Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/FEEAACB46EE411F1B1ADB68B72A30FBC.roa
File:                     FEEAACB46EE411F1B1ADB68B72A30FBC.roa (raw, json)
Hash identifier:          +RE3q3/GU0kCkkSEOZVKPz8xcTRHljskjLwvIsQq2ns=
Subject key identifier:   62:5A:3E:70:86:EA:77:47:66:19:5A:46:51:29:FF:85:45:A5:03:96
Certificate issuer:       /CN=A911C362/serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B
Certificate serial:       01F4
Authority key identifier: EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/FEEAACB46EE411F1B1ADB68B72A30FBC.roa
Signing time:             Sun 05 Jul 2026 05:31:35 +0000
ROA not before:           Sun 05 Jul 2026 05:31:35 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     203020
IP address blocks:        2405:7140:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl
                          rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 05:28:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C362, serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B
        Validity
            Not Before: Jul  5 05:31:35 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a49ec37-1c3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ad:1f:57:5e:ec:90:d2:7f:8e:ef:d8:c3:b0:
                    dc:9d:00:9a:3c:de:52:8d:b6:1d:09:88:e8:21:e6:
                    27:55:f8:d8:2e:d1:36:8a:aa:de:3e:40:03:51:e7:
                    41:77:9c:45:20:b5:f8:c4:60:b6:10:28:45:13:92:
                    e0:99:a8:4e:5c:17:ae:79:4a:81:2b:91:ed:af:d7:
                    4c:09:4c:31:25:e7:bc:79:24:9d:e8:2f:10:c0:ab:
                    eb:c6:11:f8:ff:77:07:78:09:a0:dc:d8:6c:cc:44:
                    44:f3:92:a1:b1:37:f0:10:8f:06:3f:d2:82:2c:1d:
                    c1:95:29:33:75:1d:6d:e8:0d:e2:d5:37:f7:a1:8a:
                    86:70:55:9f:8d:5d:35:4c:47:ad:02:9c:3a:da:d1:
                    40:90:19:a8:43:61:02:c2:d6:2f:85:d5:4b:4d:85:
                    f9:2a:7c:77:26:55:7a:01:fa:1f:53:08:93:18:a0:
                    60:99:89:5f:ae:a6:ae:57:df:16:90:b2:6e:ef:7d:
                    aa:f6:20:51:68:50:b7:13:db:da:f8:a6:9a:97:83:
                    9e:0d:e7:e0:ea:ee:f7:f5:14:05:60:93:5d:aa:5e:
                    00:1e:c9:51:87:bc:32:df:73:2e:58:7b:3d:32:59:
                    95:af:6e:e8:21:d0:91:ea:5d:a7:14:bc:c6:5d:12:
                    53:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5A:3E:70:86:EA:77:47:66:19:5A:46:51:29:FF:85:45:A5:03:96
            X509v3 Authority Key Identifier:
                keyid:EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/FEEAACB46EE411F1B1ADB68B72A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:7140:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:f0:b3:0d:02:dd:92:1d:6b:da:bd:9e:79:9f:f3:70:d4:d6:
         e6:dc:82:58:6f:14:16:ae:6e:59:ed:21:2c:20:86:f2:1e:40:
         c4:90:ab:05:9e:f5:c8:8c:b7:9c:9b:e0:9b:5c:0b:d7:6f:a8:
         29:42:26:fa:4e:6f:5f:81:d1:aa:9a:8b:d2:5b:c9:5a:b4:d3:
         dc:7c:ea:c3:0f:a5:3a:a0:d9:cb:ef:09:d1:5b:8d:9c:a5:ff:
         33:96:4a:54:92:66:e9:d3:9e:fd:c3:62:c6:7a:b0:f9:d4:bc:
         c6:87:60:59:af:d0:3a:c3:c1:7c:a2:43:16:69:79:0c:a2:4e:
         18:b3:33:83:2a:7a:9d:2b:1a:38:14:d7:62:ce:24:3e:1f:2c:
         50:96:eb:13:b4:46:84:50:e0:85:0b:ac:8e:a1:d3:59:47:6e:
         cf:1a:46:87:b8:3e:31:19:d4:35:8c:41:7e:7a:44:19:4c:9e:
         07:04:76:22:3e:cb:68:00:e8:8e:8e:8c:55:db:a0:9b:6b:c2:
         bc:e6:e5:40:82:47:3e:a1:a7:dc:2e:3a:27:d2:e1:1d:17:18:
         ad:4b:7f:ac:3a:81:af:15:8e:60:91:41:72:c3:63:07:f4:c9:
         23:a9:80:c6:14:6d:78:75:2a:dc:9c:af:f4:b6:b7:5c:bf:ed:
         85:52:bf:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:27 2026 by rpki-client