Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/567C85C0B34111F09BB3B84DC4F9AE02.roa
File:                     567C85C0B34111F09BB3B84DC4F9AE02.roa (raw, json)
Hash identifier:          A/hMDy4/Q25pYERZr0/x4bMaaCfAwnC+EKZAl13VH9I=
Subject key identifier:   2F:E8:B7:00:27:DF:69:56:9A:8F:4F:6A:64:12:89:78:F7:F6:4C:20
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1129
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/567C85C0B34111F09BB3B84DC4F9AE02.roa
Signing time:             Fri 22 May 2026 20:24:24 +0000
ROA not before:           Fri 22 May 2026 20:24:24 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     137264
IP address blocks:        2406:840:fcf0::/44 maxlen: 48
                          2406:840:fedd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 19:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4393 (0x1129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:24:24 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a10bb78-3729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c0:7f:9c:27:e9:5a:87:32:d1:1b:0c:89:48:
                    e1:46:f2:b3:3e:b7:a6:c1:f7:83:7f:e2:36:72:93:
                    6a:15:8f:41:14:23:20:5e:a9:f4:95:2e:a4:15:92:
                    9c:3c:48:e8:f8:6f:e4:3b:a9:5b:74:0f:40:b7:da:
                    e5:ed:ab:7b:b7:7c:08:34:0b:8b:bc:4d:67:92:d7:
                    6b:ba:a6:ac:25:a2:52:d2:da:42:5c:dc:0c:4c:e0:
                    94:af:3f:39:a0:24:14:4f:9d:19:72:84:e0:ad:6d:
                    4c:ef:19:f0:64:2c:15:8d:dd:38:05:03:6c:68:c7:
                    57:8c:c6:25:65:51:b1:09:2b:90:45:bb:1d:fa:29:
                    5c:96:f0:f7:0f:d7:31:55:66:bd:e1:5f:0a:8b:5e:
                    e6:71:08:9c:8c:de:2f:d6:01:eb:70:fa:f1:87:c6:
                    b9:01:f8:92:aa:62:0f:1f:86:27:2b:c3:85:c6:77:
                    f3:2d:12:3e:f0:70:e3:37:21:05:1b:2b:59:23:ab:
                    10:01:83:7c:b9:57:9e:ff:ea:a7:ce:8e:92:fd:62:
                    95:89:88:45:0a:99:94:f9:28:42:98:dc:fb:69:b6:
                    b4:b5:d1:22:aa:35:9c:a0:e1:b7:bf:6c:5c:dc:f9:
                    3c:c3:57:18:67:79:8e:a2:ee:4d:de:27:93:89:71:
                    1a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E8:B7:00:27:DF:69:56:9A:8F:4F:6A:64:12:89:78:F7:F6:4C:20
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/567C85C0B34111F09BB3B84DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fcf0::/44
                  2406:840:fedd::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:6a:f0:5f:bf:a1:e8:b9:99:61:6b:03:07:b0:d0:a5:d4:cb:
         c3:71:60:8f:c0:6c:a6:f5:da:f3:88:c2:58:bf:28:62:e2:40:
         3a:2c:44:52:43:52:aa:61:b1:65:7c:41:95:fb:ac:96:60:cd:
         b1:10:2f:73:63:65:e1:50:0e:97:b7:51:a7:65:16:9b:b0:cd:
         cb:3d:c4:fe:b6:71:ae:2b:70:dd:7f:26:76:15:31:34:08:6c:
         6f:62:7b:30:cf:35:55:b4:35:12:6f:c6:1e:95:69:2a:26:28:
         1d:c4:36:0b:5b:fd:da:c5:ee:81:06:85:4e:dc:a3:ec:d5:30:
         0c:fa:35:3e:50:5c:a4:8c:1e:9f:a5:33:31:61:88:ed:25:3e:
         42:57:f0:51:5f:f9:f5:65:93:90:37:18:47:a8:be:89:16:4c:
         0a:51:10:fa:4f:10:5a:f3:de:d6:9e:07:c6:4f:f1:5d:b4:fd:
         bc:a2:dc:44:85:b2:bb:34:f1:17:62:2c:e5:94:2c:cd:ea:6b:
         a1:91:a0:2b:2a:f0:90:2d:d5:58:97:de:c1:af:4a:c2:96:d9:
         ac:b7:79:df:e7:7a:6a:3f:e6:4c:a6:65:92:38:66:2b:25:44:
         34:40:ca:c6:2f:24:19:a3:df:83:94:e8:6b:35:56:a3:bd:4e:
         d6:e2:17:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:19:20 2026 by rpki-client