Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E124AAC29AD411EEB974AE30C4F9AE02.roa
File:                     E124AAC29AD411EEB974AE30C4F9AE02.roa (raw, json)
Hash identifier:          QjTv3DkExGD6ighUMpQtjPmC11MVK/uOeWw3UZnpX60=
Subject key identifier:   96:4D:EB:DC:2F:6C:79:2D:18:C3:25:E6:21:1C:2E:30:AB:62:EB:4C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F056
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E124AAC29AD411EEB974AE30C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:50:14 +0000
ROA not before:           Mon 06 Jul 2026 16:50:14 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135813
IP address blocks:        2001:df3:4840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61526 (0xf056)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:50:14 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdcc6-a167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:80:b3:6e:a3:73:38:da:da:f8:6d:f2:a0:58:
                    bf:a7:ca:8a:87:24:aa:74:6d:96:88:31:58:b1:61:
                    15:13:bf:2f:d7:5d:55:88:a1:a6:ea:3a:96:b2:71:
                    e6:87:99:a1:5f:c3:6a:49:03:00:d2:6f:50:83:09:
                    a9:40:48:d8:57:6b:6b:1f:43:ae:31:ec:87:fd:be:
                    b7:74:08:7f:af:51:78:cb:ac:63:aa:59:fd:b5:23:
                    53:3c:40:6b:46:d2:ef:36:28:ce:3e:a9:6d:fa:69:
                    d4:95:41:38:ef:1e:4a:a9:de:d1:cf:14:29:a1:f8:
                    74:82:b4:cb:2c:1d:69:ed:1f:0a:9f:0b:26:c1:fc:
                    6c:1a:66:ea:64:9d:de:c6:ca:61:f8:90:d3:54:c9:
                    ce:c5:12:65:43:a1:bf:a8:79:63:51:c2:41:9e:e5:
                    02:39:d6:90:ca:74:cb:8f:15:e9:4f:8f:2b:69:ba:
                    fa:5d:e5:64:a5:08:68:85:53:22:3e:cb:43:3e:21:
                    bc:dd:47:a2:af:56:ae:ba:75:a9:95:bf:d8:c0:5d:
                    2f:0c:3c:b4:27:cc:21:56:e1:06:5e:37:aa:16:5c:
                    11:e3:c3:82:f2:84:f7:86:70:90:cd:cf:40:6b:43:
                    34:d8:40:68:23:71:fe:7b:9d:82:75:dd:b2:5c:d1:
                    24:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:4D:EB:DC:2F:6C:79:2D:18:C3:25:E6:21:1C:2E:30:AB:62:EB:4C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E124AAC29AD411EEB974AE30C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:4840::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:d8:ea:13:97:ae:83:cd:59:be:fc:7a:04:d7:cb:5d:0d:88:
         eb:15:3f:82:d3:78:36:f3:bb:a8:b9:51:88:5d:d3:a3:c3:bc:
         4d:63:dd:70:18:7f:ea:1a:24:8a:0c:bc:11:ee:aa:70:69:41:
         f0:bc:b6:9a:ef:1b:24:6b:f8:27:76:82:69:01:d2:57:d7:e1:
         7d:b7:fd:6a:37:27:10:73:16:92:ae:99:ff:3b:29:c1:fa:ff:
         57:e2:c3:37:8c:03:ce:19:65:f3:6a:7e:72:8d:a5:ee:45:63:
         6c:80:a6:aa:96:3e:4a:5f:78:e0:a1:e1:3e:27:11:16:8a:97:
         2a:a8:93:25:30:e9:6a:b9:30:96:a7:db:43:0c:63:fd:47:b5:
         75:50:3b:8d:19:43:01:8d:a9:8e:75:7f:96:e5:85:35:de:7b:
         69:79:8b:bf:5d:f5:98:48:d6:a1:3d:43:e0:4f:a9:96:66:4e:
         fd:f4:03:e7:22:31:62:85:f4:11:5c:89:5e:73:2d:d0:fc:15:
         50:a8:f5:70:89:54:23:df:8a:6c:98:55:78:45:2a:ca:93:cd:
         78:a9:47:ca:ec:d6:ec:19:01:a2:2f:d9:5e:31:9d:10:40:46:
         6a:99:37:6a:a6:a7:a8:2c:9a:70:31:b5:30:9d:04:33:54:59:
         59:54:5e:ef
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAPBWMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE2NTAxNFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmRjYzYtYTE2NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJ2As26jczja2vht8qBYv6fKiockqnRtlogxWLFhFRO/L9ddVYihpuo6lrJx
5oeZoV/DakkDANJvUIMJqUBI2Fdrax9DrjHsh/2+t3QIf69ReMusY6pZ/bUjUzxA
a0bS7zYozj6pbfpp1JVBOO8eSqne0c8UKaH4dIK0yywdae0fCp8LJsH8bBpm6mSd
3sbKYfiQ01TJzsUSZUOhv6h5Y1HCQZ7lAjnWkMp0y48V6U+PK2m6+l3lZKUIaIVT
Ij7LQz4hvN1Hoq9Wrrp1qZW/2MBdLww8tCfMIVbhBl43qhZcEePDgvKE94ZwkM3P
QGtDNNhAaCNx/nudgnXdslzRJA8CAwEAAaOCAmMwggJfMB0GA1UdDgQWBBSWTevc
L2x5LRjDJeYhHC4wq2LrTDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0UxMjRBQUMy
OUFENDExRUVCOTc0QUUzMEM0RjlBRTAyLnJvYTAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACABDfNIQDANBgkqhkiG9w0BAQsFAAOCAQEAZNjqE5eug81Zvvx6
BNfLXQ2I6xU/gtN4NvO7qLlRiF3To8O8TWPdcBh/6hokigy8Ee6qcGlB8Ly2mu8b
JGv4J3aCaQHSV9fhfbf9ajcnEHMWkq6Z/zspwfr/V+LDN4wDzhll82p+co2l7kVj
bICmqpY+Sl944KHhPicRFoqXKqiTJTDparkwlqfbQwxj/Ue1dVA7jRlDAY2pjnV/
luWFNd57aXmLv131mEjWoT1D4E+plmZO/fQD5yIxYoX0EVyJXnMt0PwVUKj1cIlU
I9+KbJhVeEUqypPNeKlHyuzW7BkBoi/ZXjGdEEBGapk3aqanqCyacDG1MJ0EM1RZ
WVRe7w==
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:49 2026 by rpki-client