Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/B2FCF1C07FF911F08FAAC57FC4F9AE02.roa
File:                     B2FCF1C07FF911F08FAAC57FC4F9AE02.roa (raw, json)
Hash identifier:          YdIuZnOTK36n3Pq7b+Qw78bVTO5I+l19LXWmVXpvgx4=
Subject key identifier:   29:82:D2:85:8B:E0:EE:9A:B9:71:80:B4:C9:72:90:9F:8B:62:DD:43
Certificate issuer:       /CN=A918213B/serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
Certificate serial:       03F0
Authority key identifier: DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/B2FCF1C07FF911F08FAAC57FC4F9AE02.roa
Signing time:             Sun 03 May 2026 01:31:54 +0000
ROA not before:           Sun 03 May 2026 01:31:54 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     151080
IP address blocks:        2400:6ae0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl
                          rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:48:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1008 (0x3f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918213B, serialNumber=DB92D43C90612505B3AF46E964A68CC9F5F3B2AF
        Validity
            Not Before: May  3 01:31:54 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f6a58a-6a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1a:f8:05:8d:81:3f:6b:4c:5c:c4:4c:53:23:
                    78:ee:24:34:38:39:18:e5:a4:e8:c1:94:17:67:47:
                    6d:7f:3e:07:fa:db:57:99:40:80:51:01:8c:df:8d:
                    f0:e4:ca:c7:9f:31:73:40:72:1c:0f:7f:2c:0f:aa:
                    d0:bd:19:34:c0:f3:07:e6:80:f0:a6:7d:59:42:3a:
                    4f:c0:00:d1:92:0a:9f:0d:f7:40:45:fc:82:5d:8e:
                    f4:fa:b8:24:37:e6:35:dd:f8:32:12:43:06:80:af:
                    8d:2d:99:4e:53:1e:d3:1b:11:31:60:ed:34:50:45:
                    80:b0:8d:89:d5:8a:5e:67:28:df:0b:23:32:b8:4e:
                    34:7d:28:86:28:10:c6:54:16:0d:3c:b8:ed:74:9e:
                    6c:0b:2d:6d:19:e0:93:10:1a:30:5a:a6:63:5f:0c:
                    ed:ea:2b:2a:f0:17:65:94:2c:81:38:00:ff:1d:8c:
                    d4:06:fb:56:b0:38:1e:84:be:ad:af:f6:89:b2:fa:
                    d0:18:48:e9:f3:b1:db:d5:a8:35:2b:2b:a4:05:e1:
                    ad:91:33:13:1f:e2:5b:91:22:9d:09:ac:eb:22:93:
                    f9:1b:d8:f7:70:28:96:53:e6:74:1a:bf:07:c0:a5:
                    4f:b7:6f:59:dc:c4:b4:df:7c:38:f1:b7:56:1a:21:
                    fd:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:82:D2:85:8B:E0:EE:9A:B9:71:80:B4:C9:72:90:9F:8B:62:DD:43
            X509v3 Authority Key Identifier:
                keyid:DB:92:D4:3C:90:61:25:05:B3:AF:46:E9:64:A6:8C:C9:F5:F3:B2:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/25LUPJBhJQWzr0bpZKaMyfXzsq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25LUPJBhJQWzr0bpZKaMyfXzsq8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918213B/07076FA0D9C911ECBE007F6AC4F9AE02/B2FCF1C07FF911F08FAAC57FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:6ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:1b:89:1d:db:45:06:f9:fa:78:03:0a:5b:4a:5c:c2:57:25:
         4e:14:bd:82:5b:b5:6b:b5:47:d3:41:b2:20:7e:85:9a:5e:f5:
         88:22:cd:47:28:d4:82:33:c5:2e:eb:65:da:79:ce:32:33:f7:
         5f:84:bc:41:3e:26:4a:6b:e2:6e:94:15:a6:db:a6:3d:ea:eb:
         46:18:4f:0c:71:44:b7:f7:f6:6b:fa:a6:a9:18:15:bc:bc:49:
         c6:22:a1:49:01:e8:2d:c9:f5:71:db:0b:24:ae:f5:e9:e1:76:
         41:e0:cb:da:11:ae:4b:61:93:f8:43:8e:49:33:10:86:27:60:
         20:87:46:08:d3:d2:33:a1:0c:38:b3:bf:60:2c:63:2d:63:f3:
         41:7d:60:a9:9f:61:5d:75:ec:ab:2e:26:ed:7b:84:97:74:0d:
         20:f9:8f:7b:b3:c9:6b:10:dd:6e:d5:6b:cf:fd:40:62:a4:00:
         13:8e:ee:d4:b0:27:85:60:db:d6:f7:ab:d1:4f:fe:4b:3b:c0:
         85:d8:96:0e:6c:15:d1:42:a7:1c:4d:94:d4:a0:a9:da:d0:37:
         f6:dc:9e:8e:20:1d:88:27:0b:32:bc:47:de:ae:45:52:5e:b1:
         c3:07:d8:08:b0:5e:54:23:f2:a8:ca:49:06:22:92:5e:23:98:
         c1:f6:b1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:08:24 2026 by rpki-client