Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1FE119E6482111EE8400F57AC4F9AE02.roa
File:                     1FE119E6482111EE8400F57AC4F9AE02.roa (raw, json)
Hash identifier:          XvVpOCaWkPGGVUi9LEjX6HN3hTRd94I96HMzxpGPeMU=
Subject key identifier:   BA:52:29:CF:3A:96:CA:28:E5:30:35:28:F8:2B:F7:A6:E2:91:0A:A8
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1158
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1FE119E6482111EE8400F57AC4F9AE02.roa
Signing time:             Fri 22 May 2026 20:25:51 +0000
ROA not before:           Fri 22 May 2026 20:25:51 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     151785
IP address blocks:        2406:840:9300::/40 maxlen: 48
                          2406:840:f680::/44 maxlen: 48
                          2406:840:fe73::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 19:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4440 (0x1158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:25:51 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a10bbcf-3520
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d7:50:db:61:01:62:f2:af:c2:c1:d0:00:be:
                    84:0d:90:51:ca:6c:31:2d:cc:96:8b:80:60:08:c1:
                    cb:ea:13:8d:b2:2e:5d:db:1e:a9:f5:2d:83:ee:c4:
                    f8:9b:f1:1b:e5:48:87:0b:e3:8b:f1:0c:84:c8:2a:
                    32:12:d2:b9:67:60:99:e8:a3:a1:98:61:b0:cb:9c:
                    5b:c6:4a:61:9f:fd:00:6e:ef:9c:1b:9c:b9:bf:f8:
                    2c:db:48:66:c4:33:ae:82:30:ae:81:d4:76:bf:c0:
                    33:9b:07:8b:e5:8c:50:cf:10:07:6b:d9:48:d6:d3:
                    28:51:f9:44:b1:86:6d:47:ef:e5:47:5e:a2:5d:e2:
                    b0:04:dd:d9:8b:5c:61:ef:81:b3:dd:e7:2b:a8:2d:
                    cf:40:e7:e7:5b:69:9e:aa:9b:e1:8c:84:aa:fc:7e:
                    ac:9e:76:e1:d3:e1:9f:91:74:68:ce:1a:d8:f2:34:
                    8e:3a:a3:6d:ef:3b:3b:14:ea:a2:02:c3:c7:a5:aa:
                    e4:82:c8:a9:3c:4f:99:0d:22:ca:17:b2:32:c9:63:
                    d6:69:f6:29:c0:83:01:a4:2a:5c:1d:f1:da:8b:98:
                    cc:59:ad:02:f6:14:48:ae:67:4d:3a:71:7e:50:c9:
                    32:79:f2:2f:9e:21:1f:af:77:c1:56:e3:7d:8d:14:
                    3f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:52:29:CF:3A:96:CA:28:E5:30:35:28:F8:2B:F7:A6:E2:91:0A:A8
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1FE119E6482111EE8400F57AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:9300::/40
                  2406:840:f680::/44
                  2406:840:fe73::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:1f:a0:d6:1c:11:68:8a:af:db:02:2b:52:40:a7:33:8c:92:
         61:25:86:40:24:f8:2b:5d:20:4a:2a:24:57:01:ee:06:08:66:
         cf:24:4e:e6:25:d2:1b:46:8f:a4:06:e6:2e:48:7b:9d:0d:14:
         49:9e:24:dc:78:28:7f:8e:2b:f5:7e:26:c8:8c:6e:89:db:bc:
         cd:4b:ce:84:7b:ad:26:50:d7:57:ee:b7:93:68:9b:5a:21:76:
         2c:f2:ae:e3:f6:a8:cc:76:e1:55:82:d6:98:c0:ba:aa:6c:bf:
         44:76:e5:d1:c9:7f:43:72:f1:c3:d5:32:5a:7a:39:70:27:ac:
         f5:88:2d:12:b0:e2:e8:53:9f:7d:b3:67:63:ae:0d:fe:9c:df:
         fb:f7:9d:f4:2d:48:13:96:65:fa:b9:f1:f1:bd:7d:1c:5c:ff:
         17:ce:a5:cc:88:78:dc:53:c4:7d:55:54:c5:82:fa:c7:05:90:
         d6:9a:47:f7:3e:b5:6c:27:73:bf:67:9a:76:0a:ad:a5:13:03:
         4c:ef:27:63:7e:5e:c5:b9:ec:d7:13:9f:f5:48:87:96:32:cb:
         8c:12:34:74:48:f6:09:7f:c9:52:55:1d:04:d8:d2:1b:e1:f7:
         75:f6:68:d7:6f:93:b0:77:c7:de:cb:fd:a0:4e:1e:57:5f:ec:
         c8:e9:11:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:12 2026 by rpki-client