Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/692F45942E5011EFBBA04110C4F9AE02.roa
File:                     692F45942E5011EFBBA04110C4F9AE02.roa (raw, json)
Hash identifier:          YnmRTl8YrqPeX955tGk9kmZCKAzUs25l2SThJmig3Xo=
Subject key identifier:   AB:42:33:B7:32:F4:C3:37:8D:97:38:00:8F:D7:13:17:52:3F:77:77
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1061
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/692F45942E5011EFBBA04110C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:30:18 +0000
ROA not before:           Thu 22 May 2025 20:07:32 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     152921
IP address blocks:        2406:840:fce0::/44 maxlen: 48
                          2406:840:fe94::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 17:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4193 (0x1061)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:07:32 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a493ca-993d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:69:d0:42:c9:7b:8d:b7:e0:60:2b:ec:0b:e2:
                    de:e2:52:f3:21:ea:b6:ae:eb:ab:a0:ae:4a:d4:d7:
                    21:98:88:75:d4:2d:9c:58:d2:98:bf:af:36:8f:94:
                    96:3b:dc:44:62:c3:69:c4:a1:0b:55:f4:49:b3:0d:
                    a2:3b:b0:5a:7f:87:64:84:f6:de:44:a6:f4:4d:0a:
                    bb:83:55:68:24:26:4f:53:60:1b:9f:15:7e:80:73:
                    32:16:ef:85:72:2e:c9:0f:5c:58:d2:1e:d9:dc:4a:
                    72:04:79:6e:da:d0:91:52:39:7e:4c:bf:c0:50:17:
                    cb:af:9f:5f:a6:48:1a:a9:44:b5:45:a0:dd:b4:44:
                    f5:87:2b:65:d3:87:c6:93:60:73:85:3f:66:5f:e1:
                    e8:c8:a4:74:9d:73:5e:42:23:e8:37:b1:31:e4:3c:
                    41:e1:eb:9b:a2:7a:7f:9a:d9:a6:5d:47:43:50:98:
                    4d:47:ff:fd:d2:ba:ac:44:7f:49:a9:9d:1c:e2:b6:
                    20:2d:db:ca:b4:e1:5c:6f:58:f7:c2:00:48:fe:96:
                    a6:a5:f9:a8:08:18:27:72:9b:89:1c:5f:42:75:30:
                    b6:8b:1b:04:54:e3:ec:ec:12:79:f7:02:b9:ac:43:
                    9f:6c:69:3d:2c:fb:6c:cc:b5:c0:8d:23:e8:1a:77:
                    bd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:42:33:B7:32:F4:C3:37:8D:97:38:00:8F:D7:13:17:52:3F:77:77
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/692F45942E5011EFBBA04110C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fce0::/44
                  2406:840:fe94::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:26:e5:ad:96:7c:55:64:74:f3:66:1a:24:16:50:8e:57:a3:
         da:1f:58:29:ce:45:57:d5:0e:11:eb:ea:dc:8c:37:06:d4:fb:
         46:fc:7b:80:28:eb:fd:4b:0b:8a:e9:3d:02:07:c1:b5:7f:63:
         3f:de:e1:02:48:60:06:11:fc:2d:e4:c0:bb:5e:d9:aa:f7:59:
         5d:88:3e:cb:d3:e7:30:6e:e8:cd:76:3a:11:e7:07:d6:b8:fe:
         82:10:6b:4c:5d:c7:f2:aa:f3:4c:1a:8f:eb:4c:3d:e0:ac:2b:
         13:df:b6:ca:96:7d:7d:42:39:9f:ec:70:c7:96:68:e6:82:02:
         be:2d:c7:3e:6a:13:17:5f:96:b7:16:f4:1e:11:43:7e:7b:8b:
         7e:f9:62:c4:66:bb:01:c2:51:b7:19:fa:c7:6f:74:74:77:1b:
         5c:28:b1:79:ef:01:eb:8e:3b:b3:03:22:3a:d2:5f:59:f7:26:
         f8:da:cc:a4:72:f0:83:ca:3b:3a:b0:b0:0f:88:03:9f:c5:75:
         71:f7:41:db:4d:5e:b5:59:af:77:ce:dd:2c:61:d1:f4:82:a7:
         72:fd:73:16:00:ee:b6:f9:a4:02:15:9e:75:6c:62:a2:ce:ba:
         8a:1d:c9:0a:1e:76:15:6d:60:d0:eb:7e:5e:3a:8a:20:4a:cf:
         78:2a:5c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 02:24:07 2026 by rpki-client