ec:87:
                    22:f8:6d:2f:47:da:3d:87:51:87:e4:4c:6f:2a:2d:
                    a2:96:1c:35:46:54:1d:70:f8:00:7f:0c:71:cb:7b:
                    cc:c2:4d:43:54:8f:f6:5e:ef:4c:09:d5:27:64:92:
                    cd:cc:46:c6:cd:91:b6:df:65:02:37:2a:84:7e:ec:
                    96:1c:f9:dc:25:4b:be:58:8e:88:ce:dc:e2:7c:1a:
                    94:65:8e:a3:9a:c1:a8:cf:bb:c4:a9:26:38:09:4b:
                    ab:76:8c:5b:da:45:61:87:7b:b0:37:21:ae:08:4a:
                    a3:f0:86:3c:f1:ed:4b:68:5d:8f:1f:2a:79:b2:7e:
                    94:83:0f:0b:3e:47:35:db:16:32:30:3e:93:75:aa:
                    ab:0f:aa:1e:61:64:fd:71:76:a2:45:00:36:59:26:
                    06:b7:15:57:e8:3c:43:97:49:dc:01:41:74:b3:1d:
                    ff:83:85:da:ca:b0:1a:4d:2f:27:71:04:a1:eb:04:
                    b1:f8:53:65:3b:d2:8e:8e:0a:2f:f9:88:bf:33:55:
                    f8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:1E:FF:08:95:F4:95:9C:45:6D:6D:53:33:16:C0:98:92:E7:BB:A4
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CD00AFA60B7111EF96420153C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:9120::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:35:24:fc:b2:2c:39:4f:5b:46:88:1e:56:65:93:59:ae:87:
         8f:c8:6a:00:16:32:b1:09:f4:b0:ab:44:2a:87:f5:c9:ec:dd:
         a3:b5:2e:42:c9:dd:ce:83:f4:15:f6:bb:f5:15:74:58:cc:3e:
         0a:d4:e5:3f:44:a7:e4:3e:e7:c9:d4:91:ad:7a:06:a6:60:4f:
         b6:ce:fa:3a:62:4e:b8:c8:71:2d:45:cf:8e:50:aa:1c:72:0e:
         1e:60:db:e6:2e:e6:52:b0:60:2c:1c:4c:80:e5:72:76:61:4f:
         17:c0:cf:e4:6b:e5:f2:c1:d2:c3:30:0c:c0:a7:76:75:f4:0e:
         78:85:34:5f:82:52:09:b1:8e:f4:1c:30:16:f4:fe:2a:dc:f9:
         3b:7e:32:eb:d0:1b:7d:5c:a9:32:33:a7:c6:0c:43:5c:c6:94:
         85:b1:c5:ca:3c:04:ea:86:cd:60:16:d4:16:2c:8d:36:69:d2:
         7a:6d:6a:0b:e6:27:31:6c:8d:44:36:9d:8a:4e:4c:5c:ca:fe:
         3c:70:00:b9:30:c4:1d:df:59:8b:7c:92:0f:0e:7b:60:d2:66:
         df:7d:ee:86:91:30:64:26:21:40:30:da:02:85:2b:34:1f:4f:
         fc:cb:04:b7:ff:b2:84:1c:87:e3:7e:60:33:7c:fc:6a:22:9d:
         57:98:76:95
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIDAOlYMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MzUxOFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzcxNTYtMjg4NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL0zWQdVIGgiLWtQAWT1t1Cp6K3/dJN6qWkG2j2DbNvBdLudEhgICfLYea1x
NbXs7+j1M0d3mUlDcuyHIvhtL0faPYdRh+RMbyotopYcNUZUHXD4AH8Mcct7zMJN
Q1SP9l7vTAnVJ2SSzcxGxs2Rtt9lAjcqhH7slhz53CVLvliOiM7c4nwalGWOo5rB
qM+7xKkmOAlLq3aMW9pFYYd7sDchrghKo/CGPPHtS2hdjx8qebJ+lIMPCz5HNdsW
MjA+k3Wqqw+qHmFk/XF2okUANlkmBrcVV+g8Q5dJ3AFBdLMd/4OF2sqwGk0vJ3EE
oesEsfhTZTvSjo4KL/mIvzNV+NkCAwEAAaOCAmEwggJdMB0GA1UdDgQWBBQrHv8I
lfSVnEVtbVMzFsCYkue7pDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0NEMDBBRkE2
MEI3MTExRUY5NjQyMDE1M0M0RjlBRTAyLnJvYTAgBggrBgEFBQcBBwEB/wQRMA8w
DQQCAAIwBwMFACQBkSAwDQYJKoZIhvcNAQELBQADggEBAKo1JPyyLDlPW0aIHlZl
k1muh4/IagAWMrEJ9LCrRCqH9cns3aO1LkLJ3c6D9BX2u/UVdFjMPgrU5T9Ep+Q+
58nUka16BqZgT7bO+jpiTrjIcS1Fz45QqhxyDh5g2+Yu5lKwYCwcTIDlcnZhTxfA
z+Rr5fLB0sMwDMCndnX0DniFNF+CUgmxjvQcMBb0/irc+Tt+MuvQG31cqTIzp8YM
Q1zGlIWxxco8BOqGzWAW1BYsjTZp0nptagvmJzFsjUQ2nYpOTFzK/jxwALkwxB3f
WYt8kg8Oe2DSZt997oaRMGQmIUAw2gKFKzQfT/zLBLf/soQch+N+YDN8/GoinVeY
dpU=
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:05:05 2026 by rpki-client