Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/3A702F045E9411F1B76D9AC5227AAC22.roa
File:                     3A702F045E9411F1B76D9AC5227AAC22.roa (raw, json)
Hash identifier:          D/ips1eH7zJXGlctPH/nagVZOnNNzbes74J9NbDZQGI=
Subject key identifier:   89:3A:DA:3D:32:A2:0C:A1:11:BA:3C:15:3E:DA:FC:EA:E6:B7:26:97
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       11B5
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/3A702F045E9411F1B76D9AC5227AAC22.roa
Signing time:             Tue 02 Jun 2026 15:03:35 +0000
ROA not before:           Tue 02 Jun 2026 15:03:35 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     215172
IP address blocks:        2406:840:e200::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 19:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4533 (0x11b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: Jun  2 15:03:35 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1ef0c7-f89f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6f:15:b0:f9:16:b0:b6:12:3f:80:ea:0f:92:
                    7a:63:b6:99:46:f8:b9:9c:06:80:7c:46:e4:14:c2:
                    02:28:1f:26:fa:2e:14:44:8f:3c:1e:bc:76:d6:99:
                    8b:34:29:1f:89:8d:17:74:8b:44:cf:c5:5d:b9:3f:
                    57:46:75:5f:dc:68:42:e1:d3:54:28:e8:1b:31:87:
                    83:dd:10:ab:93:3f:7c:48:c0:ef:a7:2c:19:24:a0:
                    e0:6b:a3:38:5b:f7:7b:bb:33:5f:74:d5:17:60:dd:
                    89:3e:63:77:64:5e:7a:8e:ba:75:df:59:bb:b0:f8:
                    27:5d:c5:80:12:ba:0b:97:cb:54:c7:bf:e0:25:f9:
                    8d:f2:3f:33:98:fd:2c:61:24:ec:5c:26:63:38:22:
                    cd:9c:e6:b3:8d:4e:06:6b:71:f4:0c:ff:29:ea:2c:
                    8b:57:48:46:b3:42:bc:0a:72:ee:de:96:8a:a1:c2:
                    88:5a:c5:00:f4:89:36:4a:f9:33:ba:48:27:f7:45:
                    78:eb:1d:2e:db:09:13:b2:2e:04:bb:d4:b4:b7:9a:
                    53:1d:61:9c:01:af:65:58:a2:a1:95:ec:98:26:a1:
                    d0:8a:da:17:92:2a:36:82:fd:dd:df:45:41:10:4c:
                    7d:bd:6d:c2:cc:c4:32:49:58:5e:8d:07:b5:e4:30:
                    c2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3A:DA:3D:32:A2:0C:A1:11:BA:3C:15:3E:DA:FC:EA:E6:B7:26:97
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/3A702F045E9411F1B76D9AC5227AAC22.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:e200::/44

    Signature Algorithm: sha256WithRSAEncryption
         67:d7:d0:3a:fe:ed:00:1b:51:62:14:68:43:25:6a:26:9f:27:
         6f:bf:bc:f8:af:14:e4:1f:c2:d9:be:88:4b:56:4b:ad:6d:f8:
         01:50:33:06:a6:7f:f5:38:f3:25:5b:3c:43:e1:24:2e:bb:9d:
         1f:95:8c:43:0e:5e:a6:39:7a:53:3e:2c:4b:3d:f2:46:c1:35:
         cf:ee:00:e9:52:c4:93:90:9f:2e:ed:97:01:7f:1a:d2:bf:d3:
         56:78:12:e5:46:d6:bd:7f:6c:0c:c4:42:29:4e:63:6b:a4:90:
         80:2d:91:ff:2b:49:5c:89:c5:53:f6:07:ff:26:21:6c:bc:43:
         cd:be:a0:51:78:2d:4c:98:fd:1e:06:a3:65:c2:fc:6f:78:97:
         c8:82:f9:aa:24:07:c6:7f:ff:49:ed:ef:16:8a:e1:de:f6:9f:
         90:1a:24:2f:2c:be:a5:36:92:48:82:13:fb:13:f6:c4:33:b5:
         87:66:b3:a5:4d:2b:5b:b2:e4:ac:ad:15:40:c2:39:0f:bf:63:
         9d:80:61:f3:72:ff:e4:8f:0d:be:1b:8e:a5:59:16:9a:c4:b8:
         70:ae:89:8a:c4:97:6d:80:3c:65:0a:6e:ef:5b:bc:9c:b7:ac:
         7c:04:38:37:9b:e6:0a:52:b2:87:6f:cb:c4:40:59:05:ca:17:
         ac:0d:0b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:14:22 2026 by rpki-client