Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/CFC56F10466711EBB87A5683C4F9AE02.roa
File:                     CFC56F10466711EBB87A5683C4F9AE02.roa (raw, json)
Hash identifier:          RT3HTdBo/MOp87/B14/JOth2KiafxLJ1utOpy7NCaIM=
Subject key identifier:   A7:00:B3:0C:15:95:2C:D7:0A:2A:83:EE:91:66:D4:67:BC:08:A5:EB
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1023
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/CFC56F10466711EBB87A5683C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:29:24 +0000
ROA not before:           Thu 22 May 2025 20:06:31 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     134477
IP address blocks:        2406:840:e100::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 17:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4131 (0x1023)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:06:31 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a49393-d24d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d8:ef:3d:84:53:55:92:ac:4b:db:bd:24:ac:
                    a2:0c:65:e6:10:93:3e:7c:8e:89:55:d4:b0:44:ce:
                    39:32:16:d2:3f:3a:92:1d:71:a1:75:6a:12:8f:3b:
                    4e:d0:07:eb:ba:c9:fe:a8:95:e2:57:0e:a1:c8:04:
                    6d:d4:23:20:52:5f:68:db:71:3e:9f:a1:1e:94:bc:
                    cc:cf:3b:94:22:d1:14:b2:f6:ec:ab:54:44:0f:0d:
                    a2:e3:2b:02:39:49:a1:8f:e3:e4:06:3f:ac:d5:2f:
                    22:26:47:07:bb:e4:7a:bc:59:79:32:e0:81:3a:20:
                    1a:59:46:e6:67:dc:64:23:6f:53:fa:17:4e:39:28:
                    f4:7b:e4:e1:7c:ae:3f:b2:ae:90:45:43:1b:0b:df:
                    8b:85:bb:01:5f:f6:1d:46:f3:ec:66:42:43:0c:e8:
                    9f:a5:3e:e6:8e:2b:5a:ed:7e:f3:26:c6:45:b7:bd:
                    b5:22:42:30:e0:5a:75:3b:4f:fc:70:41:95:01:d7:
                    d0:f1:e8:33:f7:47:f6:3f:99:9b:97:43:6b:ee:6e:
                    a2:85:bf:bc:ad:82:5f:db:b2:09:17:9a:6b:5b:57:
                    d6:52:96:6a:4e:e0:e5:ee:70:98:29:04:a4:30:00:
                    2b:87:7b:c8:fa:a6:d9:b6:3f:ae:20:5d:fc:5b:3c:
                    e6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:00:B3:0C:15:95:2C:D7:0A:2A:83:EE:91:66:D4:67:BC:08:A5:EB
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/CFC56F10466711EBB87A5683C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:e100::/44

    Signature Algorithm: sha256WithRSAEncryption
         7e:73:09:e7:fa:be:41:e7:eb:b2:e4:11:5b:11:3f:bb:a9:0f:
         0a:53:14:6e:41:f1:23:e1:26:e6:31:ef:0b:6b:c3:e1:27:8e:
         b2:88:32:ce:37:e4:1b:93:be:91:a0:56:fa:29:ac:4e:89:06:
         49:76:cd:fd:f5:dd:bd:61:5c:ee:46:09:ed:b2:32:82:42:0c:
         d5:d6:9a:be:b5:90:6e:c1:7e:13:a7:c0:0e:f8:0c:ca:a0:e9:
         55:42:32:28:7c:8a:ea:b2:51:1a:3d:cd:e2:e7:18:2f:a8:dc:
         13:2f:6c:16:26:2e:af:17:78:e0:3a:e9:99:28:eb:ce:6c:11:
         8a:bc:b1:50:47:f5:0f:0f:7d:ca:ac:c1:db:ba:c2:1a:74:bc:
         3a:25:33:24:ed:1b:97:51:f6:f4:9a:ef:b0:bd:28:e0:22:f6:
         ba:5f:7c:8f:9b:ac:a1:82:42:6d:74:21:58:f2:b2:fe:61:e4:
         07:6d:0d:a3:19:5b:a8:1a:90:d4:f5:0f:bc:78:55:87:87:3c:
         9e:d7:2c:32:43:79:ea:73:a1:5d:e8:7a:7f:26:f4:b9:d1:3b:
         c0:f5:69:b9:f4:e4:aa:05:ee:bd:78:5f:3e:1d:df:a2:34:4e:
         f7:03:44:a0:9d:78:73:09:46:fc:04:62:49:7f:dd:fb:43:fa:
         28:76:79:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 02:26:56 2026 by rpki-client