Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6EAE7A428D7D11F196E91B9D3511F970.roa
File:                     6EAE7A428D7D11F196E91B9D3511F970.roa (raw, json)
Hash identifier:          KgACpktWMgoBXHSjt3Q4vX1BuVEKgnVpERknBTmSAWk=
Subject key identifier:   B0:FF:BB:CE:C3:A1:F9:38:32:16:A9:E5:EA:02:1A:BA:B0:2A:85:5E
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       11F2
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6EAE7A428D7D11F196E91B9D3511F970.roa
Signing time:             Sat 01 Aug 2026 07:48:49 +0000
ROA not before:           Sat 01 Aug 2026 07:48:49 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     140682
IP address blocks:        2406:840:feae::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Aug 2026 19:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4594 (0x11f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: Aug  1 07:48:49 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a6da4e1-8426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d5:50:de:e0:55:20:b6:91:3e:21:66:fa:3b:
                    55:68:d0:32:00:6e:88:b8:b0:55:c7:f8:67:b0:a4:
                    25:3d:be:e5:68:da:b3:80:54:e5:5d:06:68:64:9f:
                    37:94:c8:7d:36:72:18:4b:9f:b2:9b:1e:c2:f1:ca:
                    76:54:12:f0:c3:99:06:d5:3d:ff:a1:58:8d:ce:9e:
                    89:12:af:b5:8c:b1:2c:b1:9e:7b:bc:52:ad:72:f5:
                    50:99:82:81:d1:79:3d:07:38:b3:97:a5:19:6c:20:
                    cf:23:26:e9:8f:3c:3f:63:b1:24:82:e5:27:4b:ec:
                    18:93:c5:b1:68:65:8d:d1:f9:03:a0:51:ca:c6:f8:
                    77:28:1c:3a:4f:2e:c9:18:2e:7f:6d:bc:d2:04:58:
                    74:c7:72:d9:8b:42:a8:89:df:b4:34:8d:19:11:ca:
                    2a:a5:e1:01:b6:ca:29:86:9b:d8:f6:4c:b0:72:ea:
                    b7:b0:49:82:59:59:f6:02:1f:23:e9:02:16:dc:20:
                    db:62:92:bb:29:5c:65:a8:a7:cd:a9:34:b1:d5:b3:
                    1c:3d:34:1e:55:1b:22:cc:74:d1:47:5b:a5:05:98:
                    c7:4e:46:e2:7f:0e:e6:7f:6a:92:ae:c3:8f:47:54:
                    0e:63:56:39:2d:7b:2a:97:4a:6c:e1:90:74:66:4a:
                    f6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:FF:BB:CE:C3:A1:F9:38:32:16:A9:E5:EA:02:1A:BA:B0:2A:85:5E
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/6EAE7A428D7D11F196E91B9D3511F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:feae::/48

    Signature Algorithm: sha256WithRSAEncryption
         7d:e2:16:ac:c6:c6:26:89:b2:d9:47:44:94:bc:e1:2b:4c:1d:
         32:51:1b:f8:14:c0:4a:a0:15:ad:88:73:1a:8e:f5:3f:d4:9f:
         fd:10:70:09:ca:85:73:0e:77:ce:bf:1e:04:9c:46:bb:aa:ab:
         5c:b9:41:13:8b:53:22:c2:66:87:e3:65:53:d5:03:97:4d:20:
         51:3d:55:d4:06:78:2f:ec:2b:6d:ee:80:a7:aa:29:04:60:cc:
         e3:25:15:ef:86:fe:17:2a:43:19:50:90:af:85:0d:38:f3:d3:
         78:ad:7f:e6:1d:ba:ab:87:d2:56:04:83:31:39:ac:12:84:1f:
         48:d9:4d:e8:b2:b6:ed:b3:8d:ca:00:66:bb:a9:af:1f:2f:49:
         53:71:52:34:7c:6b:2b:b9:81:45:e4:3c:19:38:e2:0e:50:ca:
         48:90:c0:4e:42:77:2f:ca:bd:10:8a:50:af:c2:e1:c5:67:4d:
         c1:16:73:2a:5d:99:c1:47:97:11:c0:f6:15:11:cc:41:65:04:
         9e:11:6a:fb:0a:98:28:28:25:26:b0:75:13:ec:70:45:8e:28:
         0b:f6:b8:5f:80:c2:f8:dc:12:76:04:b8:97:68:f4:5f:9c:0d:
         c2:1f:fd:d6:a6:fc:1b:62:27:48:92:49:b4:04:58:08:d1:6c:
         78:dd:9a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 03:05:09 2026 by rpki-client