Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AC3B8354833311F1BA84B12098A30FBC.roa
File:                     AC3B8354833311F1BA84B12098A30FBC.roa (raw, json)
Hash identifier:          FVQ3pAghyh2rGD9FK6qMqqJlCMEccv7vcVe2eoPLTVg=
Subject key identifier:   42:CB:F3:37:C3:FC:CA:9D:06:65:14:83:3F:BA:8D:31:B1:42:87:C7
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       11E3
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AC3B8354833311F1BA84B12098A30FBC.roa
Signing time:             Sun 19 Jul 2026 05:35:38 +0000
ROA not before:           Sun 19 Jul 2026 05:35:38 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     152631
IP address blocks:        2406:840:fecb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 19:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4579 (0x11e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: Jul 19 05:35:38 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a5c622a-9635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cd:d2:ab:f6:d2:01:b5:f9:3c:e5:51:0d:67:
                    79:86:4b:9a:18:cf:fd:4e:16:e2:9d:ab:98:28:f1:
                    65:d0:7b:18:0c:60:31:1a:6a:02:d7:1c:24:0e:5e:
                    09:c9:b0:11:10:e4:45:8e:f8:45:41:c9:a7:7d:23:
                    e6:f3:7a:d3:33:da:5a:f0:91:98:53:57:4b:17:89:
                    68:4a:3f:ab:5c:5b:2b:8e:94:e5:43:44:a2:d4:c1:
                    0e:3e:17:42:57:7a:5f:30:31:3d:6b:9a:78:9b:70:
                    20:85:0b:c2:56:36:8d:28:fc:91:d4:63:1a:15:a0:
                    74:d2:e8:2c:66:04:92:91:31:55:d9:0a:0e:81:fc:
                    b9:7f:ab:03:b8:d3:df:30:09:1f:24:31:5d:2f:64:
                    d6:cd:33:58:12:76:3c:61:7d:06:2e:89:e6:16:96:
                    0a:e6:de:67:97:3a:78:38:36:07:ba:14:19:1b:17:
                    2a:6f:fe:a7:be:4d:2e:99:75:82:df:a6:b2:24:b9:
                    1e:5d:b4:c3:b9:3a:28:1b:cc:e8:e5:26:64:d6:46:
                    50:4d:7a:62:2f:34:10:a5:38:1f:2f:49:02:94:c4:
                    b1:60:18:c0:30:8e:84:dc:88:b4:70:1f:99:54:3e:
                    e3:df:f4:12:e9:58:d3:4e:37:c4:f8:ef:71:6b:ef:
                    c6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CB:F3:37:C3:FC:CA:9D:06:65:14:83:3F:BA:8D:31:B1:42:87:C7
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/AC3B8354833311F1BA84B12098A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fecb::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:49:91:64:1d:55:ca:7b:40:51:7e:de:ac:61:48:bc:f6:a2:
         33:44:79:b4:02:db:11:81:6c:e4:f7:51:f7:e9:ef:fc:6a:93:
         bd:43:32:98:fa:47:db:ab:8c:6c:10:2f:9e:a9:2e:c0:a3:35:
         2e:9a:87:60:3e:a0:16:78:9b:41:42:7c:59:57:88:bc:4f:c7:
         d4:c1:6c:9c:6d:54:7c:3c:9a:71:df:fa:89:2a:81:27:fe:30:
         71:a2:be:7b:f1:32:d7:e8:e4:73:29:aa:d3:71:da:31:4e:96:
         d3:4d:bb:11:7c:c2:8b:f4:8e:8e:88:5f:1e:d1:ac:dc:b7:db:
         5e:04:3f:c1:36:e9:c4:9b:e6:27:e5:4b:80:d6:ff:6e:4c:ac:
         e9:3c:40:d1:29:5e:dd:60:9c:1b:2e:32:30:8a:99:e6:df:f4:
         eb:7b:83:9f:54:46:d5:72:21:01:be:c3:a8:d6:02:63:ac:a5:
         a0:a2:8e:fe:16:e5:7d:dc:fa:78:49:e6:a4:4c:94:82:64:ad:
         60:c3:0a:30:62:6d:5a:92:1a:68:50:87:08:0d:7d:0e:d2:1a:
         de:89:c4:67:a4:33:f9:c2:20:d5:40:69:11:bf:ca:73:77:4b:
         a5:fd:5f:eb:1b:0e:22:0b:03:c8:bb:f8:b4:15:12:99:cb:e8:
         4a:2a:1d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:27:12 2026 by rpki-client