Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/5D7924145E9511F1A54FA0EB237AAC22.roa
File:                     5D7924145E9511F1A54FA0EB237AAC22.roa (raw, json)
Hash identifier:          D1D6rpDeelR9+H+d9hWdOY8fAtGN6Ww0RKOpvP04ajI=
Subject key identifier:   9E:79:71:81:FF:46:3E:97:7B:46:4B:D3:C7:27:13:53:8C:ED:3B:E3
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       11B8
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/5D7924145E9511F1A54FA0EB237AAC22.roa
Signing time:             Tue 02 Jun 2026 15:11:44 +0000
ROA not before:           Tue 02 Jun 2026 15:11:44 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     153332
IP address blocks:        2406:840:9b00::/40 maxlen: 48
                          2406:840:cb00::/40 maxlen: 48
                          2406:840:cd00::/40 maxlen: 48
                          2406:840:fea3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 19:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4536 (0x11b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: Jun  2 15:11:44 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1ef2b0-b6dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:75:20:dd:5b:be:6c:3e:fe:b9:09:32:a6:a7:
                    5d:32:49:2a:6d:64:aa:61:fa:39:a0:9d:a3:69:33:
                    3c:26:61:9f:61:db:fd:82:9d:09:51:50:f9:4b:c7:
                    02:58:88:52:4e:ff:b6:5f:6b:1f:19:4c:08:17:ca:
                    c6:fa:69:e1:b7:66:8f:83:96:49:68:d0:02:e4:11:
                    da:5b:60:a3:1a:48:3b:3e:f4:9b:a1:59:4e:43:31:
                    a3:15:80:2d:a0:a9:79:01:dd:53:0e:41:17:64:14:
                    0b:ea:39:c9:8c:0d:64:49:63:43:4c:49:58:a3:9e:
                    4d:8f:10:f7:88:c7:c5:ea:dc:c1:07:3c:f9:a9:94:
                    1d:90:a2:8c:40:1a:81:58:99:48:b0:98:89:9d:9e:
                    0b:65:0e:83:d3:c2:b9:91:8e:24:1a:5f:48:e4:d1:
                    c9:9f:b7:46:63:ee:93:5b:5d:a7:ed:dc:68:79:d8:
                    32:01:91:51:1d:45:af:b1:48:68:ae:a3:18:dd:4d:
                    f9:27:42:63:df:02:65:ed:a9:9d:56:4d:d9:26:fd:
                    d7:45:e5:65:9d:bc:e1:0c:53:aa:67:17:e2:41:a3:
                    f8:07:69:0f:92:a0:69:77:9b:89:a0:b1:10:c5:34:
                    1a:e8:62:bc:f9:cb:a3:a3:fa:55:ce:17:38:4c:65:
                    e4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:79:71:81:FF:46:3E:97:7B:46:4B:D3:C7:27:13:53:8C:ED:3B:E3
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/5D7924145E9511F1A54FA0EB237AAC22.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:9b00::/40
                  2406:840:cb00::/40
                  2406:840:cd00::/40
                  2406:840:fea3::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:21:60:3a:b7:74:25:6e:f4:f3:b2:99:3a:66:5f:30:1f:48:
         bc:59:52:30:82:12:c1:1c:06:80:e6:b8:65:4f:5c:6d:17:7c:
         51:94:f8:71:ef:a3:45:42:1c:63:9a:d2:1e:9c:97:9f:ca:71:
         50:14:fa:61:a4:29:f9:e2:dd:38:24:bf:83:08:d8:94:90:8d:
         77:6b:74:41:26:a0:08:fa:a5:dc:1a:4d:99:b7:39:e0:8b:81:
         75:10:e2:83:0f:cc:5c:bd:d7:da:63:1f:e5:2c:2f:27:8c:c7:
         91:11:8f:d9:9d:f0:8e:77:b3:a9:d1:57:6f:14:95:5e:f8:86:
         1f:f0:e0:f0:4b:8b:a3:0e:bd:95:62:ee:8c:3c:6d:b7:f5:84:
         3c:a0:da:37:9c:e8:37:92:e1:38:e3:e1:83:6c:54:da:48:69:
         4c:ac:d2:e8:da:8a:0e:8e:77:c4:95:0c:f2:1b:77:df:8f:4a:
         61:c4:39:dd:8c:88:48:2e:e9:8d:f1:2d:66:39:49:25:67:6a:
         e0:11:0e:96:0d:88:20:7b:5e:35:bd:cc:b0:4c:0b:92:35:de:
         45:69:ea:b8:ba:1e:28:43:1d:e5:1b:77:f7:1e:17:0c:76:6e:
         e4:1d:01:cc:61:d6:e4:55:cd:32:ff:e1:11:a7:d2:93:fb:dc:
         6f:a4:25:4f
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgICEbgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjYwNjAyMTUxMTQ0WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFlZjJiMC1iNmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzHUg3Vu+bD7+uQkypqddMkkqbWSqYfo5oJ2jaTM8JmGfYdv9gp0JUVD5S8cC
WIhSTv+2X2sfGUwIF8rG+mnht2aPg5ZJaNAC5BHaW2CjGkg7PvSboVlOQzGjFYAt
oKl5Ad1TDkEXZBQL6jnJjA1kSWNDTElYo55NjxD3iMfF6tzBBzz5qZQdkKKMQBqB
WJlIsJiJnZ4LZQ6D08K5kY4kGl9I5NHJn7dGY+6TW12n7dxoedgyAZFRHUWvsUho
rqMY3U35J0Jj3wJl7amdVk3ZJv3XReVlnbzhDFOqZxfiQaP4B2kPkqBpd5uJoLEQ
xTQa6GK8+cujo/pVzhc4TGXk0wIDAQABo4ICezCCAncwHQYDVR0OBBYEFJ55cYH/
Rj6Xe0ZL08cnE1OM7TvjMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNUQ3OTI0MTQ1
RTk1MTFGMUE1NEZBMEVCMjM3QUFDMjIucm9hMDoGCCsGAQUFBwEHAQH/BCswKTAn
BAIAAjAhAwYAJAYIQJsDBgAkBghAywMGACQGCEDNAwcAJAYIQP6jMA0GCSqGSIb3
DQEBCwUAA4IBAQClIWA6t3QlbvTzspk6Zl8wH0i8WVIwghLBHAaA5rhlT1xtF3xR
lPhx76NFQhxjmtIenJefynFQFPphpCn54t04JL+DCNiUkI13a3RBJqAI+qXcGk2Z
tzngi4F1EOKDD8xcvdfaYx/lLC8njMeREY/ZnfCOd7Op0VdvFJVe+IYf8ODwS4uj
Dr2VYu6MPG239YQ8oNo3nOg3kuE44+GDbFTaSGlMrNLo2ooOjnfElQzyG3ffj0ph
xDndjIhILumN8S1mOUklZ2rgEQ6WDYgge141vcywTAuSNd5Faeq4uh4oQx3lG3f3
HhcMdm7kHQHMYdbkVc0y/+ERp9KT+9xvpCVP
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:14:50 2026 by rpki-client