Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/1A582DBABDCB11ED998A723DC4F9AE02.roa
File:                     1A582DBABDCB11ED998A723DC4F9AE02.roa (raw, json)
Hash identifier:          384juJSfXkpiKn653ckYH8G7gAqoZodCMxeGxqOmprY=
Subject key identifier:   75:94:32:40:C4:1C:D4:83:DD:36:29:47:EB:2B:CC:12:BF:D4:8F:00
Certificate issuer:       /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Certificate serial:       1019
Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/1A582DBABDCB11ED998A723DC4F9AE02.roa
Signing time:             Mon 08 Jun 2026 18:20:44 +0000
ROA not before:           Mon 08 Jun 2026 18:20:44 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     133492
IP address blocks:        2402:3180:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl
                          rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:31:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4121 (0x1019)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136BFF, serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
        Validity
            Not Before: Jun  8 18:20:44 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a2707fb-e081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:29:88:85:94:39:21:6e:f6:c2:7d:66:bb:0a:
                    a0:e8:52:22:22:5d:5e:38:94:95:a1:d2:99:c8:39:
                    d0:7f:97:64:22:cc:41:03:83:d3:d6:08:0c:72:22:
                    fc:b8:94:d4:98:a4:37:3d:7b:84:25:15:33:16:74:
                    0f:7f:2a:ee:9a:ee:c5:5f:e2:fd:86:21:be:36:fc:
                    ad:ea:68:4d:ba:9c:e4:07:b8:9a:ea:80:a1:01:f4:
                    33:3a:d5:8d:7f:9b:eb:2e:9d:cc:44:dc:37:38:69:
                    1a:5e:e5:61:d1:72:96:66:3d:c0:38:90:30:2a:8c:
                    bd:4f:7e:65:4f:d4:40:8e:42:30:09:97:a5:81:54:
                    18:17:bd:19:45:44:b6:75:c4:0c:25:a7:5b:ed:e9:
                    f4:3d:31:c6:a8:6a:06:51:b9:4b:2d:0e:e8:0b:84:
                    28:b0:85:eb:32:da:5d:c1:e9:69:16:5a:99:bc:0c:
                    fb:c4:68:81:22:b4:67:78:d0:27:71:ff:84:5a:93:
                    70:f4:4b:2b:5b:09:51:20:80:39:9d:39:4f:21:3c:
                    e8:3a:62:4f:8c:5d:06:1c:56:9a:6e:04:ea:4c:1b:
                    79:a4:f5:8c:52:c9:97:25:07:71:0e:23:3d:d8:30:
                    2c:f4:1e:be:b7:42:ce:67:05:0e:df:fd:75:a3:5e:
                    8e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:94:32:40:C4:1C:D4:83:DD:36:29:47:EB:2B:CC:12:BF:D4:8F:00
            X509v3 Authority Key Identifier:
                keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/1A582DBABDCB11ED998A723DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3180:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         51:cf:e8:d6:c2:fc:ec:14:dd:21:a3:c6:a2:4c:68:b3:a6:c0:
         0d:90:52:67:80:80:ab:24:62:07:3d:e0:6a:56:04:b0:63:cb:
         52:64:26:65:63:05:a6:bc:60:ab:bd:c1:7d:e7:81:96:e3:e5:
         7d:2e:63:fb:e8:57:ce:2d:d5:90:d4:5e:c6:66:7c:18:40:aa:
         da:9c:3c:07:68:17:12:61:eb:84:c0:74:67:1a:ab:f2:cd:8f:
         f7:44:6f:9d:24:e0:2d:d2:a8:78:db:dc:5e:30:c0:50:bc:49:
         a8:6b:1a:20:30:81:d1:12:6b:95:2d:9e:d5:c6:39:20:e0:68:
         94:db:01:8c:b1:b2:52:bf:33:e5:9c:6b:64:fa:7d:45:26:f9:
         98:83:cd:bc:aa:8a:e0:0f:33:cf:e8:16:90:59:8c:89:ee:99:
         c6:d8:dd:33:9b:db:a5:02:80:d2:9a:43:7a:cc:77:23:7d:16:
         c3:b5:20:c8:65:ea:cb:33:b7:39:98:c9:fe:39:6c:95:78:a4:
         5b:d8:1b:2c:e7:12:c8:e3:52:cb:21:cd:78:ae:40:e0:eb:b3:
         ba:de:f5:e3:0f:e8:14:72:31:0c:e0:5b:c9:99:eb:4a:fe:e5:
         70:4f:2f:63:17:ea:41:41:a9:36:1b:54:07:1e:41:ce:9a:c2:
         ee:c1:0d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:24:19 2026 by rpki-client