Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A2F186F48D7E11F196D17ADC3511F970.roa
File:                     A2F186F48D7E11F196D17ADC3511F970.roa (raw, json)
Hash identifier:          zbUvu/e8OzpHn7pKdo5ponmP9woQj2cFeW5b0Hhe5bk=
Subject key identifier:   09:B3:97:25:8A:E3:06:92:CE:36:1B:C6:34:00:E2:CA:94:9A:0F:06
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       121F
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A2F186F48D7E11F196D17ADC3511F970.roa
Signing time:             Sat 01 Aug 2026 07:57:27 +0000
ROA not before:           Sat 01 Aug 2026 07:57:27 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     153185
IP address blocks:        2406:840:fec2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 19:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4639 (0x121f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: Aug  1 07:57:27 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a6da6e7-de0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:65:42:8f:54:3d:7a:aa:1a:a9:0b:48:26:bb:
                    92:ed:be:32:75:f1:85:37:75:e9:4c:a2:7f:34:12:
                    aa:c5:43:b7:dc:f0:5d:f0:d4:99:62:1d:4b:3a:94:
                    e2:b9:26:62:0f:4b:e8:f0:08:8e:d2:ee:4a:b2:71:
                    f1:43:09:e3:5a:7d:05:f4:05:bd:2b:01:74:0e:01:
                    6c:97:86:7a:9f:14:2d:18:25:0c:63:14:70:5a:fd:
                    1a:46:89:8c:ab:ef:0a:90:4b:56:d9:fe:ba:38:e9:
                    58:90:6c:f7:3d:25:e0:5a:25:ab:d6:cf:ca:31:47:
                    30:73:df:08:6f:ed:37:89:f4:ac:49:e7:86:c8:6b:
                    25:ce:71:06:a1:cb:e0:1f:28:71:6d:f0:95:22:ff:
                    03:47:bd:ee:3d:1f:e5:c8:bc:3b:ea:94:ea:a6:80:
                    b8:a0:43:ad:90:8f:72:97:f4:9f:4a:3c:2c:56:a2:
                    b9:8b:3d:2b:93:a5:07:40:33:ad:22:82:41:f2:25:
                    cb:be:a3:3f:3f:3a:d7:00:30:4d:e9:3c:74:32:64:
                    1a:08:11:c0:67:e2:d0:02:65:65:65:89:4a:be:51:
                    8b:b3:99:e5:04:19:2c:5a:cf:40:62:b8:ec:68:98:
                    98:08:34:3b:0b:2a:fc:64:56:af:78:48:b9:a4:c7:
                    3e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B3:97:25:8A:E3:06:92:CE:36:1B:C6:34:00:E2:CA:94:9A:0F:06
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A2F186F48D7E11F196D17ADC3511F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fec2::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:f3:e0:e6:cb:f7:58:33:a0:5e:42:6d:42:27:86:c1:4f:1d:
         b7:2a:06:a5:8c:44:0a:c1:56:ce:5e:20:6c:1a:97:1e:b1:18:
         07:d2:79:f7:b6:8e:a7:01:3e:24:5e:cf:db:43:b2:5d:69:0a:
         12:e1:58:cc:4b:18:66:e8:4a:57:4c:6e:97:cc:1e:20:2f:00:
         fd:04:8c:0a:b1:5d:d9:3a:45:e3:b3:e0:32:69:e8:14:5b:41:
         b4:02:c2:27:54:9e:28:5a:ab:c0:15:0e:08:8f:c8:57:ad:c5:
         a1:a1:93:f6:cd:f3:12:f0:c7:12:f3:a7:46:5f:2c:9f:d3:a5:
         79:11:d8:78:d7:98:4e:ad:77:86:00:ce:63:df:96:5c:4d:b6:
         35:4c:1d:31:34:f7:7f:ab:9f:f2:6f:6a:b3:0b:11:9f:86:d7:
         3e:ea:1a:45:f4:03:34:da:d4:c5:a8:bb:90:88:1a:9a:43:dd:
         2f:0f:f1:11:73:3c:d2:61:c6:a3:c4:30:71:50:f2:d4:06:78:
         3b:fb:ef:fe:2e:e3:71:8a:10:67:36:0a:e2:c8:3a:a1:0e:f7:
         0a:5a:3e:16:d7:d6:4f:43:64:6b:69:f0:c7:e0:5e:e0:34:e9:
         b3:fc:68:4a:c2:66:83:03:3e:4a:f6:41:4d:9d:b0:76:da:3e:
         f1:ad:50:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:43:58 2026 by rpki-client