Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FCDF01E2729E11EBBF1EEF82C4F9AE02.roa
File:                     FCDF01E2729E11EBBF1EEF82C4F9AE02.roa (raw, json)
Hash identifier:          ttZym19J1bDXLJaB4ybdPNjilxqRWhEId0hVt405ESM=
Subject key identifier:   FD:1D:C9:F7:85:E9:ED:E0:EA:23:85:DC:AC:39:10:56:F5:8B:3D:51
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EB79
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FCDF01E2729E11EBBF1EEF82C4F9AE02.roa
Signing time:             Sun 31 May 2026 17:52:24 +0000
ROA not before:           Sun 31 May 2026 17:52:24 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     583
IP address blocks:        221.134.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60281 (0xeb79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:52:24 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7557-6f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a3:60:dd:cd:fd:53:aa:83:cf:af:93:3f:3f:
                    58:a0:0f:77:fd:41:89:6e:40:99:92:c0:1d:70:a3:
                    b3:86:3c:06:2b:8a:c5:1f:a4:33:b2:2e:0a:3a:c0:
                    e4:f0:2e:4e:b8:ab:32:4c:a9:3f:ec:e3:91:f7:94:
                    d7:45:4c:21:15:bb:fa:7f:13:09:34:25:50:f3:03:
                    6d:c7:04:47:a6:d5:b1:87:e7:5a:1e:72:7d:cd:8b:
                    12:d2:f5:73:36:77:45:72:84:49:bf:6e:f5:de:c1:
                    a6:fc:61:8c:11:67:5e:2d:a0:0c:fa:97:b5:b6:ad:
                    de:d1:b2:58:10:c5:99:8d:2d:1a:82:0d:a7:67:41:
                    6a:51:4e:a7:89:01:35:19:62:13:f4:f6:ce:66:4f:
                    e4:d4:2c:2c:6c:ed:52:68:f5:e0:35:14:0e:2f:58:
                    b9:67:36:77:3a:e4:de:f1:76:52:9e:71:e5:dc:be:
                    75:dc:81:c3:0f:6a:c8:8f:c5:89:62:a5:8d:08:69:
                    0d:34:0d:d3:b2:03:0d:56:37:11:ac:8f:69:1e:4b:
                    10:9b:d9:cf:bf:ec:ba:6b:fb:f6:9b:ed:7f:c0:da:
                    11:ce:83:4f:40:a7:dd:b2:e6:fa:34:eb:c4:ee:78:
                    09:43:10:a4:53:12:a2:28:8d:62:7e:0c:d6:0b:9f:
                    5c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1D:C9:F7:85:E9:ED:E0:EA:23:85:DC:AC:39:10:56:F5:8B:3D:51
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FCDF01E2729E11EBBF1EEF82C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.134.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:ae:6b:5a:73:f5:91:d2:c3:ed:d8:38:20:6f:4d:4c:03:38:
         a2:73:d6:9b:6b:23:ae:27:95:91:ed:7b:ed:0b:1e:b4:32:00:
         71:93:47:c3:3c:d2:7c:e6:06:ed:93:f3:82:9b:8b:c6:4e:b7:
         14:a6:6a:3e:36:59:ed:03:ae:a8:b0:65:5c:56:05:4c:06:47:
         32:8f:3e:46:e3:2e:da:69:d3:93:bc:fe:81:4d:b5:4b:11:38:
         fb:5a:67:37:1b:71:9c:4d:db:72:b9:e4:5e:88:8e:2f:b6:c2:
         ca:88:29:a0:0e:1a:35:00:d1:f1:0b:1a:1b:87:b2:24:95:8f:
         8c:7d:3e:dd:60:16:cb:a3:87:93:cf:54:60:5c:db:dc:ea:ae:
         60:97:f2:b8:9f:09:f8:28:82:90:a5:48:f3:ea:6e:0b:33:80:
         c9:bd:7a:44:ef:69:9b:29:23:2b:8e:d6:d4:7c:b5:c8:56:2c:
         5b:b9:c5:74:ed:e6:23:7b:05:4f:b4:e2:24:1a:ad:47:d7:7c:
         e3:96:94:08:d3:39:31:14:c5:1b:9c:1b:b4:a2:80:fa:97:2a:
         7d:3a:36:99:44:17:04:ef:bd:f9:06:5c:5f:a8:3f:1f:80:5a:
         0c:96:da:d1:c1:7e:4c:e1:92:c3:6f:ac:97:cf:09:5a:3a:87:
         d1:e8:60:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:04:26 2026 by rpki-client