Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/34956990D75511EF80E68A39C4F9AE02.roa
File:                     34956990D75511EF80E68A39C4F9AE02.roa (raw, json)
Hash identifier:          DPlXMT8frXQbGoG9pLaFh0WB63E0zOeIFvm13T+J4dI=
Subject key identifier:   1B:B4:42:04:11:C9:E3:53:63:B4:C0:FC:3F:1F:14:45:E0:28:B6:1B
Certificate issuer:       /CN=A918BB4D/serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
Certificate serial:       07C5
Authority key identifier: EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/34956990D75511EF80E68A39C4F9AE02.roa
Signing time:             Mon 06 Jul 2026 22:23:16 +0000
ROA not before:           Mon 06 Jul 2026 22:23:16 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     134835
IP address blocks:        2401:e9e0:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl
                          rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 22:11:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1989 (0x7c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BB4D, serialNumber=EF403643EA9820AE6D9D622F9AEFD7A4C9154F24
        Validity
            Not Before: Jul  6 22:23:16 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4c2ad4-6e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:52:0f:48:5a:f4:fc:4b:52:6b:b9:94:43:43:
                    df:3f:7c:9b:7c:93:e1:02:fe:9b:47:8a:25:e4:8a:
                    02:5e:93:6b:7a:f3:3f:05:50:f5:6a:c7:54:29:fa:
                    0c:87:50:34:8b:aa:b6:5a:e0:5d:0c:48:2e:b1:2f:
                    b3:08:50:9a:c6:46:62:5b:40:2b:bb:e4:9f:ce:50:
                    e1:95:41:9c:62:79:f6:5e:6d:22:2e:35:04:a0:e0:
                    5f:a5:bc:18:36:4f:dd:a6:8a:b1:8c:5a:6a:f1:9d:
                    55:56:9c:a5:83:00:43:85:da:34:bd:2e:4d:d5:3d:
                    ce:6a:30:15:79:91:8e:f2:36:d8:43:55:72:36:1a:
                    4c:3a:61:f8:f7:f1:90:9b:29:2d:1b:d7:08:d6:4c:
                    c9:5a:d8:e1:28:4a:89:0c:c6:29:ea:b8:65:f7:13:
                    e7:f1:4a:ac:37:cd:d8:69:4d:6f:dd:1b:3b:e6:f3:
                    6b:67:12:43:2c:0e:fb:34:d6:3b:29:49:96:60:44:
                    ce:91:fd:f9:01:1a:c4:d1:22:9c:7a:0c:0b:36:bf:
                    42:d2:41:cc:32:c1:14:2e:32:40:95:0a:65:8e:57:
                    40:7f:1a:68:8a:53:ae:ae:ab:51:3e:48:73:a5:3d:
                    86:c5:5f:f5:3e:74:d6:b6:dc:b9:4f:db:86:ed:45:
                    35:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B4:42:04:11:C9:E3:53:63:B4:C0:FC:3F:1F:14:45:E0:28:B6:1B
            X509v3 Authority Key Identifier:
                keyid:EF:40:36:43:EA:98:20:AE:6D:9D:62:2F:9A:EF:D7:A4:C9:15:4F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70A2Q-qYIK5tnWIvmu_XpMkVTyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BB4D/CA563BE8652211EB80F6E94BC4F9AE02/34956990D75511EF80E68A39C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:e9e0:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         d4:f0:1e:93:b3:ac:33:54:34:35:1b:2f:51:a7:10:c1:01:95:
         e4:62:db:62:d0:c4:69:0d:26:ed:31:e4:fe:d0:e6:c6:43:68:
         f4:ac:c0:f2:13:c1:79:da:b5:6e:2f:73:fd:37:27:47:db:d2:
         db:b0:88:0c:56:bb:5b:f1:8f:36:a9:8d:3c:cc:92:b2:e1:ed:
         84:50:95:87:64:6c:d1:b9:9d:8a:c7:ce:34:10:10:65:bb:e8:
         96:16:64:48:3e:23:c7:19:f0:07:84:52:89:ab:d1:6e:1d:00:
         f3:88:2e:1f:75:09:ff:e2:54:55:be:75:47:e2:92:58:ed:d5:
         ac:12:15:6a:b8:8b:ea:44:5c:40:14:9a:0d:78:03:87:35:06:
         33:40:79:c1:af:9a:2f:fa:96:6b:ed:99:dc:49:fa:28:a8:b0:
         7e:17:b5:29:f6:42:bc:c2:4b:f7:00:fa:73:18:75:cd:ba:d8:
         6f:6e:c0:08:46:57:4f:6b:96:94:e5:fb:bc:50:22:2e:5e:59:
         f9:55:ca:1e:88:bd:10:08:c4:06:3e:fc:73:33:12:b3:32:d1:
         41:e6:b1:8d:c8:67:2e:bb:e0:e7:8a:08:1f:c5:4c:f2:ba:a3:
         cd:7a:9d:6c:3d:67:e0:6f:e0:e0:d0:31:36:fe:53:b0:78:14:
         29:8f:c7:5f
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgICB8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEJCNEQxMTAvBgNVBAUTKEVGNDAzNjQzRUE5ODIwQUU2RDlENjIyRjlBRUZEN0E0
QzkxNTRGMjQwHhcNMjYwNzA2MjIyMzE2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRjMmFkNC02ZTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnFIPSFr0/EtSa7mUQ0PfP3ybfJPhAv6bR4ol5IoCXpNrevM/BVD1asdUKfoM
h1A0i6q2WuBdDEgusS+zCFCaxkZiW0Aru+SfzlDhlUGcYnn2Xm0iLjUEoOBfpbwY
Nk/dpoqxjFpq8Z1VVpylgwBDhdo0vS5N1T3OajAVeZGO8jbYQ1VyNhpMOmH49/GQ
myktG9cI1kzJWtjhKEqJDMYp6rhl9xPn8UqsN83YaU1v3Rs75vNrZxJDLA77NNY7
KUmWYETOkf35ARrE0SKcegwLNr9C0kHMMsEULjJAlQpljldAfxpoilOurqtRPkhz
pT2GxV/1PnTWtty5T9uG7UU1xQIDAQABo4ICYjCCAl4wHQYDVR0OBBYEFBu0QgQR
yeNTY7TA/D8fFEXgKLYbMB8GA1UdIwQYMBaAFO9ANkPqmCCubZ1iL5rv16TJFU8k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkI0RC9DQTU2M0JFODY1
MjIxMUVCODBGNkU5NEJDNEY5QUUwMi83MEEyUS1xWUlLNXRuV0l2bXVfWHBNa1ZU
eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzcwQTJRLXFZSUs1dG5XSXZtdV9YcE1rVlR5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEJCNEQvQ0E1NjNCRTg2NTIyMTFFQjgwRjZFOTRCQzRGOUFFMDIvMzQ5NTY5OTBE
NzU1MTFFRjgwRTY4QTM5QzRGOUFFMDIucm9hMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYEJAHp4EAwDQYJKoZIhvcNAQELBQADggEBANTwHpOzrDNUNDUbL1Gn
EMEBleRi22LQxGkNJu0x5P7Q5sZDaPSswPITwXnatW4vc/03J0fb0tuwiAxWu1vx
jzapjTzMkrLh7YRQlYdkbNG5nYrHzjQQEGW76JYWZEg+I8cZ8AeEUomr0W4dAPOI
Lh91Cf/iVFW+dUfikljt1awSFWq4i+pEXEAUmg14A4c1BjNAecGvmi/6lmvtmdxJ
+iiosH4XtSn2QrzCS/cA+nMYdc262G9uwAhGV09rlpTl+7xQIi5eWflVyh6IvRAI
xAY+/HMzErMy0UHmsY3IZy674OeKCB/FTPK6o816nWw9Z+Bv4ODQMTb+U7B4FCmP
x18=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:11:37 2026 by rpki-client