Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A0C2AE948D7E11F196D17ADC3511F970.roa
File:                     A0C2AE948D7E11F196D17ADC3511F970.roa (raw, json)
Hash identifier:          2Jb563JEFZ9E/KdiwQDjNHEYbN7w3o451n29S1ILF7Y=
Subject key identifier:   D4:22:50:68:BC:8C:3B:6D:DB:3C:DB:43:E5:00:6A:93:85:F9:92:6A
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       121D
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A0C2AE948D7E11F196D17ADC3511F970.roa
Signing time:             Sat 01 Aug 2026 07:57:23 +0000
ROA not before:           Sat 01 Aug 2026 07:57:23 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     153171
IP address blocks:        2406:840:fe99::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 19:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4637 (0x121d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: Aug  1 07:57:23 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a6da6e3-9441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:81:18:68:65:76:75:2e:a3:fc:2f:dd:fa:88:
                    7a:71:e7:0e:b8:6e:0c:ae:b1:5f:8c:ee:7e:1f:82:
                    5c:83:49:ae:59:80:2a:8d:b0:b0:fd:5f:dd:14:ad:
                    64:4e:a7:76:82:a5:8e:88:5e:ef:4c:44:30:a0:36:
                    f6:00:5a:31:77:91:9b:74:3c:fb:c7:55:1e:6f:d8:
                    7d:4c:f7:f5:b4:d6:44:c8:6e:95:c7:b9:8f:9a:68:
                    9f:e1:37:fb:5e:69:c9:d8:f4:2e:76:b8:48:b5:dc:
                    ee:be:ee:a3:ac:c4:c0:2d:cb:25:27:7a:20:93:2e:
                    2c:22:ef:29:be:41:d4:7c:c5:20:97:25:e9:4e:c0:
                    11:70:27:10:6a:50:08:e8:02:67:39:57:35:1b:1b:
                    c6:1f:17:70:b1:79:b5:10:0d:bc:8e:67:a4:f8:b9:
                    e7:57:38:49:6e:a6:ce:eb:37:57:29:4d:5f:78:c8:
                    d8:f0:ae:55:16:23:04:3f:9b:fa:49:f8:2c:23:02:
                    ae:15:bc:f7:4c:f1:da:0f:88:c9:bf:ab:78:2b:a1:
                    9f:8d:28:02:b6:2a:c8:68:3b:f3:8e:32:bd:ef:f9:
                    45:12:7a:90:31:40:cb:8a:ce:3e:47:8a:d0:48:bc:
                    5c:73:f0:7c:a5:ae:82:72:25:df:30:6f:0f:dc:e4:
                    39:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:22:50:68:BC:8C:3B:6D:DB:3C:DB:43:E5:00:6A:93:85:F9:92:6A
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A0C2AE948D7E11F196D17ADC3511F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fe99::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:64:61:5b:8c:f5:a1:a3:47:46:1e:5a:af:57:97:f6:af:53:
         e2:69:bb:55:e1:e0:7f:5f:e4:59:c5:43:71:ae:31:90:84:46:
         d4:02:a4:fd:38:ec:36:76:da:d5:8c:8d:da:b6:aa:aa:2e:24:
         8e:01:b3:08:a0:d2:10:83:1c:c5:24:d9:bf:2b:23:aa:74:01:
         f7:ad:1f:cb:f1:d3:cb:3a:89:1c:e2:82:f0:d4:54:cb:32:dc:
         5b:83:e4:56:62:01:9e:48:35:5b:2b:e8:03:c0:00:38:35:94:
         78:be:36:20:73:7c:5f:e8:1e:dd:f2:dc:5a:03:c2:25:76:3b:
         ef:75:c7:d8:5d:fa:8c:08:70:50:e4:9b:11:be:56:58:64:26:
         89:99:4f:79:7e:44:4d:96:3b:c1:d3:25:f3:43:65:1d:d6:6d:
         67:99:ec:66:18:d5:0d:cf:98:9c:bf:65:7f:9e:19:bd:f0:e6:
         13:bd:62:2b:a4:49:51:79:97:50:d0:eb:91:55:6d:43:d3:4e:
         3c:1d:36:7a:82:6c:41:5d:fa:87:37:b8:12:82:41:ae:06:d0:
         e6:a3:cc:7d:89:bc:ee:71:ad:05:f6:00:60:31:af:5d:67:32:
         f3:b6:69:b6:af:91:40:e9:d4:3e:66:a0:ee:d3:48:73:05:7a:
         2c:e0:d7:c2
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICEh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjYwODAxMDc1NzIzWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZkYTZlMy05NDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoYEYaGV2dS6j/C/d+oh6cecOuG4MrrFfjO5+H4Jcg0muWYAqjbCw/V/dFK1k
Tqd2gqWOiF7vTEQwoDb2AFoxd5GbdDz7x1Ueb9h9TPf1tNZEyG6Vx7mPmmif4Tf7
XmnJ2PQudrhItdzuvu6jrMTALcslJ3ogky4sIu8pvkHUfMUglyXpTsARcCcQalAI
6AJnOVc1GxvGHxdwsXm1EA28jmek+LnnVzhJbqbO6zdXKU1feMjY8K5VFiMEP5v6
SfgsIwKuFbz3TPHaD4jJv6t4K6GfjSgCtirIaDvzjjK97/lFEnqQMUDLis4+R4rQ
SLxcc/B8pa6CciXfMG8P3OQ5TwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFNQiUGi8
jDtt2zzbQ+UAapOF+ZJqMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvQTBDMkFFOTQ4
RDdFMTFGMTk2RDE3QURDMzUxMUY5NzAucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAYIQP6ZMA0GCSqGSIb3DQEBCwUAA4IBAQCPZGFbjPWho0dGHlqv
V5f2r1PiabtV4eB/X+RZxUNxrjGQhEbUAqT9OOw2dtrVjI3atqqqLiSOAbMIoNIQ
gxzFJNm/KyOqdAH3rR/L8dPLOokc4oLw1FTLMtxbg+RWYgGeSDVbK+gDwAA4NZR4
vjYgc3xf6B7d8txaA8IldjvvdcfYXfqMCHBQ5JsRvlZYZCaJmU95fkRNljvB0yXz
Q2Ud1m1nmexmGNUNz5icv2V/nhm98OYTvWIrpElReZdQ0OuRVW1D0048HTZ6gmxB
XfqHN7gSgkGuBtDmo8x9ibzuca0F9gBgMa9dZzLztmm2r5FA6dQ+ZqDu00hzBXos
4NfC
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:44:10 2026 by rpki-client