Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D4B3DAE01BAD11F1A62C64F00C3D8C67.roa
File:                     D4B3DAE01BAD11F1A62C64F00C3D8C67.roa (raw, json)
Hash identifier:          JJMBtDNR/o3DdeAZ8NMpA7CK5Y4b/CaktYJjpMo2Ec4=
Subject key identifier:   85:53:DC:01:5D:CD:2F:CA:94:50:CE:FA:02:60:99:82:C2:D0:37:3A
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E787
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D4B3DAE01BAD11F1A62C64F00C3D8C67.roa
Signing time:             Sun 31 May 2026 17:19:37 +0000
ROA not before:           Sun 31 May 2026 17:19:37 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     142169
IP address blocks:        2001:df6:c540::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59271 (0xe787)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:19:37 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c6da9-1bf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bf:8f:c1:7b:dc:8a:bc:61:40:99:98:9c:ca:
                    ef:ed:f1:6b:4d:d3:c9:c6:5e:8c:4f:d3:57:0d:2a:
                    76:42:06:1f:9e:dd:e2:d6:3d:be:f1:f4:ca:10:86:
                    b1:a6:51:fb:77:ac:6b:90:fe:47:b1:e8:87:d4:48:
                    dd:6e:d4:5c:54:a8:b1:dc:aa:82:3e:dc:82:ef:08:
                    cd:78:00:e1:dc:77:db:a5:7d:df:d4:71:7c:6d:b6:
                    22:9b:1a:9c:03:2f:82:63:a7:b2:c7:0b:ce:06:9d:
                    bf:1c:c2:e3:ff:ad:ad:75:fe:64:c3:15:2e:9e:40:
                    3a:8f:c1:b7:e0:38:cf:4b:e0:1f:b5:12:24:da:40:
                    5e:4f:17:c4:4e:cd:c9:95:3a:17:94:8c:2a:e1:2e:
                    cc:12:2d:c3:ee:6a:dc:cc:6d:75:55:be:b5:81:ba:
                    e5:3a:cf:64:3d:7b:9a:6f:39:96:4c:f6:ef:a2:15:
                    10:4a:3d:d2:9f:29:14:f4:e2:68:43:c4:15:5a:bf:
                    d7:02:e9:be:46:23:d1:4f:ad:a0:4f:83:5c:47:77:
                    90:3d:13:92:ed:8e:2d:7e:07:d3:da:ac:c4:cb:63:
                    b0:69:0d:ef:18:ff:f2:4a:0d:ba:67:d2:89:d3:e1:
                    b9:1f:fe:00:5a:b8:b3:83:36:e4:7b:2a:84:a4:ba:
                    86:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:53:DC:01:5D:CD:2F:CA:94:50:CE:FA:02:60:99:82:C2:D0:37:3A
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D4B3DAE01BAD11F1A62C64F00C3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:c540::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:b2:4b:d4:28:00:8c:00:f9:96:2e:b2:83:a7:9a:18:aa:9f:
         06:a3:b8:40:32:43:94:0f:2d:66:9a:9c:d6:2a:51:ed:db:0f:
         1b:32:47:3f:5a:bd:74:1a:23:73:00:e2:e4:95:bf:47:09:ef:
         2d:88:b0:f0:2f:ba:97:ed:3f:a6:a1:94:00:e5:6c:6e:84:e6:
         33:f5:94:4c:4e:a8:b7:d4:55:31:32:8b:87:58:ce:6f:0a:6a:
         a3:bf:55:ed:df:67:d5:d1:17:94:01:f3:f3:87:1e:2f:7a:1a:
         8a:b0:62:60:7d:d7:09:f7:24:b0:73:4d:34:ee:89:a3:a4:4b:
         1b:70:9d:bd:fb:a2:76:0d:bf:fc:3e:ce:a0:5f:34:c1:41:3d:
         be:08:3a:9d:0d:4a:3a:7c:ea:aa:20:ce:52:01:93:f2:2a:fc:
         36:d5:36:f7:e2:5a:54:67:c6:dc:0a:14:c3:02:5c:c6:25:93:
         d2:41:2e:ea:79:b4:cd:f1:8c:15:a2:32:4f:ef:9b:86:0d:22:
         7c:df:3c:15:17:a6:fa:f0:f9:5f:2f:12:1b:6a:73:30:c0:c1:
         aa:36:b6:c9:25:f9:35:55:e0:a2:f3:9f:ab:66:9e:13:ca:0d:
         22:e8:07:bb:42:81:31:58:35:c5:b9:f7:83:83:d2:87:82:13:
         e7:70:0f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:46 2026 by rpki-client