Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D0837AC21AB211F08E315F3FC4F9AE02.roa
File:                     D0837AC21AB211F08E315F3FC4F9AE02.roa (raw, json)
Hash identifier:          UAj0bkXIOsfiDq3ucd++pfW7+K6mqLRcLVS3iWm9+fw=
Subject key identifier:   38:21:A1:70:0E:49:D0:D4:89:02:BF:03:EA:01:2E:C2:3A:ED:CD:FE
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E76F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D0837AC21AB211F08E315F3FC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:18:50 +0000
ROA not before:           Sun 31 May 2026 17:18:50 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     141849
IP address blocks:        2001:df6:8980::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59247 (0xe76f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:18:50 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6d7a-2f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fd:8a:c2:08:b3:05:f4:03:e8:8e:ce:9b:27:
                    85:93:47:aa:5f:fc:fd:19:9d:a5:f3:c6:b3:34:d1:
                    02:29:12:d9:7c:57:fb:19:1e:41:ba:71:f0:f7:56:
                    0c:7b:82:d0:b2:11:f3:51:51:b4:7f:94:fb:e9:c2:
                    d3:42:26:1b:2a:97:f7:1a:8f:aa:f8:07:f2:ac:1b:
                    72:26:f7:1a:17:d9:00:16:c2:9f:4c:df:dc:9b:eb:
                    a7:4e:ac:b8:c1:67:52:01:5b:7a:87:a1:4e:e9:35:
                    3b:33:40:2c:e5:54:87:91:42:2e:cb:93:9c:5b:fa:
                    1f:99:a6:fc:51:07:07:10:fe:dd:3a:df:aa:69:47:
                    c9:d6:32:ab:21:c6:cb:b3:6b:97:0e:2f:43:77:2d:
                    da:91:27:59:16:29:00:28:c2:65:6f:af:01:b7:17:
                    57:8f:7b:ce:78:01:31:cd:e6:53:58:c3:47:84:d3:
                    28:b0:0e:44:64:99:9b:c5:30:6a:31:4c:3f:5c:ab:
                    50:41:d4:8e:87:7d:82:90:48:7c:d7:80:3e:e7:ce:
                    f5:c6:7c:39:dd:b8:d8:77:d8:c7:8e:ec:0a:ea:99:
                    9f:6c:e4:09:ae:b3:be:02:88:9a:24:f9:7c:95:24:
                    79:04:e5:7c:4c:10:2b:4b:72:bf:28:a9:91:21:8b:
                    f5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:21:A1:70:0E:49:D0:D4:89:02:BF:03:EA:01:2E:C2:3A:ED:CD:FE
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D0837AC21AB211F08E315F3FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:8980::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:86:bf:de:97:0b:88:03:30:e7:13:25:88:65:83:3b:ed:b0:
         17:7c:aa:be:ca:31:70:bd:3d:a4:3b:a3:4a:5e:9c:d1:71:2b:
         fc:88:3e:ea:ae:3a:57:16:78:e0:c5:be:20:a1:97:b8:be:79:
         76:fc:00:5a:e9:c8:b1:47:3e:81:27:10:3d:91:ff:f3:04:3f:
         d4:bb:0a:de:13:70:74:c4:0b:9b:db:fa:d6:ec:29:8a:41:19:
         aa:f3:e7:1b:58:fd:29:31:bd:ac:d6:40:f7:2d:63:5c:22:1f:
         68:d1:a3:61:b5:c3:07:b4:8f:71:f6:c1:93:e7:09:7e:d7:08:
         15:ea:07:73:b7:1d:03:46:b4:fa:d6:07:83:0e:ce:bd:dc:b3:
         7c:b1:dd:12:a2:82:44:4b:dc:5d:8a:2b:09:4f:98:a4:65:8a:
         a9:92:b7:3c:d5:8c:31:7d:93:89:af:81:45:ca:4d:d7:e2:37:
         a7:24:74:4c:b9:97:d4:29:6e:d6:07:b6:97:df:e0:c9:9d:22:
         c2:84:37:95:ed:cb:aa:f4:07:ab:60:89:d4:61:66:9f:43:d9:
         39:c2:b0:2a:50:d5:bc:8c:3d:a4:87:d3:73:fa:24:2e:2e:25:
         36:a6:48:5b:2e:48:62:b3:2f:ca:e4:40:74:24:06:6c:c4:f6:
         90:21:02:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:06:22 2026 by rpki-client