Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/69AC1BDC2E5011EFBBA04110C4F9AE02.roa
File:                     69AC1BDC2E5011EFBBA04110C4F9AE02.roa (raw, json)
Hash identifier:          LaPfH6mQ4H5loGeiO4tVvYmmgWhcCCDmWdZhCFVbcOs=
Subject key identifier:   F6:E4:6A:2F:B1:B9:51:BA:98:19:2B:EE:3B:3E:F5:ED:76:2A:A0:DB
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1062
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/69AC1BDC2E5011EFBBA04110C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:30:19 +0000
ROA not before:           Thu 22 May 2025 20:07:33 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     152922
IP address blocks:        2406:840:fd90::/44 maxlen: 48
                          2406:840:fe90::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 17:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4194 (0x1062)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:07:33 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a493cb-b355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8d:9f:c2:8f:d1:be:5e:1a:9b:b5:17:e6:53:
                    d7:30:b8:de:c6:4c:74:b5:98:9d:4c:5c:fb:91:19:
                    64:eb:af:25:a3:42:9d:9a:9f:f4:90:cd:9d:18:99:
                    a2:9c:3a:be:a9:71:c1:62:ec:ce:32:a5:f4:f9:06:
                    b0:a9:87:59:18:ff:ee:ef:ac:45:89:01:84:93:c9:
                    ee:94:4b:dd:1b:1c:55:ff:ca:e0:b0:2f:87:7b:97:
                    ae:45:2d:82:2e:b3:7c:ed:eb:3b:4b:d9:4a:f5:b6:
                    f3:b3:17:26:77:89:12:f6:08:91:4b:d5:9a:5d:c0:
                    08:84:58:52:21:0d:c9:91:9d:ad:0a:4f:8e:f8:07:
                    c9:3c:dd:40:25:2f:e6:30:14:ec:22:cb:74:31:3f:
                    5b:7c:83:2b:d1:e8:97:3a:1c:89:a3:44:b9:fd:5b:
                    b4:a6:cb:69:10:0f:ce:d9:62:a2:c3:ae:8c:ae:b4:
                    7f:1a:f8:0f:e4:f3:f1:e7:6b:4f:a8:b6:12:10:12:
                    51:18:87:da:45:8e:97:32:2b:8f:03:ac:79:78:7c:
                    9b:ed:2d:09:64:d2:ae:cc:9d:e2:33:8a:0a:0c:51:
                    1b:05:7b:35:55:d9:1e:30:52:da:96:75:e3:7a:c8:
                    7b:dc:16:14:de:e1:6d:79:05:24:b4:1f:02:ba:09:
                    1e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E4:6A:2F:B1:B9:51:BA:98:19:2B:EE:3B:3E:F5:ED:76:2A:A0:DB
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/69AC1BDC2E5011EFBBA04110C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fd90::/44
                  2406:840:fe90::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:33:0e:f9:8d:e8:7e:14:9e:1a:82:c1:3b:2e:0f:e0:19:d7:
         f3:eb:8f:0b:5c:27:e1:d8:c0:73:13:b9:66:2f:ba:d5:fe:a8:
         09:9c:4c:53:5c:3e:68:72:93:db:c5:e1:e8:30:5d:24:7f:d6:
         81:c3:fa:fc:4d:b6:f4:04:5d:5d:44:aa:4d:a8:3e:ca:02:8f:
         fe:2f:71:a2:98:01:7b:0e:c5:a7:59:9b:03:ab:d7:8d:02:7b:
         23:df:aa:3d:66:7b:b6:4c:9f:81:4d:84:6c:d1:7b:ac:9d:6c:
         cc:d9:fe:e1:ff:ae:85:ed:5f:24:e0:9a:68:9e:a3:09:e2:92:
         cc:7e:84:25:5d:42:b4:22:24:75:5d:cf:8b:08:7a:f8:dc:9f:
         8c:c4:dc:3f:4f:b5:03:22:3a:8f:ca:b5:22:c7:4d:f5:7b:a7:
         d1:d8:ce:16:00:39:71:41:a1:24:f7:18:ea:3e:92:b1:52:b8:
         32:2f:45:8d:29:ed:b1:48:d0:36:8e:99:74:94:82:21:09:ae:
         06:4b:c8:48:95:73:42:e3:34:6c:98:35:d2:88:74:2a:47:45:
         e6:e4:a7:2a:83:22:bb:9c:84:59:da:b0:14:fe:58:a3:58:e5:
         f2:e0:24:8f:5e:44:f3:62:a9:c1:f6:00:0c:cf:7b:d5:03:ab:
         7d:d4:38:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 02:23:46 2026 by rpki-client