Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D2B3CF32B1B911F1B287A0A23811F970.roa
File:                     D2B3CF32B1B911F1B287A0A23811F970.roa (raw, json)
Hash identifier:          S3oyEax1w6yPXlSLAA3pr6l1/Yd13HOh2Djovw/1Jhk=
Subject key identifier:   EF:6C:5F:EE:77:69:4C:90:F6:D3:C7:AE:77:41:49:4D:AE:A0:D5:32
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       FC8B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D2B3CF32B1B911F1B287A0A23811F970.roa
Signing time:             Wed 16 Sep 2026 10:31:49 +0000
ROA not before:           Wed 16 Sep 2026 10:31:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153890
IP address blocks:        2001:df7:bc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 15:19:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64651 (0xfc8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Sep 16 10:31:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6aaa7015-81e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f6:6b:8e:eb:8e:ec:64:0c:1c:05:59:b2:f9:
                    88:12:f0:7b:8c:c0:e7:b2:91:5f:62:5e:ba:a4:d8:
                    8d:32:67:2f:e7:f8:b4:ad:4e:fb:37:0f:c2:be:cc:
                    c3:38:64:cb:d7:b0:bc:f0:88:d3:16:1d:a7:6a:22:
                    b1:8a:6d:7f:8e:dd:1e:e9:19:1b:ee:31:32:8b:fd:
                    42:7a:c8:d8:50:95:a0:05:8e:48:e3:47:b2:49:75:
                    d6:4f:20:94:3b:e0:e3:ca:2f:62:85:4a:9f:a7:cb:
                    09:cc:61:05:ab:8c:43:e8:9e:f1:05:bf:ed:93:a2:
                    43:24:68:38:49:83:20:5d:db:5c:02:51:26:e5:db:
                    42:1c:9a:63:cb:cb:89:37:2e:05:57:17:ad:ab:9c:
                    76:32:f2:21:f9:c3:63:af:75:d3:f9:b9:53:46:b8:
                    d4:a0:01:17:d4:7e:1a:b2:ff:01:4a:b3:ba:d1:70:
                    59:56:2a:b1:bf:3c:db:bf:80:47:a0:84:57:2f:1a:
                    a2:19:bd:78:eb:8e:60:73:d6:7b:ce:93:de:cb:5e:
                    c7:43:29:62:21:db:76:ba:5a:f5:ab:5e:94:f5:85:
                    db:0a:d9:d4:b2:c5:a0:65:c1:0e:72:2c:5f:62:3b:
                    8a:98:be:03:75:af:d6:43:31:16:25:f6:ca:62:36:
                    38:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6C:5F:EE:77:69:4C:90:F6:D3:C7:AE:77:41:49:4D:AE:A0:D5:32
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/D2B3CF32B1B911F1B287A0A23811F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:3a:94:75:1b:55:81:91:d1:2f:b2:32:d7:c6:fd:9b:e2:05:
         a8:b0:b7:6c:cb:97:a8:dc:29:a6:25:ac:27:78:90:73:9f:c3:
         85:2d:19:38:81:f3:8a:bc:76:52:07:8b:ab:bf:55:68:7e:41:
         04:76:5a:47:02:e7:61:c8:38:0d:0f:06:ee:c3:7d:14:7b:5d:
         75:54:d8:9f:8a:82:15:5a:3c:5c:63:82:62:41:9a:1a:30:f1:
         5b:3e:92:7d:fa:1e:3d:1d:c7:99:cd:ed:3c:94:8f:fa:ed:8b:
         a8:bd:a4:e7:b0:10:1b:01:08:5f:fc:2d:f3:d8:60:0a:12:09:
         65:38:f1:b4:20:90:f4:f7:fd:79:e4:fe:fe:0c:40:17:6d:88:
         ff:11:3d:d8:60:5b:5c:33:0d:77:a0:48:6c:8c:e4:a6:bc:f5:
         56:fd:15:ed:ac:e3:90:28:84:85:9c:11:ef:2c:e9:19:c9:93:
         c7:ef:f5:4a:1c:66:e0:8f:cf:65:4c:21:53:9c:58:e1:64:c4:
         4b:72:58:7b:72:01:06:fb:73:11:1a:41:cd:06:e9:cc:3d:1b:
         55:d4:24:5f:03:4f:08:de:fd:75:28:c2:ac:7d:b4:8e:b7:05:
         7e:8b:68:40:ae:90:aa:c2:91:75:e6:de:29:11:0a:aa:d8:bd:
         cc:f6:b8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:21:24 2026 by rpki-client