Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/7EB2A9627B6811F1B2F9CBDA5FA30FBC.roa
File:                     7EB2A9627B6811F1B2F9CBDA5FA30FBC.roa (raw, json)
Hash identifier:          y02tkPqWkRUuFzYRyDSp8BRV329jb14C5pvIrtHdumk=
Subject key identifier:   E2:26:E8:93:0F:80:14:60:38:49:C3:23:23:DC:44:59:42:B3:59:0F
Certificate issuer:       /CN=A912438F/serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47
Certificate serial:       084B
Authority key identifier: C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/7EB2A9627B6811F1B2F9CBDA5FA30FBC.roa
Signing time:             Thu 09 Jul 2026 07:33:36 +0000
ROA not before:           Thu 09 Jul 2026 07:33:36 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     141414
IP address blocks:        2001:df5:5b80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl
                          rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2123 (0x84b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912438F, serialNumber=C888D1EEE04BEF3E815F09DDFA19193D699B4F47
        Validity
            Not Before: Jul  9 07:33:36 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a4f4ed0-49e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:63:c3:80:1f:7d:bb:e9:14:66:04:af:a5:3e:
                    0b:2b:84:7f:cf:3d:a9:49:3a:44:4d:d8:ff:dc:d5:
                    8d:be:b9:fc:fc:83:02:bd:98:14:88:0e:fb:ef:a0:
                    6e:46:2b:b1:fd:61:32:22:22:02:33:3b:3f:6d:e4:
                    ea:d0:e4:1b:2b:51:25:00:82:21:22:a9:9e:5d:d8:
                    95:51:0d:1f:67:5f:28:36:b2:4f:ac:69:1a:2b:61:
                    e3:5e:3d:09:22:f1:e1:3e:20:c6:11:4d:29:83:06:
                    19:20:33:19:ca:27:1a:1e:ed:13:83:c5:16:28:bf:
                    41:d5:cf:9b:a8:aa:89:4f:c5:74:15:b3:a0:db:b6:
                    33:53:f6:36:5b:0c:1e:b2:13:82:22:0b:40:ab:7b:
                    5f:54:51:33:26:be:39:7c:94:af:87:72:52:c8:a6:
                    b7:ad:b3:18:21:a0:93:24:c4:69:eb:f6:b2:2c:dd:
                    8b:70:8b:22:1d:82:84:98:13:5a:03:9c:9f:da:bf:
                    48:65:6d:09:ce:85:c2:7b:f7:12:f2:e9:d4:87:0f:
                    42:23:9d:f6:f1:1d:67:86:26:a6:86:43:c2:fd:82:
                    5b:f1:1b:c5:af:51:a6:f8:78:16:2a:cc:8a:41:4c:
                    d1:07:40:6b:ea:e9:eb:2e:77:1f:bf:3a:d0:23:21:
                    99:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:26:E8:93:0F:80:14:60:38:49:C3:23:23:DC:44:59:42:B3:59:0F
            X509v3 Authority Key Identifier:
                keyid:C8:88:D1:EE:E0:4B:EF:3E:81:5F:09:DD:FA:19:19:3D:69:9B:4F:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/yIjR7uBL7z6BXwnd-hkZPWmbT0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yIjR7uBL7z6BXwnd-hkZPWmbT0c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912438F/C7590BD625AE11EB8EEC220AC4F9AE02/7EB2A9627B6811F1B2F9CBDA5FA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:5b80::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:39:3c:a6:34:81:32:82:77:73:8e:7c:25:f7:ea:71:bd:5e:
         a0:af:08:b3:01:32:3d:18:62:25:95:70:88:d0:ad:66:46:40:
         ea:bb:f1:58:19:60:97:36:93:71:a6:bb:a5:71:ad:16:0f:a8:
         19:7d:6d:ae:0f:49:15:b9:92:98:cf:65:44:15:48:4d:3e:ac:
         f2:1a:2d:9a:54:2d:b2:18:76:c1:76:ef:a6:e0:a6:18:02:32:
         96:07:59:8a:78:43:26:3a:e1:d8:d7:01:a8:b8:ba:d9:e6:4d:
         a6:d3:a1:44:52:db:b1:5a:50:a1:a4:38:41:22:2e:8e:6b:0a:
         c1:ed:5e:87:d3:32:88:5b:2c:2c:16:2f:4f:47:82:18:1f:c8:
         25:74:c2:d3:9f:b0:40:61:1c:7f:40:fe:99:9a:90:c6:0d:55:
         1d:80:12:8a:55:5f:ed:57:9e:53:1b:9c:19:a4:fa:02:f2:a9:
         1e:50:d5:d9:f4:e6:15:1f:66:65:81:f7:6e:74:5d:3c:77:7b:
         b6:74:27:50:49:50:cd:45:2e:a4:62:31:98:17:50:2f:be:2f:
         76:00:d4:22:55:ca:36:f5:57:9d:cb:37:55:60:4a:10:2c:b2:
         de:13:8e:46:d8:f6:04:80:e9:83:95:76:dd:58:6b:b4:8d:5c:
         d5:ac:69:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:47:58 2026 by rpki-client