Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/68087952EABF11EF9D79F20DC4F9AE02.roa
File:                     68087952EABF11EF9D79F20DC4F9AE02.roa (raw, json)
Hash identifier:          cEZpHozu2dOMTSbWDWYeTfXtSuNiex1crnDpCTevfkc=
Subject key identifier:   F5:46:D8:44:5F:CE:29:18:F0:CC:0A:08:EF:78:68:76:21:9D:DC:F6
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       11A0
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/68087952EABF11EF9D79F20DC4F9AE02.roa
Signing time:             Fri 22 May 2026 20:28:19 +0000
ROA not before:           Fri 22 May 2026 20:28:19 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     401009
IP address blocks:        2406:840:e180::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 19:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4512 (0x11a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:28:19 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a10bc63-1c9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ef:7b:37:84:21:44:e0:3f:7c:fc:04:cf:e2:
                    1c:ab:c7:65:fd:e3:4f:08:95:a4:3f:33:69:f7:89:
                    f2:c5:a9:f3:d5:dd:8d:0b:e3:f3:2c:57:90:4f:d7:
                    1b:5d:87:6e:7f:00:a5:8d:9e:1d:6e:a3:f0:ce:bb:
                    48:e0:30:ea:f2:a7:29:2f:f7:2a:a4:1c:de:5d:59:
                    ac:35:63:15:48:f9:95:cf:7b:d9:65:36:47:c8:9d:
                    1b:3f:3a:4d:67:e9:1e:55:76:b5:ff:8d:3e:09:02:
                    26:72:15:42:70:72:b6:a2:44:56:e8:29:92:23:d6:
                    85:22:62:f0:10:51:66:22:02:00:83:f8:a8:79:aa:
                    97:e4:88:80:69:d3:21:48:00:a6:5c:d8:55:40:c6:
                    24:ad:68:91:aa:45:58:57:42:b9:9c:5c:1a:91:05:
                    79:d9:ef:a4:e6:e9:5d:ff:4b:fe:93:65:d7:45:0d:
                    ef:a6:1d:69:90:ab:a3:38:96:60:86:00:ab:84:3b:
                    15:dd:05:bd:aa:4d:d8:52:9e:27:7e:9d:4f:5d:fe:
                    af:29:6d:e6:5d:48:80:c2:7f:10:d8:b4:b8:80:be:
                    8d:a2:ed:d4:f9:fc:e3:2e:54:f4:c6:0e:ad:dd:4e:
                    9c:72:f1:14:4d:89:75:64:84:fb:fd:98:97:60:4e:
                    e9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:46:D8:44:5F:CE:29:18:F0:CC:0A:08:EF:78:68:76:21:9D:DC:F6
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/68087952EABF11EF9D79F20DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:e180::/44

    Signature Algorithm: sha256WithRSAEncryption
         61:57:6e:23:5b:30:37:1e:e4:8d:24:0a:25:ce:25:14:76:86:
         90:d0:2d:13:87:d8:9d:7c:d7:7d:84:69:ff:9c:f6:65:d8:57:
         b9:02:25:9e:0e:e4:56:96:6f:36:b2:8f:da:f1:30:ed:46:20:
         5a:63:33:be:34:8c:f0:5b:69:6a:21:99:0b:36:8f:11:57:c0:
         5a:21:91:66:5e:eb:19:cb:3f:df:8a:e8:1c:b7:fe:e2:e2:e3:
         79:42:ec:6f:f1:78:d5:70:50:12:a0:8a:67:53:17:ac:9b:d6:
         0c:97:be:6c:77:85:f5:bd:f6:6f:34:10:ef:a5:0f:64:de:f0:
         6f:29:d3:1c:b6:c7:26:20:4d:c8:2c:91:57:ec:2f:b0:05:71:
         91:f0:54:43:a7:94:10:52:93:1a:a6:48:99:4e:ff:79:82:e1:
         0d:a9:c6:ee:73:f2:20:c6:d1:4c:3c:39:2c:3b:5c:d7:58:1f:
         c4:c0:3e:dd:04:c1:2f:11:11:bd:d0:eb:af:e0:21:5a:f7:54:
         15:79:3e:10:ae:2c:15:4a:39:15:84:b8:6c:78:48:46:79:5b:
         81:96:57:d0:d8:44:9f:e5:65:8a:0c:a2:6b:66:6e:fd:94:9b:
         f8:4f:42:56:44:5b:29:54:b3:34:23:46:15:b8:0c:d2:10:fa:
         82:dd:0c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:02 2026 by rpki-client