Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/9D9452588D7F11F1A8F36C833611F970.roa
File:                     9D9452588D7F11F1A8F36C833611F970.roa (raw, json)
Hash identifier:          mKowk35yX1b1Jl9W+h4E4TM28Is1bdYxSpMXYDIh8sw=
Subject key identifier:   7E:E4:1C:BA:C7:F7:91:77:00:16:00:70:78:03:48:FC:35:82:48:3E
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1233
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/9D9452588D7F11F1A8F36C833611F970.roa
Signing time:             Sat 01 Aug 2026 08:04:27 +0000
ROA not before:           Sat 01 Aug 2026 08:04:27 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     138535
IP address blocks:        2406:840:feab::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 19:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4659 (0x1233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: Aug  1 08:04:27 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a6da88b-9fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f0:07:c6:95:94:22:4e:6d:6e:39:f8:6f:0a:
                    22:13:81:ff:71:13:aa:7f:a0:a2:e7:02:99:54:67:
                    c3:10:81:28:98:4c:e5:bf:86:9b:17:0c:04:b5:a9:
                    c7:56:7a:cb:ec:e2:0c:10:02:52:91:e1:69:d0:28:
                    f4:3e:1c:95:45:32:aa:92:17:b8:f8:88:30:b3:ed:
                    d1:ea:32:5f:91:12:2c:e4:47:8c:6f:16:85:9f:e7:
                    26:46:31:67:64:7d:10:4e:84:21:84:7c:be:6e:9c:
                    96:15:c3:48:f0:81:60:7f:cd:20:93:aa:b7:6e:bf:
                    13:27:96:01:9b:8d:d9:af:5f:1c:2b:d3:11:be:1c:
                    22:0a:e8:56:3f:c0:3e:20:d8:b9:e4:cc:75:8e:bb:
                    9c:78:93:d4:a0:20:01:b9:48:41:5c:5d:e7:9f:62:
                    94:d0:10:eb:47:2a:c2:4c:53:bc:6d:1d:c6:41:9a:
                    b8:5b:0e:dd:1d:2b:33:3a:e7:35:03:8f:dc:a0:f4:
                    38:02:04:a2:59:da:10:79:f1:05:10:73:18:3d:2d:
                    81:d4:49:3d:40:29:8e:f3:1e:50:98:68:cf:e0:73:
                    2f:3f:73:8d:c6:56:75:9b:39:dc:8c:52:bd:c7:0e:
                    09:7e:d6:e6:59:7a:2d:da:c3:9f:6e:d1:36:b0:61:
                    08:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E4:1C:BA:C7:F7:91:77:00:16:00:70:78:03:48:FC:35:82:48:3E
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/9D9452588D7F11F1A8F36C833611F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:feab::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:b0:53:3c:f5:47:3a:c9:68:59:c5:4a:b0:e5:98:23:48:40:
         b7:1c:9b:02:49:cf:ec:47:50:e3:32:16:1a:c6:23:d5:2a:d2:
         95:38:f0:67:85:41:a4:4b:c2:cc:47:9a:aa:5e:00:a8:d2:56:
         48:b9:84:7d:24:3f:7f:f6:06:61:eb:7f:c2:2d:fb:b9:24:5c:
         5a:94:1e:a1:c2:d4:e8:cb:bb:2e:71:51:c4:8f:86:ca:2f:e2:
         0b:c2:f2:86:bd:89:68:fe:7c:16:8a:2e:39:5e:bf:81:a0:c8:
         ea:e4:10:a6:2c:72:b8:b0:ad:9e:5d:11:01:56:e4:ea:e5:91:
         64:18:39:e4:8a:a9:a6:34:51:f8:c7:7f:dd:db:df:e7:8d:cd:
         54:de:94:5c:1b:02:7b:07:d9:0b:a2:36:51:6c:80:9b:9b:43:
         ca:2f:99:81:96:26:47:e1:ed:ec:69:09:1f:86:7b:0c:bf:ec:
         6d:71:29:56:49:64:43:16:5d:83:16:ae:39:f6:05:9c:dd:1c:
         73:3d:22:be:0b:af:ed:62:47:f4:96:2b:a8:67:7d:35:10:6b:
         66:5b:2f:c0:2e:9b:47:a5:44:6e:13:5d:ef:73:3c:62:58:5e:
         73:77:9f:98:15:d8:18:b5:93:c6:77:2e:45:4e:49:a4:ef:12:
         7d:df:1d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:44:14 2026 by rpki-client