Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12615B88BDE011EAAEA46554C4F9AE02.roa
File:                     12615B88BDE011EAAEA46554C4F9AE02.roa (raw, json)
Hash identifier:          ARcCnb0/ap0zQt+UqleRZMLQPjMotSupMFRGoytarfM=
Subject key identifier:   CD:76:2E:04:C5:57:0E:F7:9E:FE:B4:23:31:08:44:49:B9:29:1B:41
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D4B8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12615B88BDE011EAAEA46554C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:33:42 +0000
ROA not before:           Thu 08 May 2025 16:12:31 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138770
IP address blocks:        2001:df1:9980::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:27:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54456 (0xd4b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:12:31 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4bec6-61f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c8:a4:a5:3d:5c:5f:c3:8f:90:0b:4b:98:f6:
                    bc:27:a4:8b:d3:ce:4c:c0:04:f9:65:9e:f8:0f:fc:
                    a6:70:58:84:5d:bc:63:69:c3:8c:6a:b8:83:b2:07:
                    aa:f0:e4:d7:66:6e:66:be:3b:9d:fe:ee:f3:8d:30:
                    eb:14:4c:40:17:7a:27:67:a6:cc:d4:8b:c8:86:5a:
                    6e:47:f2:e0:9f:3c:0b:76:aa:3a:c4:c8:e6:5a:b3:
                    d8:49:59:80:bc:37:9d:8b:b6:32:26:60:5d:81:18:
                    32:4c:88:98:da:fb:81:04:2d:40:a9:06:c7:50:a7:
                    a1:45:11:eb:27:78:60:90:07:95:a9:b0:74:c6:eb:
                    86:dd:5b:4e:a1:6a:d0:5a:67:f4:50:b5:a6:09:b5:
                    24:2e:7f:3d:1d:ff:05:51:5a:ce:76:56:c9:5b:a3:
                    74:52:87:45:95:e3:de:6e:be:72:1f:48:0c:48:9e:
                    2b:37:89:4d:4a:bf:02:43:79:8b:cd:94:05:b8:28:
                    97:d2:71:43:70:39:4f:3a:da:5d:ad:3c:1d:32:ce:
                    63:bc:ac:94:77:cb:04:15:c6:b0:36:19:63:be:6c:
                    3e:8f:0b:ec:e7:1c:42:ca:09:67:f0:e1:94:7b:6f:
                    d0:43:e4:ee:8d:58:d7:64:aa:db:67:82:d3:7a:42:
                    63:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:76:2E:04:C5:57:0E:F7:9E:FE:B4:23:31:08:44:49:B9:29:1B:41
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/12615B88BDE011EAAEA46554C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:9980::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:dc:2f:46:b4:26:96:f6:42:2a:59:16:70:70:06:29:e1:68:
         a5:f8:fe:9c:40:b6:28:4d:39:da:13:48:a7:68:b0:c7:37:c2:
         8c:c4:fa:5a:98:e8:39:95:a9:eb:b7:46:43:5a:1e:d9:fb:ba:
         04:dd:cf:0d:a0:05:df:13:93:61:f6:dc:20:a7:42:a5:d4:0b:
         22:95:36:c4:74:82:04:b9:25:65:e7:cd:37:e2:d6:0c:a9:6c:
         01:e2:4a:24:96:14:a9:11:e3:e9:13:7a:99:92:55:fd:53:2e:
         84:f0:a9:9d:6e:91:30:c4:33:69:e1:ec:60:b3:f4:ad:02:10:
         9b:a6:e8:2a:7a:98:32:c5:b6:00:5f:71:61:4c:09:42:16:11:
         92:74:69:a1:89:a5:48:40:71:37:44:fb:a2:47:64:af:ea:fe:
         82:67:97:66:19:7e:72:56:c0:7e:f8:81:5c:62:e4:61:71:70:
         dd:d9:b3:ff:10:58:74:00:c6:0a:0b:bd:f9:c8:75:8e:52:ee:
         44:7a:56:2f:4a:dd:49:1d:8b:18:61:e7:dd:ec:f0:d4:6d:d8:
         12:06:67:73:58:e6:22:1e:7d:c8:e2:e3:8d:52:09:78:34:4f:
         60:b0:13:75:bb:36:1d:aa:1f:c7:05:98:c0:fd:1f:24:06:5a:
         c4:20:27:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:31:48 2026 by rpki-client