Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AA7C6DF8833311F1BA84B12098A30FBC.roa
File:                     AA7C6DF8833311F1BA84B12098A30FBC.roa (raw, json)
Hash identifier:          8lP+TZ9FS4GtO5vo4/mzi6gI1vYUV7BZ6fAs8RIPHHA=
Subject key identifier:   91:72:B1:3A:BC:74:64:31:0F:0E:EC:87:8C:EF:D0:07:7F:9F:CE:66
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       11E2
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AA7C6DF8833311F1BA84B12098A30FBC.roa
Signing time:             Sun 19 Jul 2026 05:35:35 +0000
ROA not before:           Sun 19 Jul 2026 05:35:35 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     151814
IP address blocks:        2406:840:fec0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 19:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4578 (0x11e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: Jul 19 05:35:35 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a5c6227-a581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:a6:13:7d:96:af:07:3e:9a:6b:cb:06:51:
                    ed:63:c1:b4:ce:5d:c1:2c:39:c1:0a:f3:25:04:15:
                    a8:30:d9:0f:16:9c:1c:2a:71:26:6c:6f:50:b0:71:
                    f7:9e:76:b1:2d:1a:53:36:2a:7c:6f:0b:41:12:25:
                    36:3d:be:1c:8e:7d:1b:7f:2d:c2:88:dc:5b:ec:41:
                    2e:e1:13:0c:bc:ec:9d:15:57:90:e7:98:4b:e9:9f:
                    c8:fb:27:1c:3f:79:35:0c:14:bc:e7:7e:b8:46:c2:
                    2b:8b:ca:98:a5:4c:49:b4:20:78:ef:93:e5:3a:60:
                    58:db:6f:56:0c:ce:e1:e7:c9:1f:27:18:72:0b:98:
                    54:45:d2:06:81:5f:69:af:b1:ed:8b:1b:ee:61:87:
                    05:55:26:5a:a7:e9:54:9c:31:d2:e3:3e:35:87:61:
                    8c:6f:05:b5:f2:f3:aa:95:58:c9:6d:8f:ca:c8:9c:
                    94:96:e6:96:ce:ac:30:64:e6:44:82:6e:6f:4d:1b:
                    0a:09:4f:e6:aa:8c:29:8b:5f:2a:2a:4c:19:2c:b6:
                    44:16:47:6d:14:50:45:2e:ff:70:8e:f2:42:98:df:
                    71:85:5c:3d:73:5b:02:30:d6:fa:39:79:27:08:3b:
                    9c:9b:3d:dd:8e:64:d0:08:6f:03:1d:35:71:37:0f:
                    38:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:72:B1:3A:BC:74:64:31:0F:0E:EC:87:8C:EF:D0:07:7F:9F:CE:66
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AA7C6DF8833311F1BA84B12098A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:25:e5:99:ba:a2:b7:52:e2:6e:9d:08:db:5a:0a:d6:a4:de:
         89:b0:3c:55:98:af:97:20:16:64:34:5d:ab:84:71:48:b1:c3:
         46:3f:73:bb:8a:a5:7f:77:49:83:05:55:dd:ad:c9:f7:48:b5:
         e8:9a:b8:1a:db:d5:98:a8:f6:02:29:e7:15:24:5d:11:09:5b:
         46:88:85:b5:78:2f:3b:2f:1a:1a:13:fb:48:90:36:f7:04:ef:
         59:8b:a9:5e:d6:37:d1:20:0f:4f:3d:df:d1:43:f1:fc:22:01:
         71:45:44:91:14:8e:2d:bd:aa:5a:de:da:4b:5c:3a:1b:b0:a6:
         0c:3b:21:fd:f3:c3:a5:27:59:6a:de:21:51:e4:20:be:e8:e9:
         36:c2:ee:d1:83:b2:33:98:b5:1c:3f:16:32:09:85:dd:78:47:
         1d:6b:19:f1:d5:a8:7e:12:1a:26:7d:47:c8:cd:13:6f:e4:0e:
         4c:a2:cc:60:63:3e:3c:32:11:4e:1b:b2:7f:53:60:52:2a:c3:
         95:6a:59:c9:1f:18:44:4d:e4:4d:8d:71:10:7c:be:b9:2d:4b:
         83:2e:85:fa:a3:02:09:16:1d:1d:d5:3b:32:c0:f6:93:2f:07:
         0d:dc:cf:38:30:91:00:46:38:84:3c:8e:e1:73:05:6e:a5:d4:
         af:97:1e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:27:13 2026 by rpki-client