Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/95CADDEA8D7E11F196D17ADC3511F970.roa
File:                     95CADDEA8D7E11F196D17ADC3511F970.roa (raw, json)
Hash identifier:          jsUozS+HUD3nl2x9ZzUUDLMq8wDEsp4vsb7SGGKoINM=
Subject key identifier:   22:E3:21:7D:D1:C1:13:24:CE:D3:6A:01:00:96:EB:D2:2A:28:37:F8
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1214
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/95CADDEA8D7E11F196D17ADC3511F970.roa
Signing time:             Sat 01 Aug 2026 07:57:05 +0000
ROA not before:           Sat 01 Aug 2026 07:57:04 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     152118
IP address blocks:        2406:840:fec4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 19:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4628 (0x1214)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: Aug  1 07:57:04 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a6da6d0-0e08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a8:b1:ed:9c:f5:e4:ff:92:70:eb:1b:5b:be:
                    c7:c3:b2:04:f9:76:e7:5b:7c:17:12:b0:50:7d:e2:
                    d8:af:e0:56:25:e9:6a:ad:1e:79:e2:1d:4a:c2:cc:
                    55:a7:25:6f:53:e0:2c:9a:2b:d8:8f:e6:b7:b0:0c:
                    ff:14:19:c3:e6:ab:45:28:4d:f5:f8:3c:0d:6c:69:
                    f5:df:19:74:04:c9:38:c9:f7:a5:cb:bf:06:78:e3:
                    0e:36:96:fa:84:8b:3c:fc:81:89:86:46:ce:84:78:
                    07:9a:0f:6a:dd:ef:c6:14:7a:c8:29:c6:43:19:b2:
                    e3:f5:f8:1c:e9:5a:ba:34:fe:60:90:4e:86:2e:fb:
                    cc:0c:5b:a8:af:86:d9:f4:65:bd:d1:3e:e7:1f:90:
                    eb:56:dc:cc:88:41:87:b1:3d:ac:9d:da:47:2a:4b:
                    35:bb:96:06:d0:9b:6b:cb:96:40:21:aa:3c:af:70:
                    69:86:ff:b7:77:11:77:ba:e2:bb:10:ba:14:81:73:
                    ee:16:55:39:dc:c5:79:b1:b5:01:65:43:c7:72:4a:
                    cd:e0:10:da:c8:ae:fd:36:ca:be:91:05:64:20:62:
                    e1:81:6f:b5:42:5c:2d:06:13:2b:c7:51:7a:a8:ad:
                    f8:5c:55:50:81:de:5d:b0:a1:98:2c:f4:34:62:b5:
                    aa:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:E3:21:7D:D1:C1:13:24:CE:D3:6A:01:00:96:EB:D2:2A:28:37:F8
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/95CADDEA8D7E11F196D17ADC3511F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fec4::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:4a:a9:d4:ae:1d:49:d6:5c:37:d2:5c:92:c1:5b:56:78:6a:
         93:da:14:2c:d6:57:14:3b:4e:a9:04:ab:99:1f:9a:d8:80:87:
         ef:cd:ff:24:13:01:fc:45:05:79:cc:42:3e:17:3f:be:7a:83:
         60:d9:86:42:99:40:c5:10:cf:88:03:79:54:30:82:57:00:c2:
         d7:e6:6d:a3:e7:39:0d:16:a6:82:81:b9:ec:af:fc:06:a9:56:
         6a:50:70:4a:00:a6:7b:49:50:51:38:27:50:76:99:eb:f3:87:
         aa:56:fe:76:f0:29:e3:26:67:4b:09:78:e8:85:55:2a:f5:e5:
         a7:bf:48:00:40:37:13:f7:d7:a3:9c:69:15:4f:fa:2b:75:56:
         10:37:15:33:71:91:c1:f3:b4:76:0f:ef:a5:4b:3d:88:dd:54:
         cb:94:bc:97:47:31:52:4d:d1:9c:8f:fb:2a:32:c3:9d:d6:04:
         95:40:44:55:23:4a:7d:e1:21:0b:b9:bd:65:f9:fa:b5:df:1d:
         f8:27:7e:3b:46:d6:79:24:03:89:a3:9f:04:60:fe:6a:08:b8:
         51:1a:f1:48:99:34:04:26:39:6d:a8:de:95:f7:07:f8:53:24:
         22:52:ab:37:4e:9e:ec:2d:66:76:54:e9:89:6c:3c:ed:d1:3b:
         cd:66:d4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:47 2026 by rpki-client