Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/980BF4188D7E11F196D17ADC3511F970.roa
File:                     980BF4188D7E11F196D17ADC3511F970.roa (raw, json)
Hash identifier:          EHLcoFIuW1YMfW60fxWJvlHLJgojfTlbzpHIbwykgi0=
Subject key identifier:   92:BB:68:C0:17:F6:3A:04:F4:BA:B6:B1:AE:C6:2A:AB:9D:B1:F5:A4
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1216
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/980BF4188D7E11F196D17ADC3511F970.roa
Signing time:             Sat 01 Aug 2026 07:57:08 +0000
ROA not before:           Sat 01 Aug 2026 07:57:08 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     152920
IP address blocks:        2406:840:fe96::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Sep 2026 19:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4630 (0x1216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: Aug  1 07:57:08 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a6da6d4-0acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b6:6c:3c:c8:ee:17:db:30:ce:29:3e:70:5f:
                    65:fb:f8:36:e5:66:d2:ce:3c:15:27:5d:a3:6a:9c:
                    f8:05:09:0a:e6:91:ce:6b:d6:15:80:73:31:59:43:
                    aa:e7:d5:13:c2:42:c4:2d:fb:cd:ef:c0:51:f0:a8:
                    a7:7b:ed:d6:9c:78:c5:ac:da:56:bf:2c:ca:9e:50:
                    7e:08:81:4b:14:19:bf:da:f7:13:f5:09:9f:19:f4:
                    f7:2a:74:bd:76:bd:bb:0b:a3:76:9d:e1:b4:a1:92:
                    66:8c:25:34:2b:82:c0:bf:75:03:a6:58:84:c6:aa:
                    a4:4c:54:3f:55:72:4d:e4:3f:b4:ed:c8:ae:0e:b6:
                    41:13:d9:83:a7:9a:5a:24:29:7d:a1:35:90:89:ff:
                    8c:95:4f:7a:be:c8:b4:26:c5:dd:b0:bf:e1:f0:8b:
                    ea:2b:4a:d0:a9:84:fa:aa:49:84:fa:d4:c4:e4:d9:
                    62:47:95:ff:d8:1c:f2:d0:0c:53:88:2f:98:96:74:
                    89:d1:3e:53:7b:78:b1:cd:96:a5:ac:92:aa:22:af:
                    63:d4:d0:52:54:28:43:20:c2:65:c9:9c:78:65:5e:
                    de:9f:d6:36:aa:fb:b8:95:ff:a5:7a:d9:a0:03:36:
                    bd:a1:14:e9:2d:a7:ae:72:ab:3d:0e:6e:2c:ac:28:
                    49:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BB:68:C0:17:F6:3A:04:F4:BA:B6:B1:AE:C6:2A:AB:9D:B1:F5:A4
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/980BF4188D7E11F196D17ADC3511F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fe96::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:87:7a:de:1e:82:4d:f5:13:99:92:cd:75:9f:11:9a:89:47:
         54:d0:c7:99:64:ad:ca:23:d5:e4:3d:68:be:8c:0e:7e:f0:86:
         2d:16:e8:9b:7e:c3:a6:97:1f:d7:21:28:02:52:ad:5c:9e:89:
         c7:ee:a9:d5:b0:3a:27:47:11:b9:cf:ea:0f:3c:38:71:6f:0d:
         b8:c3:67:f8:b4:39:0e:6f:3f:ca:ea:95:13:2a:3e:01:c9:44:
         ae:73:31:0b:78:6d:a0:26:2e:fe:05:b7:42:20:de:9c:1b:9c:
         e5:b0:6c:b4:68:5b:52:2a:84:6e:d8:24:55:b9:e5:ec:48:15:
         d6:84:5d:37:43:66:9a:73:80:21:ea:48:03:74:4e:a6:50:d4:
         c7:f3:9e:98:54:ff:84:90:a3:d1:e5:98:b4:8c:dc:16:71:d4:
         a7:c0:2d:b0:5b:b7:ad:f2:75:14:25:9e:b0:fe:1b:cb:f1:11:
         af:59:ac:2a:29:ad:11:5c:83:e3:28:7c:30:cd:31:37:da:fe:
         1e:7e:1f:32:0c:06:f7:91:8a:27:e6:15:d2:77:c7:43:29:f7:
         4a:b7:fa:74:b0:1e:ce:68:9a:ec:4f:e1:36:0d:11:6f:f1:02:
         f6:7d:79:6a:28:1f:f6:3c:1c:a1:e2:db:ce:41:d3:05:26:06:
         34:29:70:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:27:01 2026 by rpki-client