Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF8551F2CB7911F0AD3ED984C4F9AE02.roa
File:                     EF8551F2CB7911F0AD3ED984C4F9AE02.roa (raw, json)
Hash identifier:          M0qA6q52aJwnB6KqKKg7Scqh4ip7sE8DtQqbXQeV3V4=
Subject key identifier:   B3:08:EC:BA:CB:22:57:EB:86:1C:54:5E:6E:0B:7D:E1:A1:61:55:A7
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F703
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF8551F2CB7911F0AD3ED984C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:46:56 +0000
ROA not before:           Mon 06 Jul 2026 17:46:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154391
IP address blocks:        2001:df6:5d40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63235 (0xf703)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:46:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bea10-27ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8c:de:ee:e5:95:0e:42:a4:0f:2c:b1:1c:ba:
                    cb:2c:60:a1:7f:de:b5:56:5c:b1:8c:11:14:b3:90:
                    e4:7a:e1:59:0d:d9:b4:b6:63:28:7c:22:15:17:77:
                    73:6c:f3:5e:3a:88:c4:36:69:19:03:0c:93:40:23:
                    a4:21:f8:5f:c8:cc:78:61:74:cd:52:da:5d:e6:08:
                    bf:0c:75:57:fc:70:8a:e9:f6:df:82:58:a8:19:73:
                    07:76:84:e9:f9:8c:fe:c1:99:2c:1b:65:97:27:08:
                    4d:02:51:ad:a2:9c:79:95:74:df:6e:59:d9:e7:a2:
                    8b:85:36:58:50:eb:92:18:6a:19:c3:31:ef:87:ac:
                    97:7b:eb:f7:b0:b0:24:87:f1:ca:ba:52:54:58:ad:
                    31:cd:ec:f0:b9:7b:1a:5d:70:3b:55:7c:32:6b:7a:
                    62:c9:28:96:50:00:47:f2:d0:c0:56:4a:29:00:6c:
                    93:b4:07:f0:e7:36:56:fb:3c:07:06:61:db:f8:6f:
                    3e:a7:28:fc:cf:d9:cd:72:62:6c:cb:fa:61:b7:b1:
                    6e:58:b6:64:48:76:c2:5a:f4:82:ef:e2:bf:a9:de:
                    ee:da:d8:73:7b:da:b9:32:bd:6c:25:35:90:3b:25:
                    cc:8d:3e:1a:1a:56:88:93:99:09:40:d0:c7:8b:c2:
                    b4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:08:EC:BA:CB:22:57:EB:86:1C:54:5E:6E:0B:7D:E1:A1:61:55:A7
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF8551F2CB7911F0AD3ED984C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:5d40::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:ce:42:2d:3d:4f:ea:3d:7b:df:4e:bd:d3:ae:d5:92:fa:de:
         3e:85:16:95:80:76:03:85:af:7a:89:2f:c7:ad:13:55:cf:26:
         87:95:3e:8e:1a:ac:4d:75:be:f8:81:16:91:70:3c:03:2c:fd:
         b9:a2:0c:be:67:79:8a:3c:18:f7:18:4b:0f:eb:1b:53:66:de:
         2c:1a:2b:16:bb:49:b0:48:17:52:04:af:21:70:10:5c:14:f2:
         2b:b3:b0:a3:92:bd:6f:14:30:10:8a:2d:37:9e:e4:9b:14:60:
         6a:6d:39:bd:f8:b0:19:95:cf:df:31:0c:cb:73:43:bd:ef:56:
         1a:e6:83:14:79:d6:3d:23:c4:b5:c1:b2:8e:a8:a6:40:33:08:
         d9:90:71:ea:fc:fa:7d:b1:d9:63:37:79:fc:e4:c6:12:2c:11:
         db:ee:24:7d:fc:ec:21:39:fa:1c:3d:83:a1:b6:a4:0a:54:cf:
         eb:97:05:62:a3:e8:90:44:51:5a:ce:72:af:83:b6:d5:61:0e:
         41:49:66:1e:2d:cc:6a:58:dc:52:a1:77:c2:48:ea:be:c7:8d:
         1d:12:74:aa:6b:ac:ce:96:83:84:dc:77:07:14:6a:ea:07:e2:
         14:0e:29:cf:5e:ae:b8:2e:f0:86:fe:52:65:30:58:0c:5a:ba:
         c8:62:9d:38
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAPcDMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3NDY1NloXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmVhMTAtMjdlYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALGM3u7llQ5CpA8ssRy6yyxgoX/etVZcsYwRFLOQ5HrhWQ3ZtLZjKHwiFRd3
c2zzXjqIxDZpGQMMk0AjpCH4X8jMeGF0zVLaXeYIvwx1V/xwiun234JYqBlzB3aE
6fmM/sGZLBtllycITQJRraKceZV0325Z2eeii4U2WFDrkhhqGcMx74esl3vr97Cw
JIfxyrpSVFitMc3s8Ll7Gl1wO1V8Mmt6YskollAAR/LQwFZKKQBsk7QH8Oc2Vvs8
BwZh2/hvPqco/M/ZzXJibMv6Ybexbli2ZEh2wlr0gu/iv6ne7trYc3vauTK9bCU1
kDslzI0+GhpWiJOZCUDQx4vCtPsCAwEAAaOCAmMwggJfMB0GA1UdDgQWBBSzCOy6
yyJX64YcVF5uC33hoWFVpzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VGODU1MUYy
Q0I3OTExRjBBRDNFRDk4NEM0RjlBRTAyLnJvYTAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACABDfZdQDANBgkqhkiG9w0BAQsFAAOCAQEAN85CLT1P6j173069
067VkvrePoUWlYB2A4Wveokvx60TVc8mh5U+jhqsTXW++IEWkXA8Ayz9uaIMvmd5
ijwY9xhLD+sbU2beLBorFrtJsEgXUgSvIXAQXBTyK7Owo5K9bxQwEIotN57kmxRg
am05vfiwGZXP3zEMy3NDve9WGuaDFHnWPSPEtcGyjqimQDMI2ZBx6vz6fbHZYzd5
/OTGEiwR2+4kffzsITn6HD2DobakClTP65cFYqPokERRWs5yr4O21WEOQUlmHi3M
aljcUqF3wkjqvseNHRJ0qmuszpaDhNx3BxRq6gfiFA4pz16uuC7whv5SZTBYDFq6
yGKdOA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:34:18 2026 by rpki-client