Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7B2DB2E062D611EDA3A90143C4F9AE02.roa
File:                     7B2DB2E062D611EDA3A90143C4F9AE02.roa (raw, json)
Hash identifier:          4ua0MlHrycCpBDawOrMMdUiW1MKBONHMrhHLCXqgBHE=
Subject key identifier:   5A:BE:44:63:87:06:23:66:2F:87:37:4D:69:C9:02:51:8D:90:0A:3A
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1179
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7B2DB2E062D611EDA3A90143C4F9AE02.roa
Signing time:             Fri 22 May 2026 20:26:53 +0000
ROA not before:           Fri 22 May 2026 20:26:53 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     18041
IP address blocks:        2406:840:f337::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 19:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4473 (0x1179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:26:53 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a10bc0d-ba64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:94:53:00:0f:8f:a6:fe:ac:f8:29:54:5e:cd:
                    79:1c:21:52:f9:67:f0:0e:23:bd:76:8a:3c:6c:f4:
                    6b:c5:fd:bf:51:42:34:a7:45:98:34:f5:47:e1:21:
                    7c:ae:01:53:4d:5a:3a:f8:e1:e6:d9:99:77:47:6f:
                    e6:88:aa:00:ec:29:34:c0:ab:ed:8e:f8:61:90:c7:
                    78:c1:c6:15:87:a6:c4:3e:4a:f6:56:b2:e5:28:8a:
                    a8:23:a9:30:a0:35:58:b2:47:94:3c:71:1e:56:c7:
                    5d:b9:5d:3c:76:8b:fc:6d:80:90:12:84:b3:7e:c1:
                    65:87:96:bb:5e:80:59:f1:d7:95:84:11:70:a9:54:
                    67:07:bf:d9:12:e5:9e:20:38:25:fa:c7:86:0a:25:
                    75:41:f1:77:aa:c2:53:ef:51:d3:e9:3d:cd:19:28:
                    83:60:df:c1:a1:21:b8:90:c0:6f:36:16:1d:b3:f9:
                    c5:cb:3e:4f:bb:76:5e:bf:01:11:50:73:ba:74:5f:
                    fa:a0:06:0b:3c:e8:3e:37:c8:66:9d:31:1d:c0:82:
                    97:df:5e:1e:17:5a:3e:c8:08:e7:78:62:f1:62:3b:
                    04:ef:c1:9a:57:e6:90:0c:8d:c5:eb:91:b8:8d:fa:
                    f9:40:06:31:ea:3e:ef:2c:ce:68:be:05:0c:33:40:
                    d6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BE:44:63:87:06:23:66:2F:87:37:4D:69:C9:02:51:8D:90:0A:3A
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7B2DB2E062D611EDA3A90143C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:f337::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:4c:ab:1e:22:de:14:b5:6a:d8:67:4d:8b:11:08:cc:0e:87:
         ac:50:f3:a0:98:ad:32:37:94:57:e7:64:65:00:20:1b:33:61:
         fc:60:30:8b:a6:a0:d2:dd:b4:e7:34:8e:f9:2a:aa:2c:22:45:
         12:4c:dd:e1:a9:cd:aa:e5:7a:4d:48:89:dd:43:3e:4e:47:44:
         43:bc:a6:f2:ac:56:aa:b8:65:5d:24:33:ef:9a:1e:22:48:2f:
         93:d8:4a:f1:dc:c1:53:d8:4e:c6:5c:5b:11:28:37:99:0b:c9:
         e9:ba:3c:29:41:29:55:12:04:f6:7c:1d:5b:87:b9:d2:19:76:
         a8:ce:65:ed:da:a2:9a:8f:1f:44:ff:20:89:e0:85:61:50:5f:
         f2:1d:8f:76:67:ce:c7:55:d2:18:ca:0a:fd:49:ae:3c:ab:01:
         51:5e:1e:68:ef:42:1f:a0:08:84:33:d0:9e:ae:fe:47:6e:6e:
         88:77:f3:91:9b:ef:94:a7:5a:95:d4:05:50:f3:2f:79:48:db:
         2e:c5:a3:7e:f4:c7:b0:63:a8:dd:dc:fb:10:91:91:c3:d7:a2:
         b8:9f:79:0c:10:ea:68:98:89:3a:12:96:9c:fa:49:dc:f7:3a:
         c7:c7:ea:46:be:00:52:26:90:ee:b1:94:cf:05:cd:c5:9a:2d:
         48:46:c5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:38:30 2026 by rpki-client