Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F0275A6C66CD11F08E50CB41C4F9AE02.roa
File:                     F0275A6C66CD11F08E50CB41C4F9AE02.roa (raw, json)
Hash identifier:          8aqTkYG1rZr384BExktmdF3P94Hlu2jGL97gU85zVh8=
Subject key identifier:   4B:B1:3B:3A:01:33:03:12:0F:6E:FD:81:FD:7E:72:AC:67:FE:F4:CF
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F6E0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F0275A6C66CD11F08E50CB41C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:45:43 +0000
ROA not before:           Mon 06 Jul 2026 17:45:43 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154057
IP address blocks:        2402:17e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63200 (0xf6e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:45:43 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be9c7-c026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e8:b7:9a:73:d1:a9:2b:c2:ec:54:5f:3b:78:
                    20:56:06:86:75:e3:af:af:b5:98:58:6b:fa:d6:5a:
                    80:a1:d0:55:e0:97:86:26:e6:45:aa:ee:7d:60:e5:
                    4a:7a:6f:9e:e7:a7:6f:ae:d1:13:70:03:9a:dc:71:
                    4e:12:70:58:a8:85:c8:01:4e:28:e4:3b:49:13:9b:
                    58:73:f2:11:bd:1d:01:06:73:d8:2c:34:3f:40:60:
                    40:d5:90:36:62:4b:ac:f2:55:cd:44:de:1e:ce:91:
                    75:8c:17:a8:63:fa:26:c4:ff:57:43:fb:c6:b5:88:
                    37:b4:53:ee:5e:27:e4:59:46:56:da:e4:71:f9:6a:
                    af:04:29:ee:c0:e2:43:e3:ea:a9:01:96:0f:5d:2c:
                    c5:58:e1:05:1a:2c:2e:7b:0c:23:2e:52:e0:c3:27:
                    72:cd:e1:c5:58:ae:66:03:b0:6f:ec:12:2f:5a:85:
                    74:96:55:f5:03:cc:d3:0f:6f:e0:c0:a6:69:51:9b:
                    af:36:45:3e:9c:ab:a9:45:0c:23:c2:f4:18:1d:aa:
                    18:fb:a6:a4:9f:29:0e:a2:ee:bc:c5:41:c2:25:9b:
                    35:5d:c7:46:d7:ff:b1:cf:c8:19:c8:30:13:ed:4a:
                    e9:c2:ba:3f:7f:36:bf:e9:2a:60:71:8a:c8:4d:06:
                    3d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:B1:3B:3A:01:33:03:12:0F:6E:FD:81:FD:7E:72:AC:67:FE:F4:CF
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F0275A6C66CD11F08E50CB41C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:17e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:d6:dc:e4:83:a0:f4:59:ea:cc:45:1d:06:ce:90:95:fb:5c:
         b2:10:9e:96:78:fa:a7:60:c8:d8:4e:11:8b:59:ff:d4:c2:a4:
         18:2b:7b:c5:7a:6f:f8:1e:6d:5e:5c:9f:64:3f:41:c0:0c:33:
         67:59:cd:3d:0c:fc:11:0e:71:d7:98:0b:79:84:63:9e:45:0c:
         4c:9d:6f:e8:d8:16:78:2c:d5:6c:42:78:b1:f8:f9:24:6c:76:
         69:bc:22:42:3b:da:4b:b2:ea:2e:07:f3:b5:36:93:3d:0a:0f:
         13:e1:d4:62:3a:d6:23:06:ef:dd:67:de:44:09:0d:c5:38:12:
         5b:eb:cc:9b:b1:fc:c2:c1:18:ab:0a:1f:24:b4:4e:75:aa:71:
         db:13:df:a9:df:93:cd:60:7f:4c:47:b7:17:41:00:44:4a:88:
         ff:51:f8:21:71:16:7f:bc:ed:1f:c5:6c:e9:45:d3:b2:e4:14:
         bd:9e:d4:a4:d6:63:0d:e9:ff:34:25:1b:07:c9:21:66:cc:68:
         bb:b8:44:5d:d6:77:9e:8e:39:c5:0e:52:79:65:e7:58:a1:4a:
         4b:92:d2:a8:34:b4:83:3e:11:02:df:df:fa:03:c8:a5:30:26:
         2e:f5:ca:c2:1b:2d:7e:4b:c0:c3:24:90:c8:b8:00:ee:8f:9b:
         84:26:6a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:06 2026 by rpki-client