Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6E59D5EE1A3C11EE8A846877C4F9AE02.roa
File:                     6E59D5EE1A3C11EE8A846877C4F9AE02.roa (raw, json)
Hash identifier:          q0sQaO/GZUvSnfWu7mtENGvkFpplSMX0M4ZARkpsuQQ=
Subject key identifier:   41:42:70:E7:BC:42:38:F8:3C:D0:CE:2C:15:6E:0F:13:27:0A:47:04
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1155
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6E59D5EE1A3C11EE8A846877C4F9AE02.roa
Signing time:             Fri 22 May 2026 20:25:45 +0000
ROA not before:           Fri 22 May 2026 20:25:45 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     151490
IP address blocks:        2406:840:fa40::/48 maxlen: 48
                          2406:840:fedb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 19:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4437 (0x1155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:25:45 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a10bbc9-54dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:35:fd:46:38:35:f6:6b:c5:aa:f7:12:f9:b6:
                    56:6f:3c:d8:ca:4d:d7:6a:4d:ae:9f:53:65:3e:d7:
                    31:1d:81:6f:a6:a2:6f:22:d1:18:cf:b2:77:a8:94:
                    77:e3:e8:31:ff:ab:61:6e:33:9f:aa:ef:e7:69:cc:
                    c0:21:44:44:42:f1:61:e9:13:9e:53:01:35:88:b8:
                    89:a3:2f:a0:26:7e:0f:30:41:37:6b:a8:e6:eb:c0:
                    09:ef:80:17:03:32:9d:57:fd:e5:bb:cd:7f:21:6e:
                    46:37:0b:8b:a2:a0:da:17:b1:97:6f:43:3a:19:50:
                    5b:7b:76:7f:fb:ff:f7:13:00:18:b5:16:b8:30:81:
                    51:c6:10:bc:2b:71:94:38:36:9e:33:56:ba:ca:8b:
                    17:78:6a:dd:62:ca:be:33:33:b4:3a:08:64:b9:44:
                    8a:4a:f7:38:d1:9d:4f:ac:65:17:74:f1:99:24:28:
                    f0:11:37:b5:05:8e:44:1e:6f:98:ad:1a:47:b9:c3:
                    33:7c:6f:74:a2:33:e2:65:df:67:8c:26:c5:ac:2b:
                    98:6b:76:99:73:45:4b:f5:30:3e:c5:cb:d2:d7:0a:
                    30:6c:f9:e0:f7:1a:f4:fd:6e:a0:30:ba:eb:92:28:
                    c9:09:65:04:9f:01:94:a8:a7:11:1a:ee:1f:66:f4:
                    bc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:42:70:E7:BC:42:38:F8:3C:D0:CE:2C:15:6E:0F:13:27:0A:47:04
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6E59D5EE1A3C11EE8A846877C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fa40::/48
                  2406:840:fedb::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:18:d5:4b:c6:1f:d2:54:3f:bc:9f:81:09:3c:fd:89:a3:c6:
         5c:39:8e:b4:4d:4f:94:4d:92:ee:a8:f7:ef:60:44:94:50:61:
         24:fc:6c:c8:91:da:61:cc:5c:f0:77:50:03:c8:af:5d:3f:2b:
         0c:d9:1a:e2:6b:a9:aa:14:e0:ee:5d:14:6e:c2:0d:9a:41:87:
         1b:da:79:56:f8:bc:70:9a:dc:78:42:21:bd:40:5e:c1:84:d0:
         20:ba:ff:e7:ec:2b:78:1c:e0:ad:6f:1d:ad:40:d2:3d:ac:15:
         4a:79:eb:69:e7:92:ea:57:ae:2e:0e:7c:b7:7e:bf:00:05:07:
         70:07:61:45:cc:0c:5f:19:e0:c7:c5:20:88:9e:95:e3:b6:98:
         07:22:30:74:39:87:42:c6:3a:88:b7:3f:15:c3:10:f3:59:30:
         fb:7b:3d:3a:5b:f5:bf:9d:63:a6:3e:c5:05:d9:77:61:d6:0d:
         65:8d:45:36:c0:9e:37:d4:f9:94:14:35:8e:59:78:42:b9:2a:
         95:9b:6b:58:9d:5b:f4:1a:00:50:4b:11:8e:07:1a:e9:f6:1f:
         5f:5f:32:d6:f8:db:f2:07:a3:87:1f:d8:ac:90:08:88:b1:37:
         1d:2b:45:88:58:20:93:d3:a4:4c:2b:2f:bc:31:87:dc:b4:66:
         d9:87:dd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:53:36 2026 by rpki-client