Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A639D3DE8D7E11F196D17ADC3511F970.roa
File:                     A639D3DE8D7E11F196D17ADC3511F970.roa (raw, json)
Hash identifier:          2JcMj2xUx7E8wgA8N79AxN7NtRQRHzHFlo2wLVFod28=
Subject key identifier:   7A:E9:7E:42:91:19:6A:AF:0B:BB:3E:D5:5E:FF:20:17:B8:A9:1C:2F
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1222
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A639D3DE8D7E11F196D17ADC3511F970.roa
Signing time:             Sat 01 Aug 2026 07:57:32 +0000
ROA not before:           Sat 01 Aug 2026 07:57:32 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     153189
IP address blocks:        2406:840:fef4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 19:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4642 (0x1222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: Aug  1 07:57:32 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a6da6ec-c244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a9:4a:19:64:61:0a:be:c0:fb:2e:c3:30:db:
                    97:97:4f:72:5e:95:45:54:69:9a:28:c7:d3:f5:d1:
                    66:03:c7:34:86:d6:90:99:23:7d:2e:c0:a9:d3:b7:
                    8e:0e:b0:0d:b9:60:4f:c7:1b:dc:71:8a:59:4b:fc:
                    be:a5:61:01:ce:c4:70:ed:f5:99:ae:c2:d4:46:95:
                    7f:6b:11:33:e8:08:8b:48:e7:bf:c5:58:6f:d4:c6:
                    f2:97:b9:06:71:95:40:a1:cc:c9:3b:0a:c0:67:a3:
                    ea:87:06:93:a2:fa:61:c5:76:4d:c4:93:13:d5:6d:
                    76:ad:f4:db:56:ad:a4:da:a0:62:99:2b:de:6f:a5:
                    61:2b:de:8e:10:42:ab:b6:4e:5e:1f:c5:cf:45:90:
                    da:24:3e:ee:a5:d8:ea:1b:38:38:dd:82:6b:b2:8c:
                    08:a6:f3:12:a2:76:12:9d:3d:44:b7:25:a8:ca:af:
                    6d:a8:89:7e:b4:d3:15:a2:b8:05:2e:22:21:33:bd:
                    e7:25:9f:b0:b5:21:16:21:bf:c1:e5:22:8b:f9:32:
                    33:25:12:5c:89:ac:80:85:a4:55:9d:6f:41:34:6c:
                    78:06:ab:e4:43:e4:6c:68:f5:59:ec:6d:67:b6:a6:
                    fe:8b:d9:1b:68:9a:99:00:b7:84:a5:61:fa:a5:a3:
                    f5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E9:7E:42:91:19:6A:AF:0B:BB:3E:D5:5E:FF:20:17:B8:A9:1C:2F
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A639D3DE8D7E11F196D17ADC3511F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fef4::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:0d:6a:c5:d7:b6:e4:84:dd:d7:a8:39:ed:69:c4:a4:94:5e:
         b1:3f:ca:44:7e:f0:cf:4d:ed:46:21:e1:e0:6d:a6:8b:2a:ae:
         9d:54:b0:75:bf:7c:eb:66:ac:22:66:fb:0b:cf:f4:99:9c:83:
         ef:7a:56:3b:5a:2f:d7:63:65:10:d8:0f:a0:7c:20:df:40:1f:
         f8:44:83:84:1f:25:e7:df:61:43:1f:9f:4f:89:89:59:f5:7e:
         21:c2:ab:07:20:da:98:06:59:09:49:a3:18:9d:7d:8d:18:14:
         ab:ae:99:26:d7:f7:47:8f:9c:64:36:0e:00:31:dc:b9:ec:55:
         ba:54:e1:66:47:3d:4c:03:a9:fc:ec:e2:d3:ef:44:12:56:cc:
         a1:a2:8b:b0:3c:b5:65:ad:5f:d9:43:ec:82:a2:04:7b:48:97:
         29:61:d6:f9:e9:9b:4f:76:f8:16:d5:60:a2:75:36:82:5e:48:
         4f:6f:1c:e5:79:23:1e:e2:88:b3:fc:ce:6e:35:aa:b3:62:5c:
         7b:6e:fd:b5:23:a3:3f:aa:e8:b8:ff:bd:2e:ab:3c:17:ad:82:
         4a:40:0d:96:ee:8d:80:54:24:0e:b8:cd:41:c2:df:42:bb:6d:
         c9:6d:e0:66:2b:32:19:4e:7b:fa:90:cb:5c:28:e1:c0:3e:89:
         40:ff:9a:a8
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICEiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjYwODAxMDc1NzMyWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZkYTZlYy1jMjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw6lKGWRhCr7A+y7DMNuXl09yXpVFVGmaKMfT9dFmA8c0htaQmSN9LsCp07eO
DrANuWBPxxvccYpZS/y+pWEBzsRw7fWZrsLURpV/axEz6AiLSOe/xVhv1Mbyl7kG
cZVAoczJOwrAZ6PqhwaTovphxXZNxJMT1W12rfTbVq2k2qBimSveb6VhK96OEEKr
tk5eH8XPRZDaJD7updjqGzg43YJrsowIpvMSonYSnT1EtyWoyq9tqIl+tNMVorgF
LiIhM73nJZ+wtSEWIb/B5SKL+TIzJRJciayAhaRVnW9BNGx4BqvkQ+RsaPVZ7G1n
tqb+i9kbaJqZALeEpWH6paP12wIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFHrpfkKR
GWqvC7s+1V7/IBe4qRwvMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvQTYzOUQzREU4
RDdFMTFGMTk2RDE3QURDMzUxMUY5NzAucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAYIQP70MA0GCSqGSIb3DQEBCwUAA4IBAQBjDWrF17bkhN3XqDnt
acSklF6xP8pEfvDPTe1GIeHgbaaLKq6dVLB1v3zrZqwiZvsLz/SZnIPvelY7Wi/X
Y2UQ2A+gfCDfQB/4RIOEHyXn32FDH59PiYlZ9X4hwqsHINqYBlkJSaMYnX2NGBSr
rpkm1/dHj5xkNg4AMdy57FW6VOFmRz1MA6n87OLT70QSVsyhoouwPLVlrV/ZQ+yC
ogR7SJcpYdb56ZtPdvgW1WCidTaCXkhPbxzleSMe4oiz/M5uNaqzYlx7bv21I6M/
qui4/70uqzwXrYJKQA2W7o2AVCQOuM1Bwt9Cu23JbeBmKzIZTnv6kMtcKOHAPolA
/5qo
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:46:16 2026 by rpki-client