Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1275EBB054C311EFB296F71BC4F9AE02.roa
File:                     1275EBB054C311EFB296F71BC4F9AE02.roa (raw, json)
Hash identifier:          FlPDKrDZIEgKsFCmxA5JZ2MusmD6vX6pltzPplP3dzk=
Subject key identifier:   9C:FE:35:71:F8:B2:1B:C8:6A:08:4E:A0:78:7B:E6:61:17:23:37:E8
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1170
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1275EBB054C311EFB296F71BC4F9AE02.roa
Signing time:             Fri 22 May 2026 20:26:35 +0000
ROA not before:           Fri 22 May 2026 20:26:35 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     153189
IP address blocks:        2406:840:fc60::/44 maxlen: 48
                          2406:840:fef4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 19:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4464 (0x1170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:26:35 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a10bbfb-1a48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c8:9a:e6:b1:0f:25:e2:42:fe:7a:05:8b:06:
                    a0:16:43:18:25:2d:1f:fd:d3:ba:bb:d3:aa:e9:2e:
                    f0:aa:d6:4d:82:f8:b2:1b:c5:bc:0c:93:fa:d5:b6:
                    44:39:a8:b5:f1:77:66:05:ac:28:be:9d:64:36:f7:
                    7d:9f:5a:cd:78:df:4d:8a:4a:41:18:f0:6f:b4:d7:
                    10:e3:7c:7d:b6:b5:da:b7:d0:4b:9b:86:cf:5b:b5:
                    45:de:62:8b:b1:38:41:35:6d:6f:10:12:3f:9c:4f:
                    f6:07:7e:c9:0e:d7:1e:a4:40:19:6b:83:80:52:6b:
                    2d:e7:15:98:1f:82:a8:37:e1:da:a9:d1:c9:c9:e3:
                    b1:2c:74:7b:18:a1:05:d8:c4:72:e1:ad:ba:ac:f2:
                    3c:f3:0b:76:d6:7c:81:4f:6e:7f:f3:5e:88:31:bc:
                    0a:af:6f:12:d9:41:e8:7f:69:34:d6:4b:c8:af:4e:
                    99:35:4e:f4:17:ca:86:4e:ef:ec:85:2f:77:d0:42:
                    0c:72:67:bd:23:98:ca:64:26:85:c9:f5:e7:ca:14:
                    c7:8b:6c:56:c2:1a:aa:31:f7:a2:9b:64:fa:cc:14:
                    b1:19:f4:3a:7c:3f:7f:e0:25:94:42:8a:d1:91:b7:
                    2d:85:f6:9c:e7:3f:2d:03:e4:e7:c4:94:df:a6:22:
                    d6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:FE:35:71:F8:B2:1B:C8:6A:08:4E:A0:78:7B:E6:61:17:23:37:E8
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1275EBB054C311EFB296F71BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fc60::/44
                  2406:840:fef4::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:7f:d9:1a:89:a7:64:60:1d:77:b3:51:57:78:0a:e0:1a:b1:
         55:1f:ee:88:40:42:c9:3f:5b:07:11:d3:f2:99:ea:94:6f:2d:
         bc:44:2e:45:70:88:d8:e1:f2:f7:de:ce:1b:42:6c:9b:98:d4:
         50:be:b4:f5:3e:91:69:04:7e:af:41:af:5c:d1:76:16:8b:61:
         6e:31:bf:80:7b:99:30:4e:48:a7:47:6f:78:fb:b8:f4:3b:d0:
         e3:30:b3:ed:32:ba:f4:f4:3c:a2:58:6b:0a:f9:28:8c:b5:b6:
         e3:99:f8:35:64:79:d2:fe:0f:8d:9c:e3:6c:d3:e4:f9:27:c7:
         a3:cf:9f:da:a3:0c:70:c3:d6:68:be:2c:2b:72:36:69:99:48:
         86:6a:7b:84:fe:48:70:7f:b1:af:91:21:37:a6:03:19:d9:d9:
         59:53:f5:3c:f9:04:a7:38:3d:9d:0c:8b:c4:e0:8e:61:fa:b9:
         9e:2f:a1:3c:bb:37:fa:75:92:78:fa:3c:a0:e8:ea:84:5d:28:
         76:b8:cc:13:d0:83:26:4b:bf:71:14:6a:0e:30:13:81:ca:c7:
         56:6f:df:3e:54:25:8a:07:68:38:36:3d:8d:d6:21:65:a3:dc:
         5e:a2:36:c8:27:a0:d4:39:b5:7b:d6:3a:8c:1b:7a:26:a7:55:
         5b:e0:35:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 11:04:13 2026 by rpki-client