Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/9AEA3C808D7E11F196D17ADC3511F970.roa
File:                     9AEA3C808D7E11F196D17ADC3511F970.roa (raw, json)
Hash identifier:          GiCR49LB2hpLUmAeTG26ak/B6gxMeIgLv1xAfM5FZ3U=
Subject key identifier:   D9:99:64:73:29:02:95:1D:DC:51:3F:6B:B5:F5:83:23:93:10:C4:F4
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1218
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/9AEA3C808D7E11F196D17ADC3511F970.roa
Signing time:             Sat 01 Aug 2026 07:57:13 +0000
ROA not before:           Sat 01 Aug 2026 07:57:13 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     153033
IP address blocks:        2406:840:fe93::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 19:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4632 (0x1218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: Aug  1 07:57:13 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a6da6d9-ca88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5a:ee:a6:07:85:6c:8a:b4:cd:43:2b:60:37:
                    84:23:db:d0:24:ba:20:7b:6e:59:9f:a1:00:19:7d:
                    84:3c:19:f2:d8:77:75:a0:ff:72:7e:c8:2b:c1:fb:
                    d4:62:bb:c7:f7:17:87:bc:7d:44:77:ab:e4:cc:5e:
                    8c:51:d7:6f:ce:c1:c7:24:3f:fd:81:e1:4c:25:e1:
                    62:29:e9:8a:d9:f8:c5:88:06:e9:eb:c0:f7:d5:b4:
                    cc:70:2d:c6:ef:e7:7b:57:ce:b5:18:de:45:b1:cb:
                    4e:a7:56:14:95:b2:52:b1:34:49:6c:d0:61:a8:b4:
                    a7:74:d3:7b:c8:c3:d2:56:03:21:94:d5:26:11:89:
                    58:cc:14:c9:f4:8f:7b:fb:55:6d:bb:83:a3:dd:95:
                    01:08:74:2b:4d:89:ca:14:15:22:9c:d9:27:31:28:
                    22:bc:fe:2d:b2:71:d1:04:9d:1e:c3:bf:1d:9b:78:
                    31:6a:f0:62:00:0c:32:8a:32:5c:b0:ec:bb:ba:ef:
                    ab:70:a1:29:2b:34:aa:a9:61:c6:85:03:97:8a:90:
                    9b:19:8f:f9:69:72:02:28:06:50:cd:dc:6d:cb:9d:
                    06:d0:6c:a8:33:bf:0f:8e:b1:20:3b:2d:8f:7d:f1:
                    c3:0d:dc:49:5e:f6:10:bb:be:73:94:06:a8:43:cd:
                    7b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:99:64:73:29:02:95:1D:DC:51:3F:6B:B5:F5:83:23:93:10:C4:F4
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/9AEA3C808D7E11F196D17ADC3511F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fe93::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:10:30:f7:cf:8f:ae:35:ee:ef:ff:f6:27:b2:81:3e:2c:cd:
         bc:14:29:c2:5d:08:ff:8f:0d:4b:96:62:7e:94:3e:5d:d1:7c:
         07:ac:b1:87:6c:e2:78:ba:22:d2:c0:fc:22:29:01:7b:ea:8f:
         a4:e7:28:53:3a:b8:12:1e:e7:33:d6:48:46:72:49:e8:40:ae:
         17:ba:be:a6:6d:40:93:33:b8:6f:1e:df:66:6a:01:f7:70:4a:
         6a:2c:ca:a7:74:56:45:f0:60:c6:51:75:50:a5:66:d2:c7:7e:
         c5:ba:69:64:2a:5a:e4:fe:fb:98:e8:84:85:ad:75:19:eb:46:
         59:5d:c0:54:f6:ca:9f:90:8d:3d:26:1d:a6:1a:dc:11:a9:02:
         37:1a:86:48:41:4d:38:cd:01:7b:df:df:b0:4c:db:20:05:90:
         ee:db:f1:53:51:24:2a:ee:f6:c3:a0:76:70:4e:57:32:b9:d1:
         a3:36:a8:fd:f2:2f:b6:81:30:70:e2:aa:b5:df:56:f5:c7:aa:
         d7:34:53:2f:ab:15:10:70:42:4c:17:47:ec:a0:6a:a6:cc:c5:
         7c:19:d9:86:af:19:ba:81:de:74:a9:10:4d:11:46:60:a6:68:
         b8:21:1a:45:26:ac:07:e7:6a:02:da:27:12:ca:59:f8:82:56:
         ca:98:c0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:35 2026 by rpki-client