Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/A24902C8623B11F0BEB49510C4F9AE02.roa
File:                     A24902C8623B11F0BEB49510C4F9AE02.roa (raw, json)
Hash identifier:          9hWkzIMPHr3u4aBMV/4p5NjvOfvSqGpfsyIm9FgrEFk=
Subject key identifier:   53:E8:91:12:77:99:25:8B:63:8F:28:A1:3E:4E:34:79:C5:64:A3:D8
Certificate issuer:       /CN=A918E951/serialNumber=4D8F580C8F5759467DB8EA0F08C311A96D3B3FBB
Certificate serial:       AB
Authority key identifier: 4D:8F:58:0C:8F:57:59:46:7D:B8:EA:0F:08:C3:11:A9:6D:3B:3F:BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/A24902C8623B11F0BEB49510C4F9AE02.roa
Signing time:             Fri 05 Jun 2026 07:41:02 +0000
ROA not before:           Fri 05 Jun 2026 07:41:02 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     45773
IP address blocks:        2001:df5:d2c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl
                          rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:17:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E951, serialNumber=4D8F580C8F5759467DB8EA0F08C311A96D3B3FBB
        Validity
            Not Before: Jun  5 07:41:02 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a227d8e-09ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1d:5b:1e:c2:96:4d:ee:e0:41:57:f9:77:7f:
                    91:3d:7b:41:94:5f:3b:42:94:df:e3:2c:9e:6b:ee:
                    70:6b:aa:d8:fa:51:44:b9:5a:bb:81:b5:88:4c:41:
                    ba:0a:74:f4:52:e2:ed:a5:30:cb:ff:42:87:fa:fe:
                    e2:32:ab:5f:0d:05:ba:d2:af:70:ab:92:86:5e:2e:
                    0a:22:33:2e:f9:c3:b8:45:0b:8a:1e:a8:a8:73:8c:
                    14:5e:f0:2a:cf:49:61:9a:3d:ec:b1:01:cb:a8:1f:
                    5d:b6:b0:2a:4a:a6:8e:76:0b:96:79:fc:50:3c:70:
                    16:4e:a6:86:2a:2e:7f:70:39:c4:07:b7:91:db:f9:
                    62:29:39:97:71:f7:17:21:b9:36:11:7f:3e:ae:13:
                    3c:7d:d3:b3:15:19:82:ab:6a:19:2b:c2:18:80:87:
                    2a:e4:72:b8:22:c0:10:90:fa:bc:90:9b:1d:08:51:
                    ba:7b:3f:c3:0a:a7:e1:11:55:82:c7:f0:62:ef:22:
                    14:4b:a2:be:07:4d:ae:64:27:25:2d:de:56:cf:a4:
                    b2:e7:21:2d:10:18:29:96:27:6b:99:08:63:03:e4:
                    c1:b8:79:8b:93:58:4a:1b:db:32:e8:74:f5:01:f8:
                    9b:e8:f4:b7:d9:89:0e:ad:e9:9b:ff:6b:7e:29:2f:
                    46:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E8:91:12:77:99:25:8B:63:8F:28:A1:3E:4E:34:79:C5:64:A3:D8
            X509v3 Authority Key Identifier:
                keyid:4D:8F:58:0C:8F:57:59:46:7D:B8:EA:0F:08:C3:11:A9:6D:3B:3F:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/TY9YDI9XWUZ9uOoPCMMRqW07P7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TY9YDI9XWUZ9uOoPCMMRqW07P7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E951/5BB0743C623A11F0A7E2760BC4F9AE02/A24902C8623B11F0BEB49510C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:d2c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:a8:55:92:7e:8b:eb:ac:2a:66:ba:61:ea:bb:00:5e:90:54:
         5e:82:24:6c:52:ad:ed:76:40:a5:f4:4f:2c:c0:7a:20:a0:05:
         2d:f9:54:d2:0f:e4:67:7a:d2:1f:f4:1e:c0:62:4e:2b:1a:32:
         4e:0f:d2:d3:b2:95:c7:0a:37:78:63:66:a8:ae:75:e4:db:08:
         a6:07:29:75:19:db:79:bf:48:19:d7:48:8a:b9:94:bf:db:fc:
         84:dd:9a:fd:2e:bf:ed:ba:08:b4:b1:b8:5a:8d:05:bf:4d:47:
         f3:98:b4:ad:d6:bc:e5:f1:20:02:5a:ae:23:c0:c7:0d:4f:18:
         ba:01:7d:db:eb:9c:c4:9a:3e:01:0f:46:ce:db:0b:e8:43:6c:
         58:31:14:49:6c:94:56:9e:5a:78:ef:1b:94:0c:92:82:fe:be:
         38:35:d3:4a:b9:1c:12:0f:a5:10:84:5d:a1:d1:8e:7b:f9:c0:
         64:c0:5a:65:c7:87:6b:f7:8c:1e:b1:a7:1d:42:99:87:6c:42:
         46:99:81:14:50:92:bb:5b:2b:9f:7e:59:f6:48:90:bd:d3:80:
         3e:b7:2a:05:9c:cb:32:2d:7e:f8:a0:3a:2d:9f:96:86:38:b0:
         77:3b:7e:68:e1:b2:87:cf:ca:21:a1:0f:48:26:89:e5:d8:c1:
         7b:d3:b0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:02:20 2026 by rpki-client