Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/6318EE6A194711F193E941873C3D8C67.roa
File:                     6318EE6A194711F193E941873C3D8C67.roa (raw, json)
Hash identifier:          8AJV4iIxgM98bRlEZFTlv65MKd8e0Yh/WuNaTVqN2bA=
Subject key identifier:   74:44:77:34:7B:0E:EA:D1:A9:53:78:56:04:B7:3E:EA:2F:2C:D3:59
Certificate issuer:       /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial:       03C3
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/6318EE6A194711F193E941873C3D8C67.roa
Signing time:             Fri 06 Mar 2026 10:29:42 +0000
ROA not before:           Fri 06 Mar 2026 10:29:42 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     208171
IP address blocks:        2001:df0:d840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
                          rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:32:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 963 (0x3c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917315B, serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
        Validity
            Not Before: Mar  6 10:29:42 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69aaac96-b929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:65:f3:7e:c5:45:0f:70:aa:f1:83:d2:57:93:
                    9e:02:89:54:10:1e:71:ee:37:f0:f8:17:4b:f6:13:
                    ab:5e:c5:19:86:46:9b:75:b4:d2:f2:97:00:de:66:
                    25:85:47:13:97:a5:4c:f6:e4:f0:a9:6f:7a:99:93:
                    38:46:65:55:e8:1b:e9:18:d3:96:3d:a3:5a:b9:52:
                    63:c0:17:6f:1e:e8:4a:81:cf:3c:3c:8f:25:cf:d9:
                    d4:1e:1f:0d:d5:fd:f0:a4:43:af:23:4e:f4:87:1f:
                    7a:d7:bf:22:92:7f:ed:be:57:22:99:2d:31:c5:aa:
                    c7:93:cb:89:33:3b:e9:58:1b:81:f7:c1:ec:41:32:
                    6d:08:82:f5:29:7b:b4:87:25:52:a1:a4:12:7f:6c:
                    2e:86:c1:3b:25:ca:fe:93:56:85:0d:93:67:1d:ea:
                    c4:b8:e3:2e:35:32:e8:da:d6:10:57:f3:3e:1a:15:
                    d2:1c:01:c5:f1:66:ba:03:09:e5:8c:8c:ce:25:b8:
                    d0:ad:f1:14:ef:ac:2a:97:32:50:91:0e:56:df:43:
                    70:c0:5e:2c:73:d5:4a:17:7e:39:09:01:69:03:d9:
                    c2:77:51:20:e0:06:ee:e0:52:f7:02:5a:32:69:ca:
                    ca:a1:c8:4d:56:9d:ee:8e:26:a6:63:9a:6a:a3:80:
                    da:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:44:77:34:7B:0E:EA:D1:A9:53:78:56:04:B7:3E:EA:2F:2C:D3:59
            X509v3 Authority Key Identifier:
                keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/6318EE6A194711F193E941873C3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:d840::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:98:c6:91:9b:f4:e6:7a:08:c1:7b:9b:cc:26:71:60:84:20:
         00:2a:27:c7:e3:14:d4:18:1b:bc:96:37:fc:17:1d:8f:b7:e2:
         a4:c8:bf:7b:32:32:0b:a7:82:6f:7e:e3:af:1a:60:42:2f:6f:
         46:ec:14:fb:46:c9:89:02:5b:59:53:00:d9:93:fa:a7:b1:88:
         f5:f4:a8:d3:9e:ad:dd:1a:be:53:d8:6f:90:73:78:a1:ab:87:
         e1:fb:8e:b0:3c:25:df:02:75:41:6b:1f:d5:83:e0:96:73:9f:
         ba:62:8b:98:47:c9:38:f6:d1:b8:81:4d:71:7e:98:89:03:43:
         de:47:a5:e6:ae:ef:46:5b:21:da:fd:d4:c9:66:80:8b:5f:5a:
         06:f7:32:cf:c8:a7:66:2b:2a:92:69:30:bb:fb:08:38:fa:6a:
         41:76:7e:b6:b3:76:0a:06:ff:56:c5:3b:d1:48:ed:15:25:6a:
         f3:d0:f8:7d:53:a8:17:e3:9e:51:c3:04:2c:46:1d:31:e0:54:
         b8:bf:76:92:a5:b9:f1:c5:2f:2a:dd:c3:c2:83:0f:82:a9:3f:
         e7:4b:ac:ec:51:c7:2c:11:84:b3:4d:9e:b7:c5:3f:1d:f5:dc:
         fb:73:d4:0c:9d:76:c2:62:6d:0c:19:57:83:33:13:83:86:88:
         bf:d5:9e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:33:23 2026 by rpki-client