Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/9103ACF68D7E11F196D17ADC3511F970.roa
File:                     9103ACF68D7E11F196D17ADC3511F970.roa (raw, json)
Hash identifier:          qrYxtWZCyNwBnw4l7mQ7DPTHqB7ZSNWD4HMrWo7VlSU=
Subject key identifier:   28:CB:13:69:92:DF:DF:A8:32:3F:20:51:45:08:44:9D:53:B9:AE:F1
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1210
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/9103ACF68D7E11F196D17ADC3511F970.roa
Signing time:             Sat 01 Aug 2026 07:56:56 +0000
ROA not before:           Sat 01 Aug 2026 07:56:56 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     150173
IP address blocks:        2406:840:fed1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 19:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4624 (0x1210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: Aug  1 07:56:56 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a6da6c8-b87a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:10:8c:97:bb:48:17:fa:e5:a0:13:d4:5b:55:
                    5c:2e:3a:05:19:94:96:f4:c8:c3:24:e3:2a:9f:0e:
                    1d:e4:af:d3:57:d6:56:0a:eb:48:ff:61:97:36:2f:
                    2c:9e:a7:0d:24:10:1d:3c:f1:09:19:95:a6:f6:3f:
                    b0:30:b3:7a:8e:b7:58:f3:04:d0:c6:f1:52:8f:fd:
                    9a:25:95:9f:da:9a:3d:4f:56:e5:75:71:5a:a3:52:
                    b8:68:b2:8e:72:cd:c5:90:a9:94:6d:75:42:09:e7:
                    d1:83:06:6c:fd:a4:09:0a:49:cb:c5:f8:03:26:cc:
                    6c:90:82:75:d2:01:e1:b9:3e:e9:3f:f8:48:11:60:
                    4e:ed:0d:17:2f:63:2b:c5:cb:8c:c4:25:92:65:cc:
                    7a:47:2a:f8:14:70:4e:f4:61:36:25:17:d0:c1:e4:
                    24:bb:25:c8:e9:50:f9:cd:3d:fd:4b:20:b1:2d:c8:
                    4d:ad:29:e8:56:6c:44:b4:53:e2:9b:04:bd:8f:5b:
                    31:14:99:98:9d:29:16:d8:52:4a:77:13:68:be:bd:
                    ad:62:c6:64:51:7a:ea:ce:83:f0:34:00:b3:50:e0:
                    83:38:8c:24:aa:2c:fa:e5:ea:6d:60:34:2d:1c:88:
                    db:c5:d8:5a:be:aa:b9:0b:59:94:8e:d0:2f:27:38:
                    b7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:CB:13:69:92:DF:DF:A8:32:3F:20:51:45:08:44:9D:53:B9:AE:F1
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/9103ACF68D7E11F196D17ADC3511F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fed1::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:31:3b:4f:f6:68:3a:07:dd:64:ff:4e:78:87:80:27:80:d1:
         ef:1d:3e:b5:71:75:92:66:e2:0c:fa:cf:bd:f5:b7:bf:2b:d0:
         6b:0a:71:5c:2b:e6:71:7e:b3:44:74:62:c1:a2:c2:92:50:fd:
         df:91:f3:ce:7d:e4:c7:18:a3:c3:0e:9b:61:22:bd:72:27:09:
         d7:34:ee:8c:4e:0c:eb:b0:47:c0:c0:b5:69:cf:97:80:52:be:
         fb:f3:c5:49:65:f7:53:7b:98:01:f6:14:93:98:fa:3b:5d:44:
         ee:9a:2f:3a:5e:4b:12:d5:91:b6:41:46:cb:2b:e8:3f:9c:fd:
         76:79:cf:17:17:89:09:45:99:0a:12:3a:a3:00:b4:43:17:1d:
         a6:90:0c:09:ae:37:4f:ec:a9:d0:cb:e4:03:c8:55:21:dc:6d:
         a0:0e:13:54:f6:eb:fa:5d:e1:54:60:c2:0b:16:3e:85:9d:f1:
         af:cd:dc:e1:85:88:75:7f:5f:4a:d5:88:fe:c5:ca:59:b2:32:
         a3:40:95:db:c0:66:13:24:4b:68:76:7f:d5:7d:b7:0a:f1:15:
         bc:52:fa:c9:de:13:6a:25:b1:b8:2e:3c:c2:31:18:ae:e2:d2:
         ce:9f:05:2c:1f:c6:66:3e:4d:4b:a3:31:92:f5:de:94:65:cd:
         73:94:84:5f
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICEhAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjYwODAxMDc1NjU2WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZkYTZjOC1iODdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtxCMl7tIF/rloBPUW1VcLjoFGZSW9MjDJOMqnw4d5K/TV9ZWCutI/2GXNi8s
nqcNJBAdPPEJGZWm9j+wMLN6jrdY8wTQxvFSj/2aJZWf2po9T1bldXFao1K4aLKO
cs3FkKmUbXVCCefRgwZs/aQJCknLxfgDJsxskIJ10gHhuT7pP/hIEWBO7Q0XL2Mr
xcuMxCWSZcx6Ryr4FHBO9GE2JRfQweQkuyXI6VD5zT39SyCxLchNrSnoVmxEtFPi
mwS9j1sxFJmYnSkW2FJKdxNovr2tYsZkUXrqzoPwNACzUOCDOIwkqiz65eptYDQt
HIjbxdhavqq5C1mUjtAvJzi32QIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFCjLE2mS
39+oMj8gUUUIRJ1Tua7xMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvOTEwM0FDRjY4
RDdFMTFGMTk2RDE3QURDMzUxMUY5NzAucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAYIQP7RMA0GCSqGSIb3DQEBCwUAA4IBAQBvMTtP9mg6B91k/054
h4AngNHvHT61cXWSZuIM+s+99be/K9BrCnFcK+ZxfrNEdGLBosKSUP3fkfPOfeTH
GKPDDpthIr1yJwnXNO6MTgzrsEfAwLVpz5eAUr7788VJZfdTe5gB9hSTmPo7XUTu
mi86XksS1ZG2QUbLK+g/nP12ec8XF4kJRZkKEjqjALRDFx2mkAwJrjdP7KnQy+QD
yFUh3G2gDhNU9uv6XeFUYMILFj6FnfGvzdzhhYh1f19K1Yj+xcpZsjKjQJXbwGYT
JEtodn/VfbcK8RW8UvrJ3hNqJbG4LjzCMRiu4tLOnwUsH8ZmPk1LozGS9d6UZc1z
lIRf
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:44:02 2026 by rpki-client