Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/19BC1586171111F18BC19176053D8C67.roa
File:                     19BC1586171111F18BC19176053D8C67.roa (raw, json)
Hash identifier:          oG78akDdL7nqqa2WeciMnflSEh4S4+u7ih1ZSfX7SaA=
Subject key identifier:   72:CA:7D:4E:43:A1:9B:38:DE:CD:AE:F3:D9:EA:0A:B2:A4:87:71:AF
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1183
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/19BC1586171111F18BC19176053D8C67.roa
Signing time:             Fri 22 May 2026 20:27:14 +0000
ROA not before:           Fri 22 May 2026 20:27:14 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     204244
IP address blocks:        2406:840:e230::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 19:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4483 (0x1183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:27:14 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a10bc21-d542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ab:fa:c7:c6:86:fc:3a:3a:c6:4e:82:9a:e3:
                    f6:ce:ac:bd:78:41:8e:2b:2c:6f:94:de:77:87:6c:
                    9d:b1:73:8f:7f:02:93:46:1a:71:4d:28:6a:d4:15:
                    0e:0d:8b:fe:9d:10:61:ed:f9:70:80:f5:0c:e3:82:
                    3d:fd:3c:99:39:9f:44:1a:7f:4f:08:1a:75:48:53:
                    4d:9f:7c:af:b8:a5:f3:c0:29:b8:27:da:9a:83:1f:
                    08:47:56:82:5a:f5:01:ed:54:b4:68:49:60:e2:53:
                    94:a2:e0:d9:c9:aa:c4:23:11:18:fa:1f:9a:77:38:
                    93:d4:7b:dc:c5:89:f9:54:73:a0:cb:09:bf:18:bd:
                    d0:38:e5:ba:d9:69:43:70:af:13:93:0c:c6:7d:6f:
                    85:d6:74:e1:36:d3:ac:59:68:43:7c:b6:61:3c:15:
                    b8:ab:53:d0:2e:cb:b2:01:8b:d0:b6:0b:21:e1:99:
                    33:0f:22:a7:7c:d7:06:ad:c3:46:39:a2:57:1f:b2:
                    07:95:6c:12:56:94:1c:17:0e:6c:cc:7b:b4:5b:80:
                    36:53:65:54:50:bc:59:51:45:29:6e:d4:4f:7a:8e:
                    b0:96:5a:07:7f:bd:ec:52:6b:82:ed:97:c9:68:a4:
                    53:3c:47:20:af:8e:11:e8:d7:04:c0:8b:2f:04:2f:
                    7a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:CA:7D:4E:43:A1:9B:38:DE:CD:AE:F3:D9:EA:0A:B2:A4:87:71:AF
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/19BC1586171111F18BC19176053D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:e230::/44

    Signature Algorithm: sha256WithRSAEncryption
         0f:56:cf:91:68:7b:8c:c0:53:96:1f:34:e2:77:fc:6a:e0:e2:
         cc:8f:c8:64:5b:92:3b:d8:9a:a7:af:87:77:4d:3e:8b:b0:2c:
         58:65:b3:eb:14:b1:45:3e:66:28:60:0f:f8:63:51:91:ad:59:
         68:f0:c6:0e:f9:b0:60:1e:2e:12:e2:2a:80:87:31:13:84:11:
         d2:cc:51:40:15:b1:a1:f2:b8:5e:7d:ed:3a:b4:c0:45:24:9c:
         85:52:47:4e:63:78:cd:86:2f:10:54:ac:4f:17:e4:33:60:8b:
         e1:48:a4:50:80:3e:f5:a6:fb:27:6b:c7:df:1b:7f:05:62:3a:
         45:d8:bf:bd:46:47:0b:32:25:5d:0f:1d:65:25:74:8e:c1:cb:
         22:24:fa:7e:6e:c6:a6:63:57:1c:7a:69:15:4a:1f:95:da:67:
         c7:78:86:1b:29:33:05:43:5f:62:66:86:66:4c:54:de:bd:79:
         8c:2a:f8:8f:8c:c5:71:fa:db:da:5c:61:11:7b:09:c1:45:76:
         25:d3:c7:58:3e:6f:ce:fc:37:cc:a0:b2:c1:c3:31:91:74:f7:
         98:58:a1:ac:52:c8:88:d0:34:97:91:76:f6:80:07:3c:3d:7b:
         82:1e:44:7d:48:f9:f0:8c:ec:38:bb:a5:1b:e6:fb:43:19:ef:
         1c:e2:a5:45
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICEYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjYwNTIyMjAyNzE0WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTEwYmMyMS1kNTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlKv6x8aG/Do6xk6CmuP2zqy9eEGOKyxvlN53h2ydsXOPfwKTRhpxTShq1BUO
DYv+nRBh7flwgPUM44I9/TyZOZ9EGn9PCBp1SFNNn3yvuKXzwCm4J9qagx8IR1aC
WvUB7VS0aElg4lOUouDZyarEIxEY+h+adziT1HvcxYn5VHOgywm/GL3QOOW62WlD
cK8TkwzGfW+F1nThNtOsWWhDfLZhPBW4q1PQLsuyAYvQtgsh4ZkzDyKnfNcGrcNG
OaJXH7IHlWwSVpQcFw5szHu0W4A2U2VUULxZUUUpbtRPeo6wlloHf73sUmuC7ZfJ
aKRTPEcgr44R6NcEwIsvBC96HwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFHLKfU5D
oZs43s2u89nqCrKkh3GvMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMTlCQzE1ODYx
NzExMTFGMThCQzE5MTc2MDUzRDhDNjcucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcEJAYIQOIwMA0GCSqGSIb3DQEBCwUAA4IBAQAPVs+RaHuMwFOWHzTi
d/xq4OLMj8hkW5I72Jqnr4d3TT6LsCxYZbPrFLFFPmYoYA/4Y1GRrVlo8MYO+bBg
Hi4S4iqAhzEThBHSzFFAFbGh8rhefe06tMBFJJyFUkdOY3jNhi8QVKxPF+QzYIvh
SKRQgD71pvsna8ffG38FYjpF2L+9RkcLMiVdDx1lJXSOwcsiJPp+bsamY1ccemkV
Sh+V2mfHeIYbKTMFQ19iZoZmTFTevXmMKviPjMVx+tvaXGERewnBRXYl08dYPm/O
/DfMoLLBwzGRdPeYWKGsUsiI0DSXkXb2gAc8PXuCHkR9SPnwjOw4u6Ub5vtDGe8c
4qVF
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:20:59 2026 by rpki-client