Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/5717F26C76DC11F1B27CFF067EA30FBC.roa
File:                     5717F26C76DC11F1B27CFF067EA30FBC.roa (raw, json)
Hash identifier:          UnxraCxdQ4lE3he3/K4k1PrHUY4Y6JC7kU/SixWY2p8=
Subject key identifier:   3E:44:AB:E0:26:EA:20:1C:A4:71:02:98:05:89:98:C9:73:71:27:65
Certificate issuer:       /CN=A918B16C/serialNumber=438FF77842067882C6D493F66B6125EF2195D547
Certificate serial:       1C
Authority key identifier: 43:8F:F7:78:42:06:78:82:C6:D4:93:F6:6B:61:25:EF:21:95:D5:47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4_3eEIGeILG1JP2a2El7yGV1Uc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/5717F26C76DC11F1B27CFF067EA30FBC.roa
Signing time:             Fri 03 Jul 2026 12:40:15 +0000
ROA not before:           Fri 03 Jul 2026 12:40:15 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     150001
IP address blocks:        2001:df7:1840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.crl
                          rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4_3eEIGeILG1JP2a2El7yGV1Uc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B16C, serialNumber=438FF77842067882C6D493F66B6125EF2195D547
        Validity
            Not Before: Jul  3 12:40:15 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a47adaf-3bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1a:31:fa:fe:69:99:91:6c:81:b3:b1:5b:27:
                    c9:87:b3:b9:0f:1f:2b:9f:e7:1c:dc:62:5a:34:9d:
                    fd:6f:25:ff:1b:b1:cc:8f:13:f9:18:ca:f2:29:fe:
                    6c:58:91:14:d0:9c:99:cf:e5:b8:6a:3d:69:32:05:
                    3b:0e:ff:d3:8a:f5:6a:de:e2:6a:cd:17:49:0a:22:
                    bc:fe:f6:4a:c4:fa:ae:f8:3d:41:cb:ed:a7:6d:de:
                    de:8f:dc:45:bc:14:ac:96:ec:56:c4:9d:62:fb:a0:
                    ca:f4:6e:b0:a8:13:ae:95:6a:d3:17:c8:4d:99:c4:
                    df:c2:90:c2:0b:b7:27:15:63:64:c0:50:03:5e:ed:
                    e7:f6:63:06:c5:34:94:b5:bc:f7:be:3b:fc:15:0e:
                    1e:40:f3:de:27:33:2c:98:48:4a:db:78:0e:7e:30:
                    49:6e:ed:63:e3:a7:8e:0d:94:c9:28:01:e7:38:ac:
                    e9:22:85:71:45:d1:b8:d6:49:95:da:05:52:4f:5e:
                    6b:35:02:56:ba:17:45:7f:b8:f9:c4:bc:69:c9:37:
                    93:6c:b3:b6:5c:ac:1e:18:9f:30:fc:45:01:c3:be:
                    65:36:8e:73:a1:34:c7:7d:74:cf:f3:f0:c5:70:3a:
                    db:b8:b0:c7:40:f8:ca:77:27:f2:e6:1c:50:b7:87:
                    2e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:44:AB:E0:26:EA:20:1C:A4:71:02:98:05:89:98:C9:73:71:27:65
            X509v3 Authority Key Identifier:
                keyid:43:8F:F7:78:42:06:78:82:C6:D4:93:F6:6B:61:25:EF:21:95:D5:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/Q4_3eEIGeILG1JP2a2El7yGV1Uc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4_3eEIGeILG1JP2a2El7yGV1Uc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B16C/4EA447BA63FF11F1BA26E45D9547A888/5717F26C76DC11F1B27CFF067EA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:1840::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:53:78:50:51:4c:41:6b:de:00:f8:91:71:61:e5:9f:b3:72:
         8a:41:4a:17:d9:4b:69:92:f5:5d:be:9e:98:32:58:1b:60:7b:
         3d:2a:ee:ed:93:0d:5d:61:bc:ea:23:b1:e0:0f:f4:55:1c:0b:
         b2:fe:97:ef:66:a1:c1:c9:67:6f:15:2d:b2:89:74:73:71:f2:
         29:76:1c:a1:e4:10:22:78:66:d5:80:4a:f6:09:f4:f1:f0:c8:
         44:24:68:81:f2:c4:fa:92:73:a5:35:b5:4b:88:fc:48:2c:67:
         ae:00:01:47:49:54:44:3f:e0:2a:82:6f:b7:4c:b0:18:9b:58:
         09:bf:e9:4b:bd:97:b5:90:c0:2a:64:3a:9d:86:3a:56:74:f9:
         a7:e2:47:be:da:31:c8:a4:d3:cf:63:ce:ac:cb:33:1a:35:fb:
         0c:3a:32:88:32:d5:00:4b:a2:80:2c:66:8f:94:ea:68:f0:f2:
         3f:91:8b:0e:ae:c5:df:f0:dd:29:e1:8d:4b:69:1e:ae:a4:4a:
         6d:51:d4:c3:f1:33:55:df:f1:90:1e:7d:e4:ac:92:1e:c4:56:
         6d:13:fd:52:a0:1a:6b:8f:44:19:24:bc:74:3c:ed:4e:db:db:
         89:e3:e6:d8:c1:7a:49:67:72:d6:5a:56:ca:6e:1b:f0:97:b1:
         66:5b:af:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:05:00 2026 by rpki-client