Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/992253248D7E11F196D17ADC3511F970.roa
File:                     992253248D7E11F196D17ADC3511F970.roa (raw, json)
Hash identifier:          1/PvZjEGHRIqirY5Ba33/tBA+ouS6xX0KG0nzZDy5Pk=
Subject key identifier:   82:18:ED:6B:17:06:75:9C:78:50:86:A4:07:1F:30:CC:FE:90:08:4F
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1217
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/992253248D7E11F196D17ADC3511F970.roa
Signing time:             Sat 01 Aug 2026 07:57:11 +0000
ROA not before:           Sat 01 Aug 2026 07:57:11 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     152930
IP address blocks:        2406:840:fe91::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 19:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4631 (0x1217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: Aug  1 07:57:11 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a6da6d6-bab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:41:8c:0d:08:36:90:b5:3e:cb:cf:a8:15:0f:
                    ca:47:79:63:ca:e2:16:8a:61:1c:81:eb:62:8a:f8:
                    75:b6:54:f9:d7:6a:ee:e9:1e:55:d8:03:3b:7c:d5:
                    ce:83:be:f8:2a:bb:57:03:25:60:20:3e:93:48:d7:
                    0a:9b:d8:37:2d:3d:74:c7:97:a3:25:5c:9e:6e:c3:
                    21:ac:a8:a8:9d:f1:67:24:27:48:89:85:c8:f9:6d:
                    ef:da:0b:32:f5:72:ac:61:15:02:9d:45:8c:c6:bc:
                    54:b9:73:6d:47:71:b1:92:9d:c6:87:18:bf:3d:19:
                    9f:13:be:76:cf:b1:41:a2:b2:8a:a9:11:50:9f:46:
                    9c:e7:31:a1:e9:fc:d3:b4:fb:11:fd:46:85:e5:41:
                    7f:65:3b:12:96:8b:b1:01:16:18:e3:54:21:f3:ea:
                    d2:02:67:06:94:2e:e2:c9:6b:f6:f2:ae:92:13:05:
                    b4:42:0a:fd:10:61:6c:bd:a4:7a:1f:61:12:fa:bd:
                    3d:cc:0f:16:50:df:6a:8c:02:e4:a6:94:f6:dc:8d:
                    26:f7:c0:f4:bb:11:f4:5e:e6:f1:b1:33:b0:4e:a4:
                    23:4b:32:8a:17:a2:82:8a:f4:aa:b5:f7:74:16:9d:
                    91:65:34:91:8a:1c:62:96:78:97:21:86:4e:88:56:
                    eb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:18:ED:6B:17:06:75:9C:78:50:86:A4:07:1F:30:CC:FE:90:08:4F
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/992253248D7E11F196D17ADC3511F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fe91::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:b8:a0:e6:82:5c:aa:fe:8b:25:e1:1b:11:a8:9d:16:23:20:
         6a:b0:5b:ed:1e:24:52:00:90:a1:0c:18:2e:66:e7:e2:9b:ca:
         8d:0d:0b:2f:c0:de:86:2c:93:bf:98:4f:84:1d:ca:c1:4b:5a:
         e9:a0:28:4c:59:8d:00:1f:ad:3b:a7:e9:42:75:ff:4f:e1:d4:
         bc:a9:be:3b:a6:94:fd:26:26:16:dd:5c:53:9f:f4:a4:cd:fd:
         8c:4e:7a:2c:89:20:1d:c5:0a:bc:fe:d8:70:27:04:7f:86:15:
         c1:21:94:99:f4:83:67:51:7f:f5:c3:39:c2:12:83:68:0a:5c:
         a6:63:82:f6:6b:7f:70:44:5c:19:a9:e9:6b:98:d8:34:c1:97:
         2f:fa:c7:5b:38:a6:8f:7a:d8:08:a0:42:0f:04:ad:94:3f:13:
         56:01:ca:16:9b:bd:a8:42:c8:82:84:01:d7:b6:e0:f1:94:cc:
         3a:53:b7:2e:45:87:b6:ae:29:5f:21:b0:76:16:56:ac:54:f2:
         a6:ff:0a:00:cf:74:39:a0:6a:9c:67:d7:81:4e:26:5e:a1:2a:
         f5:16:ce:4e:c8:ac:c1:ec:0c:74:0b:91:dd:1b:60:5f:10:f4:
         6c:3f:75:13:82:47:e2:23:bc:65:08:5f:9a:ee:49:c0:b5:ab:
         6d:2f:d5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:49 2026 by rpki-client