Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/2AE459DC4A5B11EBB7B4BA18C4F9AE02.roa
File:                     2AE459DC4A5B11EBB7B4BA18C4F9AE02.roa (raw, json)
Hash identifier:          7ZkC7O2ipojxnjrZ7aYtrQbS9Cs0/ANwTc3SjIO+nkU=
Subject key identifier:   1B:43:D6:FA:1B:99:01:5A:6F:C8:C7:61:95:28:CC:B8:C8:9C:A8:03
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1126
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/2AE459DC4A5B11EBB7B4BA18C4F9AE02.roa
Signing time:             Fri 22 May 2026 20:24:19 +0000
ROA not before:           Fri 22 May 2026 20:24:19 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     134488
IP address blocks:        2406:840:e800::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 19:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4390 (0x1126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:24:19 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a10bb73-968a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:63:69:c4:ff:eb:dd:3a:b2:6b:84:18:ea:60:
                    b4:12:d2:24:e7:ae:d4:05:c3:5b:2b:eb:b0:86:4d:
                    65:c6:ae:ae:6a:c5:63:e8:90:07:96:9a:29:d3:95:
                    f1:c5:11:90:d0:88:14:98:82:9a:ce:9c:38:5d:95:
                    6f:eb:b0:cc:d2:b9:f0:b0:a5:fb:53:93:73:96:17:
                    a9:cc:54:fa:30:49:f3:74:8e:94:8d:0a:3a:a5:3e:
                    16:9e:d5:f3:c4:22:b5:53:ba:e4:21:4c:84:86:c8:
                    cd:00:9a:03:b8:ad:27:44:df:58:77:1c:c2:44:ee:
                    86:22:27:4d:cb:b4:08:79:79:ac:4e:32:12:48:4c:
                    4f:f0:b2:04:42:69:7d:80:1d:86:92:53:a2:d3:aa:
                    80:40:b0:9b:1c:8d:20:f3:fb:a7:81:96:a5:5a:98:
                    01:0c:2d:4e:e5:97:fb:99:47:11:a5:95:d2:9e:1f:
                    00:07:24:42:ba:86:45:05:54:3e:6f:23:fb:65:d4:
                    17:d6:ea:bb:dd:d0:29:cb:7c:b6:3c:b8:a0:aa:52:
                    b4:91:b6:c4:4e:de:01:28:77:ed:b2:b0:52:74:08:
                    fc:da:38:7f:ad:25:ee:bd:bc:84:78:8f:7d:2a:2c:
                    5c:9c:06:e4:97:f8:94:12:77:f0:d7:e7:6b:ea:e3:
                    91:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:43:D6:FA:1B:99:01:5A:6F:C8:C7:61:95:28:CC:B8:C8:9C:A8:03
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/2AE459DC4A5B11EBB7B4BA18C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:e800::/44

    Signature Algorithm: sha256WithRSAEncryption
         a6:bd:25:88:3b:88:17:4b:8e:25:bb:ee:bb:7a:02:f3:fe:f9:
         c3:ae:75:1b:52:2f:09:c0:74:e5:7c:67:ad:07:62:9d:19:36:
         de:58:fd:da:31:02:70:56:1e:f7:17:98:55:a8:5c:1f:d7:da:
         f7:14:b8:79:2f:48:89:09:b2:82:54:fb:56:c4:7b:55:47:73:
         4a:b3:78:c2:7d:b1:9d:2c:ed:e3:50:54:57:c0:b5:19:6a:a3:
         a8:2a:5d:0d:aa:38:96:c9:c0:3e:93:5c:3b:2f:62:be:f0:54:
         10:f4:77:53:7c:2e:72:71:67:ea:a0:67:da:6a:3b:d2:e1:37:
         e9:b1:10:3d:4b:02:cf:5a:d4:35:17:f1:81:70:67:e8:5c:b0:
         27:ed:1f:0b:ac:09:52:22:92:85:47:c2:cd:56:9d:8d:5c:e6:
         22:0d:7d:31:4f:5e:04:d8:66:5c:ee:22:8a:a7:2c:de:9a:86:
         a7:50:4f:7a:11:46:0d:52:17:7e:33:0b:a2:86:93:92:bc:05:
         e2:18:64:5f:72:c2:30:ee:42:8e:b2:dc:29:4c:00:c2:73:fe:
         76:c3:cc:20:74:e7:96:c7:d3:ba:11:5e:3c:75:0a:7d:66:0b:
         17:aa:15:98:4f:ac:2e:ca:df:1d:6a:12:a3:66:46:b7:c0:51:
         02:6a:bf:e3
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICESYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjYwNTIyMjAyNDE5WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTEwYmI3My05NjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp2NpxP/r3Tqya4QY6mC0EtIk567UBcNbK+uwhk1lxq6uasVj6JAHlpop05Xx
xRGQ0IgUmIKazpw4XZVv67DM0rnwsKX7U5NzlhepzFT6MEnzdI6UjQo6pT4WntXz
xCK1U7rkIUyEhsjNAJoDuK0nRN9YdxzCRO6GIidNy7QIeXmsTjISSExP8LIEQml9
gB2GklOi06qAQLCbHI0g8/ungZalWpgBDC1O5Zf7mUcRpZXSnh8AByRCuoZFBVQ+
byP7ZdQX1uq73dApy3y2PLigqlK0kbbETt4BKHftsrBSdAj82jh/rSXuvbyEeI99
KixcnAbkl/iUEnfw1+dr6uORNQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFBtD1vob
mQFab8jHYZUozLjInKgDMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMkFFNDU5REM0
QTVCMTFFQkI3QjRCQTE4QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcEJAYIQOgAMA0GCSqGSIb3DQEBCwUAA4IBAQCmvSWIO4gXS44lu+67
egLz/vnDrnUbUi8JwHTlfGetB2KdGTbeWP3aMQJwVh73F5hVqFwf19r3FLh5L0iJ
CbKCVPtWxHtVR3NKs3jCfbGdLO3jUFRXwLUZaqOoKl0NqjiWycA+k1w7L2K+8FQQ
9HdTfC5ycWfqoGfaajvS4TfpsRA9SwLPWtQ1F/GBcGfoXLAn7R8LrAlSIpKFR8LN
Vp2NXOYiDX0xT14E2GZc7iKKpyzemoanUE96EUYNUhd+MwuihpOSvAXiGGRfcsIw
7kKOstwpTADCc/52w8wgdOeWx9O6EV48dQp9ZgsXqhWYT6wuyt8dahKjZka3wFEC
ar/j
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:20:26 2026 by rpki-client