Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/62D37DCC331A11EFAB575211C4F9AE02.roa
File:                     62D37DCC331A11EFAB575211C4F9AE02.roa (raw, json)
Hash identifier:          pL+k+Lw8ZhmPdgnmV+TjpRvY+AStRy3AGEcfFQUmteI=
Subject key identifier:   5A:5C:78:F2:F4:32:BE:51:25:0A:D3:25:3E:98:17:A6:C8:9C:6A:DA
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1167
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/62D37DCC331A11EFAB575211C4F9AE02.roa
Signing time:             Fri 22 May 2026 20:26:19 +0000
ROA not before:           Fri 22 May 2026 20:26:19 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     153034
IP address blocks:        2406:840:fdc0::/44 maxlen: 48
                          2406:840:fe92::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 19:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4455 (0x1167)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:26:19 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a10bbeb-41e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:93:43:67:4c:24:71:cf:36:b5:e3:d0:44:62:
                    95:ec:38:ca:99:4f:bf:3d:73:20:fd:f0:6d:ea:57:
                    9e:8e:f1:c0:0e:76:75:45:5f:60:2d:27:4b:34:c2:
                    d8:ff:f9:26:7d:b7:87:79:a7:10:df:02:51:d6:a0:
                    38:9c:cd:14:b4:63:15:e1:ba:9c:12:ac:bd:b4:8a:
                    df:73:ba:f0:e0:31:05:46:b4:4f:4e:e0:eb:f6:26:
                    33:fd:1d:e8:06:6b:5d:5e:97:f3:a2:8d:80:8e:75:
                    72:69:6c:ce:23:1b:0f:90:a4:f7:15:e7:a1:06:cd:
                    a8:75:22:89:91:b1:f8:53:bc:a1:bf:25:ad:6e:94:
                    ad:09:28:b2:27:21:e6:2e:82:7c:33:73:3f:02:d2:
                    09:ec:33:89:0a:68:c9:82:01:cf:8c:96:94:62:d5:
                    97:b4:1b:e3:83:2c:6b:87:84:40:68:b2:6e:1f:dc:
                    8c:87:5d:10:93:d2:4d:ae:80:02:a8:32:bb:e9:64:
                    99:f3:f2:83:bc:96:76:5b:db:3f:6f:84:3a:78:89:
                    24:a1:4d:9f:94:1d:75:4f:16:46:81:47:6c:32:ac:
                    0c:56:c5:fc:07:f0:fe:1d:55:a9:b1:88:fe:f4:f9:
                    49:c7:0f:6b:80:30:06:5c:01:c9:1e:26:b2:ee:6c:
                    06:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5C:78:F2:F4:32:BE:51:25:0A:D3:25:3E:98:17:A6:C8:9C:6A:DA
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/62D37DCC331A11EFAB575211C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fdc0::/44
                  2406:840:fe92::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:0e:75:24:da:9c:57:eb:3a:fc:51:8b:68:da:26:7d:92:2a:
         52:4b:3b:50:f1:61:0b:6f:5f:8e:00:b5:0e:6a:e5:d3:a4:08:
         4d:d2:38:e4:a2:99:54:da:7a:f2:21:10:64:7d:89:28:8a:ce:
         b3:6e:6b:b7:09:ce:68:a0:73:f0:ff:d4:5c:b6:bb:83:cd:3f:
         19:bb:11:e5:3e:2b:0e:17:de:72:b9:c4:8e:45:bf:05:8f:91:
         9c:b3:fc:ab:76:a5:64:3f:38:81:cc:e0:67:e0:11:1f:8e:83:
         eb:9c:e0:2b:0b:c5:3a:a7:35:4a:97:1f:ab:b1:6e:ab:80:d9:
         33:c3:8f:93:c1:a9:ce:17:be:cc:24:09:8f:a4:c5:ce:42:98:
         03:51:40:8f:94:e7:7b:76:d8:28:6d:24:e8:a0:e7:ce:57:28:
         e9:3d:84:28:4c:6b:5d:3a:c5:7e:55:b0:b2:71:2f:c1:62:75:
         fb:a3:02:44:c3:92:5e:b2:cd:96:8f:30:21:0e:41:e0:6c:9e:
         b7:96:62:5d:4f:c6:00:30:c7:15:a0:6f:97:fd:36:de:fe:1b:
         a0:2d:b2:b7:80:b2:0b:b0:06:e4:98:4f:17:04:3b:66:f2:27:
         fc:ac:90:07:33:4d:f2:f5:a5:39:3f:28:7a:b3:01:89:6e:58:
         32:66:2f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:13 2026 by rpki-client