Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/ADED81322BF311EF839F2253C4F9AE02.roa
File:                     ADED81322BF311EF839F2253C4F9AE02.roa (raw, json)
Hash identifier:          ihLUuv04WsxHxq1Ycyf3OJUukXx7NpiXPonr/DY5to8=
Subject key identifier:   88:55:20:68:6F:E5:0B:EB:61:84:BD:B8:28:F6:DA:CB:63:AD:21:10
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1138
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/ADED81322BF311EF839F2253C4F9AE02.roa
Signing time:             Fri 22 May 2026 20:24:51 +0000
ROA not before:           Fri 22 May 2026 20:24:51 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     139888
IP address blocks:        2406:840:fc80::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 02 Jun 2026 19:42:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4408 (0x1138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:24:51 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a10bb93-5755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:54:d5:2d:59:cf:f4:6a:a7:c4:0e:da:4a:07:
                    27:65:5c:e1:b0:d6:68:b7:c6:60:c4:63:fc:ed:bd:
                    21:f2:09:9a:01:ab:44:ec:f4:05:b7:b7:f3:48:7e:
                    c3:4e:fa:d8:70:45:a2:5a:20:59:68:13:a1:71:84:
                    08:df:d5:0d:e9:22:75:31:21:87:8c:2f:f7:2b:98:
                    1b:d0:3e:25:2c:49:c1:14:8c:cf:6d:b5:c2:13:db:
                    8c:70:15:7e:ab:84:d2:aa:df:ef:84:28:e4:05:db:
                    cc:f8:f9:d2:32:ec:48:0d:3b:89:0a:e8:43:80:a3:
                    30:9a:d5:9e:04:8a:86:61:39:fb:11:71:71:43:76:
                    f2:43:14:e4:a4:03:3c:d3:92:91:ec:40:63:94:d5:
                    8c:d5:9f:28:03:e2:65:20:6b:8e:ee:e2:aa:fd:e3:
                    89:3c:e0:42:49:15:60:36:b3:33:70:1c:de:d0:c1:
                    09:f9:15:47:6f:75:4a:89:fa:1a:7c:05:83:f7:b6:
                    a5:06:b5:0e:14:3c:21:f4:57:cf:8f:7f:c5:29:f3:
                    1a:6e:3a:fb:ab:85:81:cd:41:88:1e:d0:6d:d9:4a:
                    37:f8:4a:5f:5d:0e:a4:24:f7:2a:cc:49:29:1d:d1:
                    2a:d1:b2:d8:a8:e1:0c:01:a2:e3:bf:f4:35:04:e2:
                    2a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:55:20:68:6F:E5:0B:EB:61:84:BD:B8:28:F6:DA:CB:63:AD:21:10
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/ADED81322BF311EF839F2253C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fc80::/44

    Signature Algorithm: sha256WithRSAEncryption
         94:a8:1b:58:3f:2e:9f:20:08:cf:6f:d3:98:38:f5:33:09:6c:
         c8:2e:68:9c:35:ac:41:d3:56:c8:e7:47:fb:53:4c:45:39:89:
         23:70:89:b4:89:22:70:d0:9d:b2:3d:ea:42:bf:7e:c9:97:13:
         e4:3e:81:a5:0f:71:eb:89:53:b2:11:63:a8:35:8e:fd:00:1f:
         fe:15:90:b8:50:df:da:1a:36:da:b5:f9:96:37:4a:0e:ba:91:
         cc:b5:5c:51:d8:05:a2:37:a4:f7:a3:4d:bf:c9:f9:a3:55:61:
         3e:74:b3:81:6f:79:1c:b8:95:d0:f2:1a:d8:6f:40:6f:fd:77:
         8e:ad:4c:85:45:fd:e6:1e:0f:e4:d9:c0:b7:7e:a0:d4:f2:75:
         e8:6c:13:f8:09:c2:d5:38:a4:2a:0f:c9:c3:87:c3:f2:eb:af:
         1e:c7:89:98:19:ec:d4:d6:55:fb:39:7c:08:b3:bb:14:32:5c:
         5a:11:62:32:20:66:65:4b:40:b2:bd:b0:ef:f9:9b:03:19:bd:
         19:65:8f:1d:9c:3f:0b:12:f7:58:1e:2b:4d:09:fe:78:53:84:
         f0:ce:0b:64:94:85:b6:f4:cc:ed:fa:38:15:be:6e:c9:b6:34:
         2f:c2:de:93:1a:9c:a5:9a:d5:3f:f2:2a:18:44:aa:a3:c9:6c:
         56:0c:5b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 16:41:00 2026 by rpki-client