Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/9818EAFC71DC11EFAC022E35C4F9AE02.roa
File:                     9818EAFC71DC11EFAC022E35C4F9AE02.roa (raw, json)
Hash identifier:          MhkfQs7hmWLdtEvyj2gMF64ov+hyopS1z5y2Me+G9Q0=
Subject key identifier:   06:7F:26:D5:14:71:16:8A:FE:EF:18:9B:1F:FB:A2:BA:E6:47:DF:B1
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1173
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/9818EAFC71DC11EFAC022E35C4F9AE02.roa
Signing time:             Fri 22 May 2026 20:26:41 +0000
ROA not before:           Fri 22 May 2026 20:26:41 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     153331
IP address blocks:        2406:840:fca0::/44 maxlen: 48
                          2406:840:fea5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 19:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4467 (0x1173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:26:41 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a10bc01-a6fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0c:26:65:05:e5:df:f1:c9:68:61:f0:70:e4:
                    c2:d9:c3:e1:05:4e:90:19:ef:7b:64:f2:0a:ac:05:
                    68:ec:96:70:6d:5a:ba:7a:b4:c8:f5:d9:e8:59:f6:
                    94:89:78:1e:fb:24:a9:63:da:49:2d:ee:4e:f5:6a:
                    b6:4d:6a:1e:52:3e:cb:bb:1e:06:39:ad:8f:da:57:
                    ed:3a:0c:f2:66:f9:c2:d5:8a:c7:c7:e1:21:06:48:
                    b0:69:70:92:ed:9e:e3:0a:ef:3e:47:a3:4e:12:18:
                    d0:1d:ca:df:72:7e:21:bd:24:bc:52:5a:77:84:92:
                    7a:f5:d4:54:d7:42:5a:c2:5b:c1:9d:96:a8:8b:97:
                    e8:d3:2d:cf:3a:67:dc:e6:a9:e2:85:59:d7:4a:72:
                    64:80:2b:bc:d8:07:09:f9:6b:ce:01:e2:7b:07:10:
                    8b:cb:1c:3f:e9:bd:8d:25:2e:4d:0c:e9:f0:42:1c:
                    8b:93:ee:79:d8:73:f9:a1:59:a3:22:69:45:77:a7:
                    9b:1a:67:a8:09:3e:a0:e9:7e:83:88:fd:cc:36:88:
                    c2:d4:a4:e3:96:d7:7e:c2:33:50:dc:ba:d5:49:11:
                    b3:ec:4e:03:cf:95:fe:ec:e4:f5:78:3b:fe:47:f8:
                    95:3b:22:14:fb:ee:ac:16:0f:6a:f8:93:69:28:45:
                    e3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7F:26:D5:14:71:16:8A:FE:EF:18:9B:1F:FB:A2:BA:E6:47:DF:B1
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/9818EAFC71DC11EFAC022E35C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fca0::/44
                  2406:840:fea5::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:09:d6:97:e6:5e:1b:b1:be:39:31:1b:f4:1e:3d:ca:5d:1d:
         b1:98:49:92:29:86:54:09:f5:61:e5:be:ff:42:09:dd:03:27:
         a9:8e:c6:3d:1c:36:ff:be:98:7a:51:ed:90:83:03:dc:5d:d9:
         1d:60:c1:d5:d5:35:ea:e0:ff:9e:45:1e:de:52:82:97:c7:f4:
         ee:2a:f6:ef:f7:39:bb:e4:cf:fe:55:35:79:f3:66:62:32:2e:
         dd:8f:62:5a:b9:16:82:9e:e2:bc:43:b1:bc:aa:c7:13:d6:b4:
         4d:6d:3b:c5:48:5f:2b:65:88:34:89:b1:05:ad:b3:89:f6:a4:
         0d:52:b3:62:9f:88:3f:34:a0:84:ae:3b:3e:7d:a0:f0:e6:87:
         7e:9d:4c:d2:08:09:ab:b3:08:f0:5f:e1:d7:13:72:85:11:74:
         dd:6f:a5:55:7e:95:f3:ff:e9:8d:53:c7:d3:2c:64:c7:bb:a5:
         eb:e9:e6:8f:b2:1e:57:a9:20:8f:c2:9b:c6:11:e7:fb:1a:23:
         db:91:67:26:c2:a5:b0:d3:b1:43:56:4f:99:d9:43:d8:4f:71:
         97:ad:f1:29:3c:3d:d5:c6:5f:d8:f8:4c:ac:8d:16:5a:3c:78:
         ac:ca:9a:57:25:3a:c7:ac:56:2b:f4:df:25:dd:8c:48:c6:a7:
         e6:b5:e9:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:19:48 2026 by rpki-client