Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E77CA3AE600F11F18EF9CC2F8847A888.roa
File:                     E77CA3AE600F11F18EF9CC2F8847A888.roa (raw, json)
Hash identifier:          1sT8RUBdZiuGcdgMhsK8rNR3i/1jjfKI3r184TEbEY0=
Subject key identifier:   28:0A:55:6B:A1:43:0E:49:FE:2F:FC:91:EF:ED:25:E2:CB:AC:B9:12
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EC26
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E77CA3AE600F11F18EF9CC2F8847A888.roa
Signing time:             Thu 04 Jun 2026 12:21:25 +0000
ROA not before:           Thu 04 Jun 2026 12:21:25 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     132562
IP address blocks:        2402:ee0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 08:52:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60454 (0xec26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jun  4 12:21:25 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a216dc5-1f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:70:f8:4f:1c:f9:11:01:cb:ff:4d:e6:66:7f:
                    c7:d9:02:9d:3a:9d:ab:e2:5d:18:85:bb:f1:a4:b3:
                    34:9e:fe:36:74:be:88:76:f1:6a:c7:6c:14:fc:80:
                    7e:e9:c7:ad:e9:33:56:16:7f:d7:de:e8:c3:56:ba:
                    7b:80:53:9c:07:79:63:61:55:2a:1a:26:a2:c7:c7:
                    6c:31:f1:f4:ce:4e:8c:44:52:af:cd:be:b4:48:52:
                    11:ed:d6:8c:47:aa:06:79:a4:ed:e3:86:b1:52:78:
                    7d:d7:41:32:67:8d:23:f3:82:93:fe:7e:8f:66:d1:
                    b0:de:11:4a:79:57:19:cc:fd:43:3c:8a:71:ad:66:
                    58:60:20:48:d8:5b:7e:ce:3e:3f:ec:9a:0b:b6:77:
                    32:7c:b9:20:5b:42:b9:83:b0:cd:b4:af:5b:02:f5:
                    91:e2:3f:eb:51:da:d4:4e:11:1d:8f:25:c4:a8:9c:
                    4d:d1:73:59:95:1f:38:df:70:87:9f:6c:52:cf:a8:
                    39:1c:cc:d5:b1:6f:79:7e:24:1a:50:50:d6:05:3d:
                    94:21:14:9a:e1:ab:6a:bd:45:4a:6a:3d:55:2d:3e:
                    4f:b5:a5:b3:e6:76:34:92:6e:6e:b1:d5:f7:e1:b9:
                    1f:0b:1a:1b:dd:8a:96:89:8e:59:ec:bf:82:40:92:
                    24:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:0A:55:6B:A1:43:0E:49:FE:2F:FC:91:EF:ED:25:E2:CB:AC:B9:12
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E77CA3AE600F11F18EF9CC2F8847A888.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:76:76:65:eb:11:de:be:32:15:c1:0c:f7:23:35:6c:2f:22:
         7c:a1:19:d0:e5:47:24:41:e0:b3:55:05:fb:0e:1e:e4:06:30:
         23:33:fd:d9:6d:bd:63:d3:b7:e9:f0:3a:18:81:b7:fc:61:38:
         5c:b2:09:80:90:32:a1:60:da:3c:a8:f3:11:ee:35:bf:42:00:
         59:7a:3a:d3:13:ba:e2:07:7a:9b:0e:84:99:5f:f0:d2:4f:b1:
         54:5d:79:27:f7:bb:9c:ae:08:da:c1:19:a8:c9:ac:73:a4:15:
         cb:bf:df:de:55:19:63:29:72:ce:ce:01:98:b0:42:dc:cb:1c:
         89:16:7c:4f:10:74:e8:61:34:aa:38:29:43:ac:f2:0e:c4:c2:
         91:a6:6d:4d:8b:5a:b1:e2:a1:66:f4:ad:e8:7b:55:33:f7:23:
         8d:ca:36:0e:80:a3:a2:ce:f7:d5:94:1b:7b:f7:e7:00:f7:47:
         cd:cf:72:6b:39:d4:88:ff:f7:6a:51:aa:58:1d:2c:a4:57:b6:
         1d:10:c4:d2:da:17:a7:c3:35:a4:77:a9:07:74:8d:7b:cf:9e:
         4c:e0:b9:57:c9:09:ee:36:4f:82:e7:67:3a:e1:b1:82:d5:5b:
         f7:16:03:62:db:6e:4e:bf:50:ac:e4:f8:65:84:ec:c5:3c:fb:
         03:6e:8e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 11:05:30 2026 by rpki-client