Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/13EE03663A1411EF901CC312C4F9AE02.roa
File:                     13EE03663A1411EF901CC312C4F9AE02.roa (raw, json)
Hash identifier:          Ye+ZbUFQD3jKCmvyUbLYj7FLbksH8mb3o2TF5TdOf0Q=
Subject key identifier:   CA:71:FB:79:16:A6:F2:98:65:29:C3:E7:81:B5:E0:68:89:57:6D:E2
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1168
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/13EE03663A1411EF901CC312C4F9AE02.roa
Signing time:             Fri 22 May 2026 20:26:21 +0000
ROA not before:           Fri 22 May 2026 20:26:21 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     153057
IP address blocks:        2406:840:fd40::/44 maxlen: 48
                          2406:840:fe97::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 19:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4456 (0x1168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:26:21 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a10bbed-f7af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bf:9b:7e:3d:88:4c:4b:ed:d8:46:84:40:aa:
                    4a:3d:92:05:6c:3a:7e:ff:ea:33:0b:3a:8b:79:19:
                    41:79:24:d7:cc:6e:44:7c:3c:a3:62:96:0e:29:5e:
                    b0:ce:5b:8d:94:18:85:7b:0f:50:69:8a:06:68:b1:
                    b6:0a:d1:25:e5:ab:4d:15:bf:ad:68:af:c8:2e:ec:
                    ce:2a:f2:1c:25:ee:38:92:5b:4e:6d:1f:97:2d:cd:
                    58:26:25:18:84:8b:f5:87:05:7d:60:a3:25:4d:55:
                    74:7b:9a:4e:7a:97:fb:20:0c:a2:10:e7:8e:a3:d7:
                    7e:66:e5:e9:31:40:fd:52:fd:06:8f:be:0f:af:27:
                    ff:d4:4e:1f:ac:32:cf:ae:e7:93:2a:91:94:5e:93:
                    ab:41:5b:7d:78:db:57:10:da:5c:c6:1b:e0:5a:93:
                    a1:0e:b3:62:f9:e7:65:74:9e:74:2a:a5:36:21:7f:
                    a7:2f:59:79:99:16:98:2a:c0:fb:61:c2:e0:e6:89:
                    48:d2:dd:fe:fe:8e:43:a9:fa:66:e1:1a:b0:d0:12:
                    42:1c:83:c6:af:bc:14:38:25:f8:9d:3f:18:3a:76:
                    6e:f2:d2:a3:d7:95:82:14:a4:62:40:8f:f8:09:21:
                    cd:5f:88:ce:42:68:f4:a8:a8:8b:41:4a:17:92:d5:
                    ca:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:71:FB:79:16:A6:F2:98:65:29:C3:E7:81:B5:E0:68:89:57:6D:E2
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/13EE03663A1411EF901CC312C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fd40::/44
                  2406:840:fe97::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:3a:8c:22:7f:53:e1:8f:c0:14:64:7c:e7:15:e0:04:63:f8:
         77:84:f3:8c:b5:64:09:4e:2a:5a:e4:cc:24:3b:8c:ec:13:92:
         67:82:35:dc:07:db:77:c2:79:9f:a6:c0:22:56:8a:f4:3f:99:
         21:90:15:a7:9c:4c:b7:e0:65:89:d0:22:08:0c:9c:7a:b0:74:
         9d:3d:d9:bc:9f:fe:ca:a6:64:fb:c4:6d:aa:65:27:35:26:9f:
         87:f2:d6:d8:86:a6:63:ba:62:7c:e3:68:02:69:d9:2c:08:a4:
         d1:de:9b:63:ce:f1:80:fd:ba:77:e0:b1:37:1d:fd:77:86:27:
         9b:57:d1:58:0b:a2:ed:8f:55:77:ad:46:f1:77:16:19:61:67:
         df:9b:b7:ea:6d:23:3c:f6:ef:5e:56:a4:be:4b:8b:49:d0:b3:
         3a:a3:3b:ca:94:97:08:31:70:e1:0e:fc:e7:f1:ad:65:80:22:
         50:6f:b5:ea:7e:24:80:8f:b1:62:95:c5:e5:53:65:34:41:fa:
         f0:c8:19:19:85:a6:3b:79:da:42:4e:e0:6b:6d:49:9c:2f:b0:
         e0:ee:fd:42:92:d9:97:e7:2a:6a:7d:00:4a:9b:6e:48:aa:07:
         c6:a6:2b:35:7e:f8:ab:2b:dc:2e:e9:dc:6d:5d:52:a6:6e:8e:
         96:fc:7e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:11:38 2026 by rpki-client