Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF8551F2CB7911F0AD3ED984C4F9AE02.roa
File:                     EF8551F2CB7911F0AD3ED984C4F9AE02.roa (raw, json)
Hash identifier:          ycBmqaWl6Yo/8a4fKKa6+0sQnR1aOJs3DKVaolRxRQY=
Subject key identifier:   E4:8A:E1:51:76:B6:9D:93:21:13:19:E3:26:B0:A0:AC:A7:0E:D6:60
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EAE3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF8551F2CB7911F0AD3ED984C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:47:42 +0000
ROA not before:           Sun 31 May 2026 17:47:42 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     154391
IP address blocks:        2001:df6:5d40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 09:04:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60131 (0xeae3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:47:42 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c743e-72f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:a3:3a:9e:36:97:f2:b5:7f:65:86:d4:8d:
                    f6:fe:2c:d8:ef:f5:87:55:0d:77:4e:0f:15:94:28:
                    4e:e2:0e:42:6b:30:3f:7c:41:6e:54:93:1d:2e:52:
                    97:e7:c4:0f:f5:b0:d5:48:13:bb:7b:b9:08:03:8e:
                    0a:42:2d:d3:7a:ef:f4:20:c5:84:5f:98:ce:a7:bb:
                    c9:64:1d:0f:4c:f1:3a:70:34:df:ed:2f:8d:e0:65:
                    4f:f2:8d:db:e3:79:87:f1:aa:79:7a:96:1d:ea:2a:
                    4b:69:18:ca:93:e8:74:f5:1b:85:41:e0:ef:e4:b9:
                    06:88:3c:01:9f:d7:65:71:df:ea:b2:21:14:b8:ca:
                    b4:3d:6b:c3:d2:5e:1e:82:64:bd:0f:24:30:03:d6:
                    5a:20:d3:d2:fc:98:df:b5:e5:e2:29:c1:c6:e9:27:
                    49:8b:5e:01:65:48:0b:4d:75:51:d4:1f:66:87:88:
                    7c:44:fc:1b:0d:54:72:75:a2:a3:65:25:73:91:af:
                    cc:77:b0:82:5b:ad:78:36:39:29:ca:73:ec:1f:66:
                    37:75:ed:a3:af:e0:7d:9d:3d:a8:a4:dc:b3:ea:6c:
                    1c:a7:49:d9:ee:7c:34:2a:e4:e0:87:a2:e3:58:e9:
                    ad:90:32:87:8f:38:3c:07:81:a4:4d:df:19:4e:3a:
                    ff:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8A:E1:51:76:B6:9D:93:21:13:19:E3:26:B0:A0:AC:A7:0E:D6:60
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EF8551F2CB7911F0AD3ED984C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:5d40::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:d0:2a:9f:0d:f6:d4:5c:66:84:c7:b0:bd:2a:e5:a7:aa:81:
         de:21:08:ba:62:87:4c:ab:8f:34:dc:b1:e7:16:a9:5c:6b:f6:
         55:7c:4b:d0:ae:7e:58:e8:e5:1b:a9:da:6c:4f:90:84:e8:77:
         66:a3:9c:9f:eb:09:31:cc:85:8f:87:f3:87:37:91:f1:ca:39:
         3f:8a:7c:53:8f:15:70:0b:7d:76:d6:0d:8d:75:67:4f:7e:ae:
         29:37:49:38:63:56:a7:57:f5:77:cf:68:60:83:c8:05:cc:33:
         1b:11:9e:8c:f1:67:35:aa:ab:0b:18:c8:d0:7d:9c:6c:f0:16:
         98:3e:80:0a:3e:d0:f1:9b:23:50:56:1f:0b:82:a4:f4:aa:8c:
         cd:77:29:f9:f8:c6:6f:f0:72:fb:d7:50:78:39:8e:93:76:18:
         63:4d:a6:b5:f5:88:c0:16:cf:75:87:50:cf:60:55:79:e7:c7:
         d8:57:fe:75:4b:0a:7e:5b:cf:da:96:a8:d5:06:03:21:81:4b:
         7f:44:2b:79:44:8a:87:a0:2b:e7:34:be:58:50:61:1a:08:f0:
         52:66:10:bd:56:ed:b1:fc:e8:99:9d:5c:1d:76:a4:78:aa:4a:
         b2:9b:7b:1b:b5:f5:a8:93:63:e1:97:13:4f:85:1c:98:ac:25:
         84:27:f5:37
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAOrjMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3NDc0MloXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzc0M2UtNzJmMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALsRozqeNpfytX9lhtSN9v4s2O/1h1UNd04PFZQoTuIOQmswP3xBblSTHS5S
l+fED/Ww1UgTu3u5CAOOCkIt03rv9CDFhF+Yzqe7yWQdD0zxOnA03+0vjeBlT/KN
2+N5h/GqeXqWHeoqS2kYypPodPUbhUHg7+S5Bog8AZ/XZXHf6rIhFLjKtD1rw9Je
HoJkvQ8kMAPWWiDT0vyY37Xl4inBxuknSYteAWVIC011UdQfZoeIfET8Gw1UcnWi
o2Ulc5GvzHewgluteDY5Kcpz7B9mN3Xto6/gfZ09qKTcs+psHKdJ2e58NCrk4Iei
41jprZAyh484PAeBpE3fGU46//sCAwEAAaOCAmMwggJfMB0GA1UdDgQWBBTkiuFR
dradkyETGeMmsKCspw7WYDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VGODU1MUYy
Q0I3OTExRjBBRDNFRDk4NEM0RjlBRTAyLnJvYTAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACABDfZdQDANBgkqhkiG9w0BAQsFAAOCAQEAqtAqnw321FxmhMew
vSrlp6qB3iEIumKHTKuPNNyx5xapXGv2VXxL0K5+WOjlG6nabE+QhOh3ZqOcn+sJ
McyFj4fzhzeR8co5P4p8U48VcAt9dtYNjXVnT36uKTdJOGNWp1f1d89oYIPIBcwz
GxGejPFnNaqrCxjI0H2cbPAWmD6ACj7Q8ZsjUFYfC4Kk9KqMzXcp+fjGb/By+9dQ
eDmOk3YYY02mtfWIwBbPdYdQz2BVeefH2Ff+dUsKflvP2pao1QYDIYFLf0QreUSK
h6Ar5zS+WFBhGgjwUmYQvVbtsfzomZ1cHXakeKpKspt7G7X1qJNj4ZcTT4UcmKwl
hCf1Nw==
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:09:30 2026 by rpki-client