Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3792F7E573C11F0B9BF376CC4F9AE02.roa
File:                     F3792F7E573C11F0B9BF376CC4F9AE02.roa (raw, json)
Hash identifier:          4dxyWJa0r4GonHVjY09XT5JxbYobAIeJ3vkhrxdXof8=
Subject key identifier:   04:E4:19:C3:2B:0C:2A:15:12:AC:C2:F3:D8:95:3F:63:B7:54:7A:B9
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EFB6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3792F7E573C11F0B9BF376CC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 16:45:05 +0000
ROA not before:           Mon 06 Jul 2026 16:45:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     135181
IP address blocks:        2001:df0:5ec0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61366 (0xefb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 16:45:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4bdb91-1395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c2:c4:e1:91:0a:02:17:cf:c2:86:cb:c9:c7:
                    95:fd:3e:26:5e:94:a8:fd:c0:d8:1b:bd:0e:ea:ff:
                    0e:78:a2:25:91:18:db:aa:71:2e:2e:05:65:fc:2c:
                    ed:dc:04:e1:5b:ab:8c:42:d4:5c:1a:cc:50:c5:7b:
                    de:82:f1:65:0e:2a:b7:6d:04:39:82:54:de:0c:55:
                    7f:e1:49:16:b5:fb:a3:da:53:6b:20:6f:80:89:d0:
                    42:c0:d3:7f:96:81:a5:9c:9c:b8:76:45:c5:e1:1f:
                    72:11:55:9b:97:57:58:f7:29:33:86:10:da:d8:9f:
                    5f:3b:26:05:13:89:cb:5c:70:c6:01:b6:6d:5e:be:
                    df:bd:78:13:9f:47:4c:9a:88:1c:37:6a:d8:54:00:
                    e0:a9:9c:6f:62:dc:61:8b:69:60:0d:6a:5b:b2:27:
                    52:92:b1:eb:7e:c9:d0:1b:f5:4a:56:9e:e3:2e:a0:
                    ff:b0:d9:51:2e:04:d2:81:da:82:a0:29:8e:05:a8:
                    56:a9:3b:66:9d:c0:a4:86:99:1a:f3:df:dc:ab:39:
                    10:97:ff:97:cc:29:c2:10:82:ac:69:d6:60:58:fd:
                    36:8b:4a:e8:f7:82:a5:5e:c3:26:8f:d2:b2:ca:6e:
                    6e:0a:88:73:e5:95:3b:dc:9e:75:91:fe:aa:e2:43:
                    39:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E4:19:C3:2B:0C:2A:15:12:AC:C2:F3:D8:95:3F:63:B7:54:7A:B9
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F3792F7E573C11F0B9BF376CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:5ec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:c7:29:37:cd:76:93:91:ca:a7:17:83:e1:bd:7d:99:88:af:
         bf:92:c4:02:a9:89:df:e6:04:9c:4e:6c:70:11:67:0e:4f:0e:
         ae:fa:b1:81:fc:c8:23:99:85:a2:bf:aa:dc:9d:25:cc:98:b6:
         b3:18:68:11:56:b8:1f:f4:c7:c0:bc:c5:d4:19:98:bb:ec:13:
         4b:45:19:c2:38:35:74:3b:b9:5f:18:94:b7:85:67:2f:35:76:
         cc:81:8b:63:a2:c5:1b:4e:fc:08:d7:84:e4:da:85:d1:0d:79:
         bc:1d:55:15:5a:58:2a:38:fd:10:7d:73:99:59:7c:b5:bf:61:
         0a:f4:a1:7e:02:01:85:9d:b5:37:d4:1a:ac:5d:09:fd:53:7f:
         82:46:7a:21:cf:b3:b4:92:fe:c5:dc:fc:fa:a9:ff:37:8c:c4:
         6d:4a:e6:97:b8:24:37:19:a0:a6:30:97:96:ef:7c:22:37:13:
         66:46:1e:2d:cb:3b:a6:e9:90:f1:17:ea:60:76:14:6a:5a:c8:
         47:fd:5a:05:cf:f8:1c:7f:10:83:0b:d0:09:7d:65:f1:e8:6b:
         64:22:2e:1c:a1:60:25:09:d9:b8:c4:61:40:49:89:dc:ef:e3:
         95:95:2d:02:33:c4:5e:66:59:bb:41:34:33:a3:23:bf:08:ae:
         b4:03:a3:52
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDAO+2MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE2NDUwNVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmRiOTEtMTM5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL/CxOGRCgIXz8KGy8nHlf0+Jl6UqP3A2Bu9Dur/DniiJZEY26pxLi4FZfws
7dwE4VurjELUXBrMUMV73oLxZQ4qt20EOYJU3gxVf+FJFrX7o9pTayBvgInQQsDT
f5aBpZycuHZFxeEfchFVm5dXWPcpM4YQ2tifXzsmBROJy1xwxgG2bV6+3714E59H
TJqIHDdq2FQA4Kmcb2LcYYtpYA1qW7InUpKx637J0Bv1Slae4y6g/7DZUS4E0oHa
gqApjgWoVqk7Zp3ApIaZGvPf3Ks5EJf/l8wpwhCCrGnWYFj9NotK6PeCpV7DJo/S
sspubgqIc+WVO9yedZH+quJDOdkCAwEAAaOCAmMwggJfMB0GA1UdDgQWBBQE5BnD
KwwqFRKswvPYlT9jt1R6uTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0YzNzkyRjdF
NTczQzExRjBCOUJGMzc2Q0M0RjlBRTAyLnJvYTAiBggrBgEFBQcBBwEB/wQTMBEw
DwQCAAIwCQMHACABDfBewDANBgkqhkiG9w0BAQsFAAOCAQEAB8cpN812k5HKpxeD
4b19mYivv5LEAqmJ3+YEnE5scBFnDk8OrvqxgfzII5mFor+q3J0lzJi2sxhoEVa4
H/THwLzF1BmYu+wTS0UZwjg1dDu5XxiUt4VnLzV2zIGLY6LFG078CNeE5NqF0Q15
vB1VFVpYKjj9EH1zmVl8tb9hCvShfgIBhZ21N9QarF0J/VN/gkZ6Ic+ztJL+xdz8
+qn/N4zEbUrml7gkNxmgpjCXlu98IjcTZkYeLcs7pumQ8RfqYHYUalrIR/1aBc/4
HH8QgwvQCX1l8ehrZCIuHKFgJQnZuMRhQEmJ3O/jlZUtAjPEXmZZu0E0M6Mjvwiu
tAOjUg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:45:16 2026 by rpki-client