Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7A3997FE914211EFB620F512C4F9AE02.roa
File:                     7A3997FE914211EFB620F512C4F9AE02.roa (raw, json)
Hash identifier:          YkPVzXjUwXSWRhGrqkJH2ClF83WFyR1cWqyz3UsmDaw=
Subject key identifier:   8C:F5:A1:87:DE:38:8A:42:BC:72:E5:29:8C:7B:57:62:95:0F:EF:A2
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1176
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7A3997FE914211EFB620F512C4F9AE02.roa
Signing time:             Fri 22 May 2026 20:26:47 +0000
ROA not before:           Fri 22 May 2026 20:26:47 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     153376
IP address blocks:        2406:840:e600::/44 maxlen: 48
                          2406:840:fead::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 19:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4470 (0x1176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:26:47 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a10bc07-1174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:67:5d:05:14:ec:ef:94:4c:30:66:51:e7:cb:
                    f2:54:c5:25:14:26:92:f2:ae:d6:22:d9:2f:cf:15:
                    2f:63:60:98:00:63:72:cf:4d:f4:f1:60:91:d3:11:
                    50:d2:07:63:ba:da:65:12:bc:5d:71:34:80:55:cc:
                    02:04:14:e0:a8:f0:fd:6a:27:5d:a3:0e:5c:0e:0a:
                    ed:e4:23:b8:68:a9:5a:20:a8:3c:28:98:4d:96:51:
                    01:b8:a2:d0:4d:4e:89:c7:ec:fd:26:0f:d3:46:2d:
                    b2:bf:2c:55:4c:35:e8:11:54:03:46:a8:04:43:6e:
                    d8:f2:28:1c:16:1d:5a:2e:89:75:01:ed:38:3c:e4:
                    c8:44:49:88:0d:e2:78:a0:e2:d9:68:7e:04:bb:04:
                    b8:30:6a:57:11:38:db:76:9b:7d:a2:a0:32:d6:e5:
                    62:06:53:02:4d:b1:77:dd:6d:9f:50:a5:d8:87:e7:
                    13:71:23:a2:93:33:b5:2b:03:e9:1f:d8:e6:cb:bc:
                    1c:8f:e5:1c:2c:35:ef:79:67:d2:db:d9:e0:3b:13:
                    7e:33:50:59:a6:5c:b1:af:0d:c7:3f:5c:62:04:c1:
                    d3:bd:fd:a0:69:b2:ad:7a:83:54:9c:01:b8:5c:c7:
                    92:88:93:15:dc:79:f9:80:77:17:e8:4e:aa:5f:6f:
                    10:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F5:A1:87:DE:38:8A:42:BC:72:E5:29:8C:7B:57:62:95:0F:EF:A2
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7A3997FE914211EFB620F512C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:e600::/44
                  2406:840:fead::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:2b:30:c6:b7:78:c7:80:bc:88:3f:22:0c:a3:bc:08:d0:14:
         b7:78:32:c7:c3:f9:db:57:f9:03:8f:89:35:3b:44:a3:5c:3d:
         ba:30:d6:2c:ed:39:7c:75:8d:67:ea:f7:82:05:be:e2:c1:8f:
         d6:74:29:b9:bd:2b:e2:a7:ea:73:66:a2:19:7e:60:48:09:8f:
         01:a2:1c:97:d6:cc:7d:09:6f:e4:67:cb:01:08:64:33:ef:a3:
         e8:ee:32:1f:d3:38:42:08:f9:95:1a:b1:ef:a1:31:de:10:22:
         b2:de:e0:2d:6c:b0:51:7c:c1:76:51:87:c9:43:90:5d:57:2c:
         46:87:6b:18:ae:1f:a0:18:74:5d:89:b9:13:08:73:c8:3e:bf:
         05:c3:a4:12:76:9d:bd:78:f5:d8:69:39:d5:4f:5f:32:f7:03:
         fa:12:85:56:61:c9:f0:5b:71:f1:5e:ff:a4:79:13:b3:b2:54:
         9e:4e:e2:a9:55:61:9c:91:6f:8c:b2:5b:a4:49:06:85:07:b1:
         39:1c:f6:1c:70:55:bd:83:a4:08:63:64:b9:1f:6b:5d:5a:8c:
         cd:cf:26:53:c5:95:31:0b:3e:c1:d6:4d:85:9c:f9:97:2e:a6:
         a2:6f:24:16:0e:4d:c5:db:f2:99:4b:6c:0e:da:0d:a6:b7:e9:
         05:b8:22:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:23:02 2026 by rpki-client