Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DE46F7CC147411F0AD417A1DC4F9AE02.roa
File:                     DE46F7CC147411F0AD417A1DC4F9AE02.roa (raw, json)
Hash identifier:          DuIA9RqKsYmk/wGyuX/TedDiOwtb7E42Sp3AgzPclYk=
Subject key identifier:   DF:FC:E2:2C:AD:DD:F4:6B:EB:8E:09:39:63:BF:C4:D1:5B:7B:DC:21
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E955
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DE46F7CC147411F0AD417A1DC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:35:11 +0000
ROA not before:           Sun 31 May 2026 17:35:11 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     150577
IP address blocks:        2001:df1:b140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59733 (0xe955)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:35:11 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c714f-1807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:99:1c:56:51:a2:3c:93:6a:a0:38:08:ee:d9:
                    dc:3d:ca:a4:57:9f:22:4c:31:c5:e3:2c:6f:6d:ff:
                    0a:de:00:72:a2:4d:54:9e:52:95:39:89:d3:c8:af:
                    33:ad:70:a3:9f:bd:10:31:63:8d:95:5f:c9:c4:80:
                    76:46:a1:ee:16:0c:b7:a4:56:21:8d:3f:b3:df:a3:
                    52:e4:cc:86:6e:12:96:aa:c2:30:9f:e3:f5:11:11:
                    0e:9b:e2:33:cd:52:54:02:b7:fa:af:bd:ad:15:f1:
                    00:a7:f4:c7:4a:ab:75:45:d9:28:e1:d1:69:20:75:
                    19:d0:7b:0d:2e:9b:12:0f:eb:4a:2a:26:57:a0:57:
                    01:de:2a:ae:7b:0b:67:50:56:90:82:ca:98:12:85:
                    c0:4d:fb:1a:29:4f:7b:1e:19:56:ba:f3:2f:71:c3:
                    77:02:1c:03:97:b2:ae:25:98:27:df:c9:44:50:a8:
                    62:78:64:0a:d1:0f:be:0c:8f:bd:3e:30:fd:00:21:
                    c8:70:91:f7:f4:9f:6c:77:db:c7:76:a5:2e:f0:a4:
                    94:1c:58:78:70:ba:17:94:8a:c8:e1:29:50:4f:d6:
                    93:0d:bd:00:f6:e8:2c:17:3a:1d:bf:90:ee:61:db:
                    41:13:92:88:78:0d:25:b0:c1:a1:22:ac:f6:16:4b:
                    f9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:FC:E2:2C:AD:DD:F4:6B:EB:8E:09:39:63:BF:C4:D1:5B:7B:DC:21
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/DE46F7CC147411F0AD417A1DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:b140::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:94:6f:02:2b:33:c5:e8:41:cd:ec:1c:2b:d4:0c:6e:b3:37:
         79:f1:7d:1b:6b:75:48:03:92:6a:4f:cf:7f:2e:ab:d7:fd:6a:
         83:19:e5:f2:3d:55:dc:fd:f8:24:35:54:5e:3e:32:1f:14:9d:
         26:8d:7d:d4:d1:ac:6d:10:c3:68:34:00:37:d3:dd:5c:f5:40:
         f5:17:91:86:13:0e:96:0e:d7:70:65:b7:4b:cf:07:de:95:e7:
         20:b4:56:d6:f8:ed:29:4f:14:ad:f8:76:e5:b8:bc:5f:f5:14:
         24:1e:c0:d1:cd:54:c4:35:bb:30:a1:09:ee:5c:20:d0:09:54:
         db:98:db:1a:bd:8c:73:f1:21:ea:ea:a2:87:8e:13:74:17:cd:
         6d:e4:e2:67:50:4b:54:06:89:de:f2:3b:e6:c7:a2:9e:87:6c:
         c7:02:e1:38:6b:1a:52:13:3b:8c:68:c8:d4:4f:c4:b5:3c:db:
         88:4f:57:a5:9d:e2:ff:25:15:17:3b:e4:de:5f:f9:42:d4:c8:
         d2:ee:cc:a7:08:df:5b:fb:d9:51:70:28:30:9e:a7:9f:45:d8:
         45:66:25:19:45:d6:21:46:16:84:e7:1a:93:35:bd:07:ee:30:
         21:43:28:16:4e:8e:4b:e6:fc:0b:cd:cd:77:dd:ea:3a:dc:6b:
         13:1a:29:d9
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAOlVMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3MzUxMVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzcxNGYtMTgwNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANmZHFZRojyTaqA4CO7Z3D3KpFefIkwxxeMsb23/Ct4AcqJNVJ5SlTmJ08iv
M61wo5+9EDFjjZVfycSAdkah7hYMt6RWIY0/s9+jUuTMhm4SlqrCMJ/j9RERDpvi
M81SVAK3+q+9rRXxAKf0x0qrdUXZKOHRaSB1GdB7DS6bEg/rSiomV6BXAd4qrnsL
Z1BWkILKmBKFwE37GilPex4ZVrrzL3HDdwIcA5eyriWYJ9/JRFCoYnhkCtEPvgyP
vT4w/QAhyHCR9/SfbHfbx3alLvCklBxYeHC6F5SKyOEpUE/Wkw29APboLBc6Hb+Q
7mHbQROSiHgNJbDBoSKs9hZL+Y8CAwEAAaOCAmMwggJfMB0GA1UdDgQWBBTf/OIs
rd30a+uOCTljv8TRW3vcITAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0RFNDZGN0ND
MTQ3NDExRjBBRDQxN0ExREM0RjlBRTAyLnJvYTAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACABDfGxQDANBgkqhkiG9w0BAQsFAAOCAQEAe5RvAiszxehBzewc
K9QMbrM3efF9G2t1SAOSak/Pfy6r1/1qgxnl8j1V3P34JDVUXj4yHxSdJo191NGs
bRDDaDQAN9PdXPVA9ReRhhMOlg7XcGW3S88H3pXnILRW1vjtKU8Urfh25bi8X/UU
JB7A0c1UxDW7MKEJ7lwg0AlU25jbGr2Mc/Eh6uqih44TdBfNbeTiZ1BLVAaJ3vI7
5seinodsxwLhOGsaUhM7jGjI1E/EtTzbiE9XpZ3i/yUVFzvk3l/5QtTI0u7Mpwjf
W/vZUXAoMJ6nn0XYRWYlGUXWIUYWhOcakzW9B+4wIUMoFk6OS+b8C83Nd93qOtxr
Exop2Q==
-----END CERTIFICATE-----
Generated at Thu Jun 4 10:07:41 2026 by rpki-client