Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/5C6D7744FB4B11EBB711424DC4F9AE02.roa
File:                     5C6D7744FB4B11EBB711424DC4F9AE02.roa (raw, json)
Hash identifier:          lNCusHXNEG7GWDzVQnxIRPfyRVDC4DW/XWLgeMFGcu4=
Subject key identifier:   22:FF:8A:21:65:3D:41:BF:8A:6F:63:F2:37:54:13:74:EE:01:68:6C
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1148
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/5C6D7744FB4B11EBB711424DC4F9AE02.roa
Signing time:             Fri 22 May 2026 20:25:20 +0000
ROA not before:           Fri 22 May 2026 20:25:20 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     142642
IP address blocks:        2406:840:eab0::/44 maxlen: 48
                          2406:840:fed8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 19:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4424 (0x1148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:25:20 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a10bbb0-6ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:04:95:b3:cc:90:f9:25:ad:34:4c:1b:5e:
                    f7:b8:ad:87:14:b1:aa:83:a8:74:11:c9:b8:d6:b3:
                    bd:b7:62:d5:a7:35:26:50:86:0c:3d:84:66:f0:bc:
                    43:b1:29:e5:0e:00:05:a1:6d:13:09:9a:04:d7:37:
                    af:2a:69:5a:f6:30:73:c7:3b:84:0c:3b:db:87:08:
                    fa:d4:62:bf:ad:e8:11:4d:93:9d:bb:5a:73:2f:d7:
                    79:d5:87:17:0c:f0:a6:f4:6b:0a:49:0e:11:f8:0d:
                    e2:54:04:49:61:5f:d0:34:d2:05:13:bf:31:a6:2e:
                    19:10:ec:07:c7:fd:43:d1:b6:45:80:38:45:b9:40:
                    9f:f4:40:fc:a0:d9:27:42:37:1b:18:8f:7f:ca:39:
                    c6:e1:eb:c0:15:63:1b:b8:b9:1c:25:bb:00:32:52:
                    6f:4f:67:51:23:c7:5d:cd:e8:6e:93:ff:eb:52:ef:
                    b6:f2:01:99:03:63:c8:23:17:10:3d:6c:5a:d3:85:
                    57:b7:fc:0a:f5:13:38:54:5c:1c:fe:93:2b:f9:d5:
                    8d:55:98:c3:69:2e:c8:80:ed:3e:e3:ea:88:be:0b:
                    e8:20:fe:9c:5b:18:01:05:4f:8d:db:54:c6:e4:06:
                    86:6f:64:e1:fe:91:29:2f:27:e0:67:b7:8b:2c:4d:
                    f6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:FF:8A:21:65:3D:41:BF:8A:6F:63:F2:37:54:13:74:EE:01:68:6C
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/5C6D7744FB4B11EBB711424DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:eab0::/44
                  2406:840:fed8::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:5a:f0:2d:b3:1b:44:1b:f7:8a:58:86:25:fd:df:a4:19:c8:
         73:79:e1:92:4c:c2:64:98:4c:65:09:9e:fa:95:fc:a8:4a:64:
         c9:51:f7:3d:70:20:1c:94:ab:04:1e:72:9d:66:95:c3:a2:4f:
         82:02:e2:e6:ef:d5:d5:39:9e:93:df:33:e9:79:02:34:0e:95:
         c3:8f:7b:cd:8c:60:15:27:35:73:04:9c:ba:9b:9b:8d:d6:84:
         c3:a1:83:6f:cc:ed:ab:4a:f0:1f:e9:38:65:93:a8:6e:90:12:
         79:fc:46:e3:98:87:10:fc:22:a7:3b:80:82:af:eb:90:53:79:
         af:6f:a5:9f:26:03:0d:90:51:60:32:02:f4:f8:cd:b2:de:77:
         fd:c5:28:5c:58:ce:23:a8:36:b2:30:f9:0a:17:f3:48:6c:8c:
         76:3f:25:6e:c6:99:20:7e:10:40:9f:ba:41:33:42:35:df:b8:
         fd:c7:31:13:3c:fc:4f:4b:c4:25:7d:84:e5:0e:54:f7:3f:3a:
         2d:41:e4:22:aa:85:e2:2c:90:11:70:70:fe:f2:a6:5c:ac:73:
         cb:3f:8c:a5:71:ed:f7:a9:30:d7:73:31:46:6c:c6:64:f2:35:
         6c:24:4f:8c:2d:8f:f7:c7:cf:a1:13:16:5d:55:36:ce:20:95:
         62:3a:66:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:52:50 2026 by rpki-client