Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7426DFBE8D7D11F196E91B9D3511F970.roa
File:                     7426DFBE8D7D11F196E91B9D3511F970.roa (raw, json)
Hash identifier:          dxRvze69SxtVbuMrMBsWVlqmgeTdpU3VcvfA+hz8Y/w=
Subject key identifier:   CF:CD:11:DE:02:99:B1:FB:6C:CF:81:68:1A:B2:DE:64:B0:C0:E7:78
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       11F7
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7426DFBE8D7D11F196E91B9D3511F970.roa
Signing time:             Sat 01 Aug 2026 07:48:59 +0000
ROA not before:           Sat 01 Aug 2026 07:48:59 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     151187
IP address blocks:        2406:840:fed3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 19:28:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4599 (0x11f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: Aug  1 07:48:59 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a6da4ea-e625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:33:3c:40:ed:79:48:41:3b:2b:ac:6b:63:dc:
                    f4:cc:62:8c:ea:eb:b6:91:aa:93:a4:56:e5:7b:b4:
                    21:8c:ec:28:7f:f7:ee:e1:b0:e9:63:10:a5:ba:49:
                    86:6e:e3:11:67:92:02:8f:b3:f5:32:99:14:2c:fd:
                    18:ad:6a:7f:4f:d7:40:9c:86:1a:c9:52:75:38:f1:
                    d1:85:fd:40:39:b2:ef:70:29:75:54:2c:7d:92:48:
                    29:97:f8:ce:61:cd:37:67:0c:4a:35:9e:de:66:d4:
                    51:4f:85:a1:9a:3e:3a:b8:57:63:30:0f:f9:a4:b3:
                    9d:c5:e1:37:38:73:e1:05:69:e4:20:b6:f3:ff:33:
                    fa:b1:47:7a:a7:69:84:91:ac:9c:76:5d:8c:3e:fa:
                    a7:b6:c5:61:f5:e4:e8:a4:2b:3d:4a:6a:cc:d5:60:
                    3a:8f:51:84:d4:1f:96:1d:be:5e:43:b0:0a:26:a3:
                    28:57:cf:a4:39:19:63:91:cb:65:0e:1f:06:61:c1:
                    d9:53:af:8b:b6:50:75:c5:f0:4c:ed:af:1c:42:0b:
                    c4:87:6d:d8:e1:b5:bb:01:41:69:3c:b2:d6:b4:3f:
                    a2:6f:c3:3a:ca:ab:bf:c3:7b:b6:f6:ee:30:e6:58:
                    b0:1c:dd:93:6c:34:08:89:12:5f:cf:38:fe:46:8a:
                    62:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CD:11:DE:02:99:B1:FB:6C:CF:81:68:1A:B2:DE:64:B0:C0:E7:78
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7426DFBE8D7D11F196E91B9D3511F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fed3::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:dd:27:34:ec:40:6b:7c:5d:2f:44:4f:35:d2:01:45:e2:b5:
         d8:3c:8e:25:3b:ce:bf:29:01:79:77:7a:2c:b2:de:26:4d:69:
         13:37:49:6e:71:53:91:01:11:d6:b0:50:ed:38:cc:33:3a:ce:
         00:5d:3f:84:55:03:d6:6a:bc:98:01:b9:e9:19:e8:48:20:fb:
         b1:ea:ec:88:ec:b8:94:6a:de:fb:46:fa:9e:48:33:61:c5:82:
         32:d6:e1:52:50:1c:73:26:d6:fb:3a:4d:df:93:7e:ab:40:c6:
         ed:41:9c:83:c7:87:96:05:f4:88:d0:2c:b9:ac:7c:9c:23:4a:
         84:c3:76:78:50:7e:eb:ca:6e:7a:8d:b8:70:81:3c:7a:20:94:
         71:4d:fa:a3:96:98:94:d6:20:91:0b:c4:6a:bd:31:93:9a:49:
         43:18:c6:ca:32:bd:23:1e:1e:ff:66:ed:16:a2:a8:66:be:c0:
         24:54:87:ba:e7:fe:51:fd:8c:fa:bc:1e:7a:f3:2e:b5:8a:61:
         6c:fa:43:11:53:35:6d:12:2c:c9:9a:66:dd:99:f4:be:cd:32:
         a6:9c:ad:ea:34:43:61:37:72:ab:89:34:93:aa:00:27:cf:21:
         42:8e:5a:ae:7d:41:18:96:d3:21:8f:d2:2c:21:e0:82:80:f8:
         77:a4:a2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 00:48:44 2026 by rpki-client