Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B58001EAA9E611F19720B0783911F970.roa
File:                     B58001EAA9E611F19720B0783911F970.roa (raw, json)
Hash identifier:          S+FlBuFkYkhenhdZJtJsHwX+Z1FpN5s/8oNgsfulmsI=
Subject key identifier:   42:14:A5:09:04:31:4F:7E:3C:0C:20:0B:04:51:A6:13:76:12:2D:A3
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       FBB1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B58001EAA9E611F19720B0783911F970.roa
Signing time:             Sun 06 Sep 2026 11:32:58 +0000
ROA not before:           Sun 06 Sep 2026 11:32:58 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     142209
IP address blocks:        2001:df6:94c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64433 (0xfbb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Sep  6 11:32:58 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a9d4f6a-2374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d9:eb:f6:4f:9d:76:44:6d:b4:26:8f:fa:f1:
                    31:f4:21:e9:8e:a6:06:88:3a:53:9f:87:2b:00:31:
                    ff:f0:3b:56:ae:5d:30:0c:8e:c6:78:ab:82:37:29:
                    ab:05:bd:33:44:6b:8b:bc:f2:0c:b0:65:7b:38:b0:
                    ad:73:77:8f:1a:c8:21:45:34:ce:40:f9:ac:f7:2a:
                    86:2d:e7:97:42:72:78:e8:b2:30:e5:1a:6c:ae:79:
                    16:b1:a3:62:4d:1c:78:9b:e2:e0:74:e1:f2:60:40:
                    2f:fb:6e:d1:98:27:57:99:14:2d:49:83:24:d4:ac:
                    86:fe:3d:3d:61:e8:20:f2:c8:3c:7c:94:08:2d:bc:
                    6e:ae:8d:04:d6:43:8b:0a:3d:ff:e7:76:46:fd:ad:
                    40:df:d0:2c:20:d1:9e:d3:95:2b:04:51:23:79:82:
                    cf:55:b6:28:d2:5b:7f:d7:cb:93:18:c1:6e:4d:e6:
                    e6:d5:11:a8:ee:11:72:dc:97:1f:43:cd:a2:ea:a9:
                    cd:f4:a0:d9:04:86:b5:84:5a:a1:60:53:cd:b2:05:
                    a9:f7:85:1b:68:ee:f6:7e:6a:32:81:bc:4a:cd:33:
                    30:10:5a:ee:a1:43:05:4c:f0:7a:c1:e4:54:5c:27:
                    cd:33:68:ab:9c:54:b8:81:73:bf:d6:9e:13:89:a7:
                    24:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:14:A5:09:04:31:4F:7E:3C:0C:20:0B:04:51:A6:13:76:12:2D:A3
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B58001EAA9E611F19720B0783911F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:94c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:72:03:5c:70:26:19:fc:2a:72:8b:02:6d:7d:d4:70:c8:07:
         d9:a2:5f:06:2a:73:c0:b8:62:9b:c4:2e:b3:d6:d5:20:2e:88:
         41:a9:2f:b8:5c:8b:a2:bf:52:ef:0f:9e:bc:95:c3:9a:ae:7f:
         08:ea:03:42:ab:9f:23:b2:bc:c1:d1:3a:81:cb:5e:b5:35:ce:
         70:f6:d7:8c:c9:75:9e:98:ff:b3:22:0f:6d:d1:77:05:7f:6b:
         11:e2:98:ee:45:9f:59:ca:d8:0c:69:bc:64:70:33:e5:f0:22:
         d7:3a:bc:33:2f:86:af:b1:33:59:4d:7d:2a:2e:f6:de:19:aa:
         51:26:49:60:cf:a5:af:fd:28:e7:5a:07:1c:7c:a7:01:19:7a:
         8d:3d:cd:ee:58:ce:d9:1e:92:bb:ab:c8:54:04:0f:bb:98:d6:
         89:f3:63:ea:63:1b:85:fe:28:75:8f:00:28:a3:b6:aa:63:ac:
         7a:85:86:1c:a8:5a:c5:5e:a5:61:b6:ed:77:7b:08:34:53:72:
         ea:41:34:b8:82:aa:ef:90:ee:0a:7f:8f:be:bb:7a:b9:d4:47:
         05:16:c3:9d:6c:82:97:96:4c:a5:40:32:59:44:c4:08:80:70:
         0f:e6:aa:b8:fd:9f:de:db:a8:3a:46:55:12:f8:e3:b3:f4:92:
         18:c4:06:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:19:39 2026 by rpki-client