Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E4334EDC24FF11F19A38F1ECB8833773.roa
File:                     E4334EDC24FF11F19A38F1ECB8833773.roa (raw, json)
Hash identifier:          XE2ajGqqgQeDYn7weLkuKYCtQzQ0GUdrmOXwbOVLAg8=
Subject key identifier:   5F:90:A2:D8:6E:BF:DB:7B:38:FA:FF:7B:7C:9C:F0:6C:F1:9E:68:50
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       DC5D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E4334EDC24FF11F19A38F1ECB8833773.roa
Signing time:             Sat 21 Mar 2026 08:28:09 +0000
ROA not before:           Sat 21 Mar 2026 08:28:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     154467
IP address blocks:        2001:df6:7dc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 19:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56413 (0xdc5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Mar 21 08:28:09 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69be5699-0da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:29:e0:cb:96:bc:72:94:6d:47:9e:b1:eb:cd:
                    b4:b1:36:40:d7:0c:0f:28:9b:60:a6:f8:ac:fb:46:
                    bf:33:ac:4f:6d:b6:52:41:19:8c:47:e2:15:34:3a:
                    51:9a:00:c6:7e:07:28:db:14:16:30:52:2b:f7:91:
                    df:ce:7a:fd:c7:62:a7:0d:5e:59:d3:5a:e2:2f:8e:
                    cc:b5:61:b9:00:28:b4:cd:e4:1f:49:f1:b9:29:d5:
                    6c:1e:11:f2:5a:a2:91:33:af:57:c1:78:c4:80:44:
                    fc:ef:1d:2f:48:7c:66:0e:18:8f:2a:9b:ce:fd:c1:
                    1c:8e:f7:44:1d:6c:48:0e:be:0f:75:44:6e:24:c3:
                    7a:22:7e:bb:71:0b:8a:3c:c0:44:99:ee:23:96:18:
                    f1:00:36:56:da:ff:82:84:d3:ee:32:ae:15:82:04:
                    de:e4:08:68:d9:14:8e:a1:cc:5b:bd:cd:92:02:a7:
                    30:fc:e3:f4:3f:09:ba:66:d3:ee:2b:cb:63:3a:b3:
                    bf:62:c5:7b:97:24:c5:9c:af:69:87:29:32:76:c6:
                    4b:1e:9f:0c:c3:1d:31:d5:18:ee:ff:b5:6a:b4:42:
                    4a:91:fa:d3:10:5b:c6:45:7c:80:90:fa:79:86:e1:
                    94:3c:d1:8b:7b:66:b6:8d:80:90:29:88:a3:6b:42:
                    c2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:90:A2:D8:6E:BF:DB:7B:38:FA:FF:7B:7C:9C:F0:6C:F1:9E:68:50
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/E4334EDC24FF11F19A38F1ECB8833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:7dc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:f3:bc:01:0e:cc:fa:6f:80:b4:8e:af:87:c5:25:fd:7b:91:
         1d:ab:1f:36:1c:95:f6:3e:5a:09:66:24:1e:cf:04:c1:67:c5:
         0f:bc:e7:f9:a2:61:d1:95:d8:1f:e4:c2:9b:a0:4d:cf:4e:7b:
         e6:be:0d:42:53:e0:4e:09:19:46:03:3e:b4:8c:54:4f:a5:58:
         84:28:b7:77:11:72:06:27:84:af:e9:4b:5b:9e:f2:0a:61:ed:
         fa:3d:62:e0:c2:f0:0c:58:dd:cc:e3:64:3d:e9:a8:98:25:2b:
         d8:0c:25:f9:f6:d5:b5:7a:f7:64:18:8c:f5:cc:5d:9c:2b:1a:
         34:95:86:7e:79:b4:0d:ce:49:77:d7:b2:ad:ae:90:b2:2b:93:
         66:7f:f7:50:39:32:da:c6:ab:34:cf:78:54:de:5f:d7:47:f4:
         14:93:ab:5c:b4:42:c9:f4:6f:a0:d0:50:22:0b:0f:07:9c:74:
         7d:c4:02:ae:26:4c:83:b6:7c:de:ab:86:87:0d:86:f7:bd:d2:
         b4:b8:ab:d7:b3:29:35:e7:e6:bf:1e:c8:14:ff:3e:10:9d:e9:
         b2:b4:b3:2a:0f:82:ac:a8:8b:8c:8e:f3:9f:cb:80:5d:5b:bd:
         d2:18:23:07:1c:f4:db:c7:76:39:9a:18:6e:fb:49:f6:d7:87:
         5a:58:18:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:34:40 2026 by rpki-client