Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A8555C6A8D7E11F196D17ADC3511F970.roa
File:                     A8555C6A8D7E11F196D17ADC3511F970.roa (raw, json)
Hash identifier:          QC6o4SN6ycODLefaEwjfa2nd06hj/YY+rJTuFcaDr1w=
Subject key identifier:   6A:CF:88:03:E4:19:33:25:5A:35:DB:4F:E8:FD:AE:50:18:37:45:19
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1224
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A8555C6A8D7E11F196D17ADC3511F970.roa
Signing time:             Sat 01 Aug 2026 07:57:35 +0000
ROA not before:           Sat 01 Aug 2026 07:57:35 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     153331
IP address blocks:        2406:840:fea5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 19:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4644 (0x1224)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: Aug  1 07:57:35 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a6da6ef-fc0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:83:b6:26:83:7e:34:14:b0:2b:6c:70:e6:7d:
                    a3:c6:a3:13:ae:eb:f5:df:69:38:17:0d:28:99:15:
                    b1:e3:bf:c5:40:26:e6:10:71:f7:86:d3:70:a9:11:
                    5e:69:86:a3:99:b4:98:c3:e5:e2:e3:24:0b:62:ec:
                    49:1a:42:1f:aa:af:22:aa:ce:d5:38:c3:89:9a:9d:
                    62:eb:fb:4b:5f:19:d8:18:c6:f9:60:0e:12:6a:e9:
                    9e:68:9e:1b:c2:6e:72:1f:95:81:ae:a0:cd:80:52:
                    d4:79:43:d7:ba:b9:bd:4f:d6:c4:5f:c5:10:5e:46:
                    6d:f1:29:34:ea:6a:69:6e:2a:2a:84:8c:df:32:e0:
                    91:34:43:b8:40:7a:54:c4:05:98:63:9e:4d:c7:33:
                    7c:28:11:ef:8e:98:b9:ca:e0:c5:33:39:8f:ad:c8:
                    07:5b:e5:11:a7:fc:27:6f:33:40:cc:d8:11:11:be:
                    7a:68:e6:4a:35:fe:7a:48:f7:ec:b2:56:eb:45:e8:
                    96:eb:7b:96:26:54:70:0e:6c:f8:24:ae:9a:d3:b7:
                    d7:d8:f6:72:22:c9:62:ee:22:13:8c:6c:50:d0:5f:
                    0f:7a:f2:cb:3d:6e:43:98:4e:0e:9a:32:77:f0:5c:
                    96:fd:df:49:a6:95:aa:88:0d:65:ab:dc:8d:83:bf:
                    64:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CF:88:03:E4:19:33:25:5A:35:DB:4F:E8:FD:AE:50:18:37:45:19
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/A8555C6A8D7E11F196D17ADC3511F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fea5::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:01:3e:15:c4:b2:40:be:0d:4d:a0:30:39:c7:c0:6a:b0:f5:
         2d:09:e8:cb:6c:44:0c:95:3b:e0:c6:53:30:7f:9c:be:fe:08:
         a9:0b:0e:63:20:d6:71:31:83:05:43:da:bf:48:da:d8:c0:51:
         7e:22:44:1a:aa:f7:21:e0:24:19:f8:82:89:58:5c:be:af:5f:
         04:e0:e6:0f:b0:ee:05:51:10:68:b7:ad:d4:70:27:7e:58:6f:
         81:1a:49:19:56:8f:74:44:0c:5a:ae:03:f1:20:15:d9:76:b7:
         b9:ce:ae:a5:e5:64:33:75:de:8a:d0:b9:2c:3e:31:59:47:dc:
         20:15:a8:b5:18:70:93:41:78:46:60:67:b8:07:14:98:37:80:
         6b:70:0b:d0:b0:c6:f3:59:a7:8b:38:09:3a:78:1e:05:c2:c1:
         78:ff:36:8f:32:e3:ab:e7:36:54:d9:5b:34:c9:83:bf:c0:ec:
         35:4f:9e:73:d9:4d:6e:b1:c9:9b:f9:cc:90:a3:c4:f5:52:43:
         59:6a:86:fd:02:bd:3c:37:ce:d2:af:69:37:12:41:7f:f8:c1:
         3b:d5:09:bd:ca:35:b7:2f:bb:95:16:f2:52:7c:dc:be:cd:3d:
         83:be:f1:a4:f0:89:db:b5:24:cd:7e:e7:5e:51:b2:fd:58:23:
         62:ea:ae:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:46 2026 by rpki-client