Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/1D884A0AC36111E9A37AC46EC4F9AE02.roa
File:                     1D884A0AC36111E9A37AC46EC4F9AE02.roa (raw, json)
Hash identifier:          nRexK0UA55I5+x5R0A2TMhaYmEDiazdKkjOfJ9kGLwQ=
Subject key identifier:   CC:9E:8F:D9:F9:F1:29:E3:33:AF:AF:46:3C:93:27:63:46:41:C9:82
Certificate issuer:       /CN=A915D529/serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63
Certificate serial:       0E87
Authority key identifier: C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/1D884A0AC36111E9A37AC46EC4F9AE02.roa
Signing time:             Wed 22 Jul 2026 18:18:40 +0000
ROA not before:           Wed 22 Jul 2026 18:18:40 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     45820
IP address blocks:        2001:df7:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl
                          rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 18:18:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3719 (0xe87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D529, serialNumber=C98AFBB4BB9AE9B1A27A3DD3AD5956B34EDA9C63
        Validity
            Not Before: Jul 22 18:18:40 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a610980-287a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:44:0e:49:03:0f:99:d3:ad:95:e3:20:a5:ad:
                    6b:fb:ac:34:fd:7d:3b:1b:3a:16:bd:bf:23:f5:69:
                    c3:ef:cb:0f:d2:11:f2:3e:bf:5b:fe:83:b1:70:d3:
                    12:ce:9d:d4:96:fc:c8:82:b1:b1:e9:d8:d1:63:3d:
                    f3:b2:28:dd:f7:0f:38:92:93:8f:cf:f2:d5:1a:d3:
                    c7:c3:d4:6e:78:e0:d8:11:21:b8:77:44:2d:e4:c2:
                    17:11:f9:47:d0:5a:4a:27:0b:28:30:66:0b:37:34:
                    4a:88:82:ac:f9:a2:8c:00:5d:5a:95:e5:2d:40:87:
                    90:7d:cc:2d:ac:0f:52:e1:a8:7d:db:6d:8d:26:5a:
                    3a:7e:e2:44:a9:a9:56:b7:c5:20:72:ce:40:0f:4b:
                    85:9d:e7:ac:d5:c2:ae:b0:b6:ec:a5:18:bc:dd:d2:
                    85:62:fc:65:55:4c:8b:13:c4:57:d5:9d:ee:ed:6d:
                    f7:2c:79:f7:a8:8e:c2:9f:d0:7c:bb:fb:bb:2a:85:
                    2f:11:41:f1:26:3d:d2:e7:d8:41:22:a3:9a:8e:ae:
                    20:b8:ef:7e:00:17:52:fa:2c:5f:f4:ae:6e:9e:44:
                    3c:36:91:1d:fa:ad:0d:49:d5:de:7e:5e:49:ca:85:
                    77:10:24:dd:50:4e:de:fe:f6:48:e2:cf:d1:d6:14:
                    43:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9E:8F:D9:F9:F1:29:E3:33:AF:AF:46:3C:93:27:63:46:41:C9:82
            X509v3 Authority Key Identifier:
                keyid:C9:8A:FB:B4:BB:9A:E9:B1:A2:7A:3D:D3:AD:59:56:B3:4E:DA:9C:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/yYr7tLua6bGiej3TrVlWs07anGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yYr7tLua6bGiej3TrVlWs07anGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D529/20CF2E14C36011E98A5C026DC4F9AE02/1D884A0AC36111E9A37AC46EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:9c:66:99:d2:81:1a:31:a7:89:24:eb:39:1e:96:cc:f0:9c:
         4a:64:95:39:cc:78:46:a6:87:87:6e:e5:9e:7b:d5:5a:2f:0b:
         c2:7d:53:77:3f:80:c0:c2:5f:90:93:c7:4f:00:2b:a0:23:4f:
         92:50:22:69:ce:c3:fb:35:26:56:24:5e:66:98:55:de:fa:f9:
         e7:3a:61:32:21:2c:81:de:05:2e:7b:7c:bb:fc:1f:50:07:c1:
         91:4a:d8:87:fd:29:f3:de:81:d5:5d:f5:21:a5:0f:48:cb:76:
         19:22:f1:5a:fd:eb:f2:77:32:ea:01:b6:4c:a1:40:86:c6:df:
         33:2e:81:5c:72:18:de:7c:2a:60:b4:52:f4:28:b9:98:b9:27:
         b8:e7:6e:92:14:3b:ce:cc:c9:87:d0:3c:96:97:a4:47:42:34:
         dc:95:cd:7d:56:cb:ee:0e:85:58:97:e9:b0:62:07:df:90:5b:
         04:87:75:ec:aa:d1:f0:29:41:e8:7d:ce:73:6e:ff:d1:37:7b:
         80:bf:8b:a9:67:f9:8e:c8:d0:23:1b:3b:d6:74:7e:12:de:00:
         83:81:cd:8e:f8:76:27:9d:cd:03:ff:cb:b7:32:2f:d0:c2:b8:
         78:fe:d6:70:38:2b:2c:ec:4a:9d:56:67:fe:15:c4:09:02:7d:
         03:3e:9f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:48:36 2026 by rpki-client