Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E2151032B90D11EE9E5C667EC4F9AE02.roa
File:                     E2151032B90D11EE9E5C667EC4F9AE02.roa (raw, json)
Hash identifier:          hU6vDybtEuKeeIcoNJ4ncPNDa6GG0KgpyeZx+Zlsm/k=
Subject key identifier:   64:8D:EA:F5:BC:AF:7F:98:1E:1E:B7:45:05:FA:B6:60:E6:3B:31:02
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EA08
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E2151032B90D11EE9E5C667EC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:40:52 +0000
ROA not before:           Sun 31 May 2026 17:40:52 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     151735
IP address blocks:        2001:df3:6140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59912 (0xea08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:40:52 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c72a4-5ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fd:af:2b:ce:2b:fa:ff:8a:47:3f:bf:df:10:
                    ca:12:c2:76:bc:a0:83:75:e4:23:2f:e8:43:9a:96:
                    a1:cf:1d:31:16:8d:f1:33:d2:c2:70:ef:09:db:b2:
                    a8:7b:22:44:96:4c:ed:89:c5:4b:4f:2a:25:8c:9e:
                    de:44:d3:a7:35:87:47:24:cf:58:dd:48:f3:ef:89:
                    bc:ea:27:c1:f9:4c:31:6d:18:a6:a4:e2:f9:df:ae:
                    27:70:01:f3:48:a7:2e:2e:a4:f7:eb:3a:cd:9c:bd:
                    66:7a:5b:df:f4:b9:ea:f9:84:68:5f:61:d6:30:f3:
                    94:32:4b:89:97:13:8b:44:2e:b0:6f:a7:cd:b3:6d:
                    14:59:b4:a2:50:ca:97:67:cc:bb:37:3f:8d:bd:4c:
                    33:0a:e0:c7:c0:9d:8b:0c:f5:1a:e0:96:fe:9c:2b:
                    15:96:29:ca:39:88:c1:6f:3d:28:e6:ff:4e:58:25:
                    10:cf:12:c5:66:09:91:0e:36:9c:c8:82:df:d7:82:
                    e5:9e:37:5d:8f:b1:18:43:9c:c0:49:cf:58:a8:43:
                    5b:46:dc:38:7b:03:ea:76:fe:49:6e:3e:ba:73:e2:
                    74:62:0f:74:08:25:a3:c0:84:83:9c:fe:b9:d6:5f:
                    c5:e7:26:d7:69:a9:43:bb:b3:83:df:f0:34:fe:ca:
                    26:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8D:EA:F5:BC:AF:7F:98:1E:1E:B7:45:05:FA:B6:60:E6:3B:31:02
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E2151032B90D11EE9E5C667EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:6140::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:b9:f6:11:54:b8:3c:a8:3b:58:e2:f1:38:85:77:6e:24:63:
         db:80:1b:df:2e:3b:21:75:65:b1:a3:8a:64:ad:f3:03:89:af:
         4f:78:47:91:e3:60:c9:38:4b:73:de:df:0b:e9:1d:0c:7b:c2:
         fe:1e:99:8f:32:4c:79:a1:31:9a:a7:76:16:09:53:55:e5:30:
         b5:f9:44:c8:8e:fd:b0:5d:4e:0d:4d:0b:05:2e:b5:84:ba:dc:
         a4:d2:fb:ad:ca:06:3c:13:51:9b:4b:f0:08:29:75:d0:71:63:
         d4:41:c4:a7:43:53:31:21:0c:d5:4d:7d:6d:87:f5:2d:0c:a7:
         fa:4e:09:d8:f7:32:1f:0e:63:48:a3:c7:49:1c:ca:8c:ea:ea:
         8f:1e:57:9a:9b:39:50:12:f8:e6:be:f6:e7:0b:12:24:25:33:
         27:db:f4:08:ec:a8:44:1d:f8:ae:9f:16:c3:fd:81:2f:af:af:
         3d:98:28:ab:78:92:41:3e:a9:cb:f2:45:40:b6:61:4a:72:4c:
         2a:ce:a0:64:f6:a1:26:b0:d0:0a:64:19:16:a7:bc:08:94:54:
         42:44:b0:01:b3:29:5a:16:bd:8a:3d:f3:8f:f5:65:f5:0e:8e:
         72:3e:ae:7b:4b:3b:cd:cf:ee:7e:ff:1c:66:6d:7f:95:bb:ce:
         5c:a7:51:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:06:46 2026 by rpki-client