Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E884E4DE42CD11EFB80CD237C4F9AE02.roa
File:                     E884E4DE42CD11EFB80CD237C4F9AE02.roa (raw, json)
Hash identifier:          Bqb/Pk4B7GkTl0M694b1+tK4rPRHnbHiJSIXL7oCac0=
Subject key identifier:   DF:A8:8D:77:96:5D:39:30:88:DB:17:42:0B:20:33:F4:20:6F:AF:12
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1067
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E884E4DE42CD11EFB80CD237C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:30:24 +0000
ROA not before:           Thu 22 May 2025 20:07:37 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153168
IP address blocks:        2406:840:fd50::/44 maxlen: 48
                          2406:840:fe9a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 17:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4199 (0x1067)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:07:37 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a493cf-61cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a7:70:af:29:9c:3e:88:60:6d:e9:a2:af:58:
                    cf:ff:2b:c4:e5:3b:ba:31:29:e6:9c:7d:98:4d:eb:
                    07:f7:ca:a6:d9:35:88:04:2e:87:9a:e8:b8:9d:4b:
                    da:28:bc:c5:1a:d6:f8:ec:bc:ae:16:ed:e0:fa:73:
                    81:97:15:52:9b:2d:d1:f4:c5:53:6a:a1:f1:36:23:
                    c7:be:cf:46:77:79:99:8d:58:24:2f:b7:9e:07:41:
                    29:89:b4:55:8a:b7:36:42:7a:88:7d:a3:43:70:09:
                    ea:ac:45:77:dc:93:90:78:60:dc:3b:6f:0b:75:f2:
                    8e:46:76:aa:b9:75:0f:38:d0:ba:c1:5c:f3:8c:4f:
                    05:38:04:5e:3e:d0:17:98:ea:88:3a:c5:75:d4:39:
                    8d:06:2b:4d:eb:7a:5d:f6:38:03:e5:b8:40:f6:5e:
                    3b:c7:65:3a:c3:04:c6:0d:3b:00:f7:60:69:3f:34:
                    6f:b7:17:f8:f4:5f:ae:40:b5:0b:29:d3:25:17:48:
                    22:cd:1d:b9:2c:b8:cb:63:45:73:fd:d3:85:7b:20:
                    73:e4:b8:66:da:0b:36:96:ea:d5:7a:5e:c9:93:24:
                    d2:54:48:21:9f:ea:bf:1f:fb:71:c9:b1:fe:74:53:
                    d3:04:f3:28:6b:77:57:c0:8a:1c:3d:6b:ea:a3:32:
                    17:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A8:8D:77:96:5D:39:30:88:DB:17:42:0B:20:33:F4:20:6F:AF:12
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E884E4DE42CD11EFB80CD237C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fd50::/44
                  2406:840:fe9a::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:b3:92:a7:46:f1:b6:ba:28:c0:fe:0b:73:30:c6:61:13:c6:
         62:05:3a:29:9e:59:b3:9c:2d:c0:73:44:dd:77:ff:34:21:03:
         d2:e2:6a:b0:3a:1f:91:d8:be:54:42:b1:f0:d1:ca:a4:7e:d3:
         65:29:93:f6:0d:2d:f5:af:e8:77:3d:6e:d0:35:a7:6c:4c:f4:
         49:34:aa:9a:47:ee:a9:00:41:c4:2d:08:c3:26:ea:25:fe:89:
         90:91:88:7e:2a:ab:12:ae:a2:cb:22:13:b1:a3:35:02:9d:ad:
         23:0a:82:22:f9:0d:c3:0d:23:2b:2c:50:a7:c9:6a:9b:cb:7a:
         0e:ed:c2:0b:47:6b:93:56:cc:06:ed:c9:61:42:f9:cf:08:96:
         8c:5d:64:f7:49:a5:09:58:3b:11:ec:ef:b7:47:f8:66:c7:ff:
         34:30:c7:d4:85:8f:b4:f4:11:ca:d1:aa:af:65:76:0a:d2:88:
         25:fa:6f:ae:3f:4a:d2:ce:2e:df:f4:af:6c:39:8b:78:25:65:
         77:eb:0f:11:48:79:7a:ed:da:8c:0a:80:03:4c:7a:c5:a8:66:
         fa:c2:48:36:89:a4:06:88:ff:44:25:6c:f3:1a:3b:13:58:91:
         7e:58:f4:29:83:90:52:c7:45:67:9a:09:88:65:32:66:f4:69:
         7b:89:a1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 02:26:56 2026 by rpki-client