Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB666C226D2911F0B13DC33CC4F9AE02.roa
File:                     EB666C226D2911F0B13DC33CC4F9AE02.roa (raw, json)
Hash identifier:          RHeFQcXGs5ARdIJyxSDHH+t3jI0uvLSDIZKNCqZvLTo=
Subject key identifier:   A7:FF:0F:45:30:C3:B4:DF:A5:61:EE:41:7A:3D:EA:F9:B5:9F:72:89
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EA3B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB666C226D2911F0B13DC33CC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:42:29 +0000
ROA not before:           Sun 31 May 2026 17:42:29 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     152516
IP address blocks:        2001:df4:d640::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59963 (0xea3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:42:29 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7305-b9b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cf:d4:31:c7:b2:00:96:8c:2e:ef:7a:31:49:
                    87:17:56:39:74:0e:e8:b9:97:69:50:99:ed:8a:ce:
                    e8:85:52:74:12:87:c9:ff:2e:a5:7e:71:a3:b9:4f:
                    06:93:61:bd:8a:3f:97:97:a4:19:14:d3:3d:67:d4:
                    44:e9:4c:5b:7c:82:15:b9:f9:64:28:b7:63:d1:d5:
                    13:27:9e:ef:1a:91:5f:dd:ba:af:48:93:ec:68:cf:
                    8a:f4:4e:bd:50:fe:1a:27:8b:bf:1c:32:34:48:73:
                    33:58:df:53:4b:5f:fc:0b:f3:35:5b:4f:dd:83:33:
                    0e:11:de:1e:86:19:4e:c5:eb:f4:64:86:99:f8:99:
                    3d:dc:b5:a1:ec:9d:c9:a5:87:f0:63:20:cd:71:75:
                    4b:97:d0:00:6c:98:99:9f:62:d3:e8:87:fd:72:e1:
                    92:b0:07:5f:b6:97:1d:c1:b3:25:18:85:ac:f6:65:
                    3a:17:a5:96:3b:88:8c:30:b6:af:97:e0:42:84:03:
                    08:68:8e:6b:2f:1e:69:ed:59:c8:a4:be:ac:cd:73:
                    e1:50:cc:4d:1d:7f:66:c0:af:6b:3f:76:af:a1:54:
                    d3:5f:1d:46:d4:34:9e:0a:35:8e:c6:4d:60:6a:d5:
                    ba:f2:48:51:87:bf:e4:9d:27:ba:48:22:03:3d:54:
                    9a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FF:0F:45:30:C3:B4:DF:A5:61:EE:41:7A:3D:EA:F9:B5:9F:72:89
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB666C226D2911F0B13DC33CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:d640::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:c7:ac:e5:8e:e1:35:03:ff:dc:eb:d2:5f:5c:da:ee:4f:29:
         33:b4:31:20:f1:2f:6b:7e:00:b3:c7:b0:df:e4:ff:99:3a:ac:
         80:6f:d6:59:43:89:8e:d7:d6:1c:2f:b9:a5:ea:66:bb:89:40:
         1d:01:2e:83:7d:c0:b4:d9:76:e7:b5:6d:96:2a:0f:b1:3b:1e:
         c6:06:cd:46:aa:67:67:55:01:9c:1f:b9:92:33:ea:f4:7e:15:
         4d:de:54:18:21:43:9a:4c:96:6b:f2:68:65:7c:bc:a4:1a:ee:
         e0:a2:8a:73:68:ae:17:d8:f7:d9:63:cf:01:cc:35:5b:28:63:
         5a:ee:22:aa:4f:4b:98:11:ce:94:b8:b4:13:93:c4:58:e1:bc:
         d2:7b:4d:79:78:72:5c:c4:46:01:4d:26:73:c0:a0:98:53:59:
         15:92:9d:b1:9e:ed:5f:67:55:2e:12:2c:3f:df:08:bc:83:67:
         a5:40:d6:ff:06:71:35:78:af:41:aa:29:13:7d:26:57:f3:6d:
         ec:44:a2:ad:1a:38:e9:cc:c8:eb:a0:f8:60:cf:e8:23:98:f4:
         cc:44:40:f7:48:cc:3b:43:fe:0a:e7:52:80:83:49:9c:83:53:
         e3:fc:33:2f:35:69:97:3a:c1:db:da:f6:f3:79:c0:2d:e7:38:
         32:8e:03:81
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAOo7MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3NDIyOVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzczMDUtYjliMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMzP1DHHsgCWjC7vejFJhxdWOXQO6LmXaVCZ7YrO6IVSdBKHyf8upX5xo7lP
BpNhvYo/l5ekGRTTPWfUROlMW3yCFbn5ZCi3Y9HVEyee7xqRX926r0iT7GjPivRO
vVD+GieLvxwyNEhzM1jfU0tf/AvzNVtP3YMzDhHeHoYZTsXr9GSGmfiZPdy1oeyd
yaWH8GMgzXF1S5fQAGyYmZ9i0+iH/XLhkrAHX7aXHcGzJRiFrPZlOhelljuIjDC2
r5fgQoQDCGiOay8eae1ZyKS+rM1z4VDMTR1/ZsCvaz92r6FU018dRtQ0ngo1jsZN
YGrVuvJIUYe/5J0nukgiAz1UmhUCAwEAAaOCAmMwggJfMB0GA1UdDgQWBBSn/w9F
MMO036Vh7kF6Per5tZ9yiTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VCNjY2QzIy
NkQyOTExRjBCMTNEQzMzQ0M0RjlBRTAyLnJvYTAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACABDfTWQDANBgkqhkiG9w0BAQsFAAOCAQEADMes5Y7hNQP/3OvS
X1za7k8pM7QxIPEva34As8ew3+T/mTqsgG/WWUOJjtfWHC+5pepmu4lAHQEug33A
tNl257VtlioPsTsexgbNRqpnZ1UBnB+5kjPq9H4VTd5UGCFDmkyWa/JoZXy8pBru
4KKKc2iuF9j32WPPAcw1WyhjWu4iqk9LmBHOlLi0E5PEWOG80ntNeXhyXMRGAU0m
c8CgmFNZFZKdsZ7tX2dVLhIsP98IvINnpUDW/wZxNXivQaopE30mV/Nt7ESirRo4
6czI66D4YM/oI5j0zERA90jMO0P+CudSgINJnINT4/wzLzVplzrB29r283nALec4
Mo4DgQ==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:44 2026 by rpki-client