Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E884E4DE42CD11EFB80CD237C4F9AE02.roa
File:                     E884E4DE42CD11EFB80CD237C4F9AE02.roa (raw, json)
Hash identifier:          radaWHY8W+KCZv5iuPVvuk4Sx8fAV+ooYjaGVRQV7hE=
Subject key identifier:   C2:C6:F3:BC:01:21:47:4B:50:7F:51:32:F9:A8:51:99:0B:A0:C3:8B
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1169
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E884E4DE42CD11EFB80CD237C4F9AE02.roa
Signing time:             Fri 22 May 2026 20:26:23 +0000
ROA not before:           Fri 22 May 2026 20:26:23 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     153168
IP address blocks:        2406:840:fd50::/44 maxlen: 48
                          2406:840:fe9a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 19:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4457 (0x1169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:26:23 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a10bbef-f71f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a5:ea:e1:d3:80:4c:fe:22:fb:79:18:c7:74:
                    5d:7d:44:73:57:15:45:03:cd:c3:35:2d:ed:fe:8c:
                    e2:11:0f:d9:6c:38:bc:bd:85:c6:31:d6:db:f5:38:
                    d6:e2:ca:1a:9c:8f:33:14:19:37:fc:4b:49:f1:c0:
                    92:3e:bd:0f:d0:f2:f9:a1:0e:b7:6b:80:b7:b5:bc:
                    79:44:7a:72:fd:76:0c:a7:c1:90:80:fc:1b:73:05:
                    eb:7f:0a:d6:85:ff:17:dc:da:f9:4b:2d:e2:84:05:
                    61:9c:76:75:89:e9:76:87:6e:a5:61:fa:4d:bf:e4:
                    e3:0a:23:ef:88:e3:0b:cf:67:86:48:2e:3b:ad:23:
                    e0:09:ef:56:8a:3f:ed:e6:e0:aa:be:5f:5e:a7:ad:
                    3d:52:5d:91:46:b9:3f:4f:62:b5:6d:e1:c9:09:07:
                    17:c3:bd:55:4b:40:47:7a:64:40:a0:72:c0:81:56:
                    4a:01:38:07:90:5a:82:9d:33:0e:dc:08:e1:2a:56:
                    03:33:44:10:9b:11:87:9a:9c:99:d5:53:f6:27:27:
                    b6:63:32:54:ae:fa:2e:cf:d9:7e:23:48:e0:d0:25:
                    e3:39:26:bb:7f:59:1d:a2:95:32:fe:fd:b6:7c:39:
                    b0:b1:c6:a9:66:a5:4d:cc:ee:2b:f8:27:57:46:fd:
                    f5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C6:F3:BC:01:21:47:4B:50:7F:51:32:F9:A8:51:99:0B:A0:C3:8B
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E884E4DE42CD11EFB80CD237C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fd50::/44
                  2406:840:fe9a::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:75:f0:28:95:7e:da:ce:a1:0e:20:d5:30:aa:e4:f1:00:66:
         78:5d:96:46:4d:f5:92:c1:40:94:d5:83:32:3f:70:40:24:41:
         f0:4b:6d:8b:f4:85:9e:56:de:3c:0f:99:3e:fa:c3:fe:fe:e3:
         4d:5e:fb:4a:66:58:ca:1b:78:d3:26:eb:14:df:b8:73:8a:c1:
         1d:00:31:f3:0c:fb:95:aa:b7:87:24:1b:60:90:56:81:52:7b:
         58:56:24:f2:62:86:ab:83:63:40:46:1e:90:3b:f7:96:66:3c:
         71:8c:05:10:b0:1e:af:d6:f7:2e:b9:f8:a9:b7:12:9f:71:10:
         99:40:37:db:a4:11:39:93:5f:a3:63:b6:6a:22:08:e4:c5:76:
         09:77:35:bc:0a:62:61:d0:01:27:bc:6d:4a:b0:7f:04:18:ee:
         92:f9:2d:ce:19:5a:3c:6b:be:a8:c9:4b:d6:8d:b1:69:2b:19:
         62:42:ee:76:16:c1:3d:2c:e3:fb:a4:62:22:eb:bb:ef:c2:7d:
         b0:a2:ec:77:95:dd:75:8b:f3:3d:8d:3c:28:3d:e6:74:d4:d7:
         5c:79:98:00:51:3c:81:08:a1:17:6b:d2:bf:e9:1a:ce:b9:1f:
         fc:8f:df:11:ca:02:ef:17:46:f1:ec:40:ec:c2:d0:84:00:18:
         6c:e9:e8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:39:24 2026 by rpki-client