Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/71C0A3CC8D7D11F196E91B9D3511F970.roa
File:                     71C0A3CC8D7D11F196E91B9D3511F970.roa (raw, json)
Hash identifier:          QssZ9QABHa23255M7xRJiCQo1DhWIqyabJik0cbdFks=
Subject key identifier:   A7:28:6F:AC:ED:81:21:E2:08:94:A8:C9:2D:2E:DD:81:24:ED:1F:A7
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       11F5
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/71C0A3CC8D7D11F196E91B9D3511F970.roa
Signing time:             Sat 01 Aug 2026 07:48:55 +0000
ROA not before:           Sat 01 Aug 2026 07:48:55 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     142438
IP address blocks:        2406:840:fef8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Sep 2026 19:31:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4597 (0x11f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: Aug  1 07:48:55 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a6da4e7-0cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:52:90:5d:3a:0f:ab:00:4d:1a:4a:dd:28:e7:
                    18:33:74:cf:c8:1e:a5:42:d6:17:a8:eb:7b:02:57:
                    fb:30:85:72:2e:e7:e3:fa:1e:62:70:b3:1b:5c:64:
                    53:34:2e:7b:5a:92:d3:2e:a0:e1:68:f3:fc:f3:47:
                    ce:ee:51:df:7c:7b:3d:ab:25:54:58:8f:2d:5a:f8:
                    24:6b:c3:b7:8c:3c:4c:7d:95:41:58:f1:d2:d6:89:
                    6b:5e:25:62:40:dc:3e:d7:a9:15:6c:83:3d:8c:f3:
                    e2:c7:a0:0d:a0:ac:7a:1d:a2:af:9c:db:3f:7c:6f:
                    ab:14:ec:02:a6:31:8e:23:a4:36:6a:7e:fb:be:b3:
                    e1:fc:e1:ab:a6:d8:41:73:14:59:82:a8:55:63:ef:
                    1a:99:aa:42:dd:25:65:6b:d9:d1:e0:d5:7d:f6:87:
                    39:ea:68:d8:e8:0f:77:a0:a9:2b:64:63:e0:34:ca:
                    f9:f8:96:be:da:81:7d:23:e2:a9:67:c3:da:98:75:
                    44:1d:f5:a9:54:59:35:44:46:28:a3:7c:3d:73:79:
                    64:b8:f2:8d:da:9d:b7:14:2f:21:2a:86:1c:51:0e:
                    13:78:28:35:0b:3f:fc:80:7c:d4:15:1f:d9:b5:ae:
                    ca:75:75:ca:3b:80:20:58:52:52:f6:57:1f:07:a6:
                    41:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:28:6F:AC:ED:81:21:E2:08:94:A8:C9:2D:2E:DD:81:24:ED:1F:A7
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/71C0A3CC8D7D11F196E91B9D3511F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fef8::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:6d:a2:0a:42:f6:43:db:48:e0:b9:3e:84:64:3c:d0:ca:35:
         01:7b:92:0f:49:6d:f0:8c:2d:12:c5:88:45:46:8f:4d:67:15:
         3d:69:c6:56:18:d8:84:94:cb:af:67:c0:08:1a:4a:56:61:da:
         54:0c:97:84:d5:1a:b9:a8:e2:e8:7c:03:f7:45:3f:64:e8:4d:
         e5:b9:1d:83:1c:c6:41:f5:99:48:ed:c7:c8:93:af:c9:29:4a:
         62:7c:f4:26:a9:16:c0:f7:f6:c5:8a:66:f1:46:31:8f:c7:0c:
         e3:98:53:df:90:81:3d:42:2f:c9:53:9b:0b:2a:d8:9b:59:d7:
         e0:24:34:0d:de:15:d9:a3:b9:48:b9:f1:8f:ad:07:93:08:12:
         af:b6:6d:cd:29:4b:5e:64:45:17:59:b1:1c:2d:ee:d8:24:5b:
         2f:d3:63:64:31:21:10:aa:1e:30:02:b8:65:72:e9:5e:2c:a8:
         b4:26:20:64:c6:e1:24:c8:ed:0f:b0:2d:52:7f:d4:71:03:ec:
         41:2c:35:ab:d1:ab:6f:6e:79:e0:ad:4a:35:a9:de:ee:85:a6:
         2e:e1:8e:1e:65:6e:26:b7:f2:3b:b4:5a:8b:1d:65:69:da:35:
         82:29:79:e2:ef:a8:f6:92:9c:41:94:2f:c6:c6:34:f8:33:40:
         68:e7:09:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 13:53:04 2026 by rpki-client