Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/8510168C647F11F181D25E937C47A888.roa
File:                     8510168C647F11F181D25E937C47A888.roa (raw, json)
Hash identifier:          rWaOY5OXx5kf6ACkVrtML4Dc3veCj5q+KmneKhUDZEU=
Subject key identifier:   2D:00:07:4B:18:29:A8:83:EF:8C:CB:AD:1C:BB:0B:ED:50:D6:07:69
Certificate issuer:       /CN=A918B16C/serialNumber=438FF77842067882C6D493F66B6125EF2195D547
Certificate serial:       0B
Authority key identifier: 43:8F:F7:78:42:06:78:82:C6:D4:93:F6:6B:61:25:EF:21:95:D5:47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4_3eEIGeILG1JP2a2El7yGV1Uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/8510168C647F11F181D25E937C47A888.roa
Signing time:             Wed 10 Jun 2026 03:50:28 +0000
ROA not before:           Wed 10 Jun 2026 03:50:28 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     154708
IP address blocks:        2001:df7:1840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.crl
                          rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4_3eEIGeILG1JP2a2El7yGV1Uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 09:17:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B16C, serialNumber=438FF77842067882C6D493F66B6125EF2195D547
        Validity
            Not Before: Jun 10 03:50:28 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a28df04-6dd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3b:7c:93:ec:5d:92:f9:73:ce:b2:f4:89:32:
                    2d:05:44:7d:27:b9:03:fe:ed:23:77:b6:3c:b5:b1:
                    7e:b7:10:d8:e0:3f:17:c4:93:0b:52:42:28:05:90:
                    82:6e:43:02:62:de:a1:b9:52:f2:7b:ba:7c:c0:55:
                    0e:aa:05:ce:d9:60:d2:a0:1d:9f:30:32:c7:85:26:
                    1a:d3:be:92:85:d0:33:c3:7c:ff:04:91:d8:67:d9:
                    85:1e:fd:6f:5a:d4:c1:74:ae:22:a5:8b:14:d4:1d:
                    72:c7:80:63:6c:b9:b3:7c:10:77:3a:df:b1:20:63:
                    72:4a:47:6e:aa:a0:63:f2:05:ed:4e:be:d3:46:31:
                    5f:64:0c:06:83:65:e0:50:b7:f5:29:58:96:df:1f:
                    b9:73:85:43:f1:75:07:60:07:96:4d:f1:86:1e:13:
                    3b:a3:ed:5d:cd:ad:f4:3d:d0:f9:8b:98:85:60:25:
                    7f:bb:62:05:f2:25:f4:e6:00:cf:3a:63:8b:ae:87:
                    21:03:d9:f3:e8:6f:99:c1:30:87:6d:81:73:5c:36:
                    dc:0f:71:ec:37:51:15:79:d8:f0:21:3d:46:b4:ec:
                    9d:3b:b6:92:63:19:a3:48:9f:51:00:9b:74:ec:f5:
                    c3:c0:40:0c:eb:5d:28:77:76:1c:f3:4a:cf:5a:e5:
                    1d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:00:07:4B:18:29:A8:83:EF:8C:CB:AD:1C:BB:0B:ED:50:D6:07:69
            X509v3 Authority Key Identifier:
                keyid:43:8F:F7:78:42:06:78:82:C6:D4:93:F6:6B:61:25:EF:21:95:D5:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4_3eEIGeILG1JP2a2El7yGV1Uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/8510168C647F11F181D25E937C47A888.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:1840::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:f4:3f:c3:24:f3:07:99:b4:ba:30:ae:1a:90:d9:eb:bf:53:
         2e:e9:9b:43:44:f9:ef:e6:01:f1:6b:74:9a:fe:fd:5f:5c:18:
         d7:3a:d6:81:80:4c:39:81:d6:f3:cc:28:da:39:2a:47:4f:49:
         4d:af:7e:0e:ed:59:26:fc:d5:b4:a1:93:0c:96:c2:a4:13:de:
         b4:f7:e9:7a:d2:bd:9c:58:42:41:1e:c4:e8:46:bc:77:19:d3:
         f6:1a:34:96:60:93:31:a5:d5:f1:a7:28:92:76:ca:01:ac:ee:
         ae:ef:e8:eb:ce:3a:7a:2c:76:a5:4e:5b:06:79:0d:7f:53:35:
         38:73:ae:fd:81:30:45:bd:ef:2c:4b:60:b5:1c:92:c0:bd:b5:
         b7:e2:0f:9c:18:ae:52:d5:cb:6b:8f:44:4d:23:b2:f7:ac:00:
         b4:b3:f8:67:02:1f:51:14:a1:30:b1:99:98:b4:ec:f2:27:cb:
         0d:e2:1d:be:99:38:2e:72:d7:ed:89:82:4b:51:72:ed:3e:e7:
         4f:a1:51:1f:12:73:3c:89:2d:c1:eb:99:35:48:de:28:16:87:
         55:59:cf:69:9f:3b:ad:5a:d0:75:68:59:36:c5:16:7a:9e:3e:
         1e:9e:5e:c4:bd:b2:f3:cc:eb:1e:61:dd:09:cb:0f:71:5c:8f:
         21:e7:77:ac
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
QjE2QzExMC8GA1UEBRMoNDM4RkY3Nzg0MjA2Nzg4MkM2RDQ5M0Y2NkI2MTI1RUYy
MTk1RDU0NzAeFw0yNjA2MTAwMzUwMjhaFw0yNzA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhMjhkZjA0LTZkZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2O3yT7F2S+XPOsvSJMi0FRH0nuQP+7SN3tjy1sX63ENjgPxfEkwtSQigFkIJu
QwJi3qG5UvJ7unzAVQ6qBc7ZYNKgHZ8wMseFJhrTvpKF0DPDfP8Ekdhn2YUe/W9a
1MF0riKlixTUHXLHgGNsubN8EHc637EgY3JKR26qoGPyBe1OvtNGMV9kDAaDZeBQ
t/UpWJbfH7lzhUPxdQdgB5ZN8YYeEzuj7V3NrfQ90PmLmIVgJX+7YgXyJfTmAM86
Y4uuhyED2fPob5nBMIdtgXNcNtwPcew3URV52PAhPUa07J07tpJjGaNIn1EAm3Ts
9cPAQAzrXSh3dhzzSs9a5R0ZAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQULQAHSxgp
qIPvjMutHLsL7VDWB2kwHwYDVR0jBBgwFoAUQ4/3eEIGeILG1JP2a2El7yGV1Ucw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCMTZDLzRFQTQ0N0JBNjNG
RjExRjFCQTI2RTQ1RDk1NDdBODg4L1E0XzNlRUlHZUlMRzFKUDJhMkVsN3lHVjFV
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUTRfM2VFSUdlSUxHMUpQMmEyRWw3eUdWMVVjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjE2Qy80RUE0NDdCQTYzRkYxMUYxQkEyNkU0NUQ5NTQ3QTg4OC84NTEwMTY4QzY0
N0YxMUYxODFEMjVFOTM3QzQ3QTg4OC5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQ33GEAwDQYJKoZIhvcNAQELBQADggEBACn0P8Mk8weZtLowrhqQ
2eu/Uy7pm0NE+e/mAfFrdJr+/V9cGNc61oGATDmB1vPMKNo5KkdPSU2vfg7tWSb8
1bShkwyWwqQT3rT36XrSvZxYQkEexOhGvHcZ0/YaNJZgkzGl1fGnKJJ2ygGs7q7v
6OvOOnosdqVOWwZ5DX9TNThzrv2BMEW97yxLYLUcksC9tbfiD5wYrlLVy2uPRE0j
svesALSz+GcCH1EUoTCxmZi07PInyw3iHb6ZOC5y1+2JgktRcu0+50+hUR8SczyJ
LcHrmTVI3igWh1VZz2mfO61a0HVoWTbFFnqePh6eXsS9svPM6x5h3QnLD3FcjyHn
d6w=
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:47:08 2026 by rpki-client