Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E9C243B2CD6211EA809FAA19C4F9AE02.roa
File:                     E9C243B2CD6211EA809FAA19C4F9AE02.roa (raw, json)
Hash identifier:          /pvY6oHvPCipPVqIFtIjpc5gXvABlSlhHNbsh0k9p6M=
Subject key identifier:   D3:00:03:75:6E:F8:34:9E:E1:AF:DA:D3:82:46:82:61:57:67:8D:99
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       113B
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E9C243B2CD6211EA809FAA19C4F9AE02.roa
Signing time:             Fri 22 May 2026 20:24:57 +0000
ROA not before:           Fri 22 May 2026 20:24:57 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     140938
IP address blocks:        2406:840:fc00::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 06 Jun 2026 19:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4411 (0x113b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:24:57 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a10bb99-f410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1b:a7:e3:5f:e7:cd:91:5c:af:85:94:fa:17:
                    ce:8f:6f:23:1d:9e:65:a7:54:f7:d4:a1:08:57:1c:
                    0f:49:2c:75:89:38:69:5e:b1:8f:f2:a5:b4:b5:d9:
                    b5:e9:9a:61:e0:6e:e8:ba:99:59:fa:27:3c:df:97:
                    c3:91:56:92:e6:b4:0e:6e:d0:bf:d4:8b:74:ea:1f:
                    8b:f5:eb:7c:a2:c0:6c:e4:96:88:9c:b9:2f:02:38:
                    c7:88:b7:2e:bf:ba:be:2d:f7:bd:ee:a3:93:38:7f:
                    0b:a4:a7:d7:29:96:22:5a:6b:42:f2:10:53:a9:5b:
                    10:87:8f:20:b8:6a:b3:46:37:65:bb:42:b3:47:21:
                    e1:92:4f:41:c9:82:ac:c9:32:a9:55:21:7c:83:c3:
                    7d:1c:0d:6f:25:aa:38:09:f9:cb:3b:ff:19:70:47:
                    28:4f:39:d1:30:85:5b:2c:a0:94:90:19:3f:69:fd:
                    96:97:16:05:ce:a9:2f:d7:c9:5b:d9:dd:ea:e2:63:
                    30:80:0b:76:0a:86:65:59:40:60:8b:02:1c:d4:6b:
                    26:b3:6c:52:7a:f0:00:c1:12:33:ad:47:f5:61:0c:
                    c0:c5:75:e8:45:cc:8f:4f:17:27:f8:72:82:93:bd:
                    ac:d2:c0:dd:33:f0:7a:14:0b:81:1f:d6:db:55:90:
                    fa:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:00:03:75:6E:F8:34:9E:E1:AF:DA:D3:82:46:82:61:57:67:8D:99
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E9C243B2CD6211EA809FAA19C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fc00::/44

    Signature Algorithm: sha256WithRSAEncryption
         74:6b:d2:85:e4:c0:23:b9:13:86:77:69:15:60:40:cc:a0:a0:
         30:2c:74:fd:28:ad:71:4f:4c:07:62:07:3b:80:47:1f:be:33:
         1d:76:94:88:43:00:61:2c:f4:57:d4:e6:4c:67:3f:01:60:08:
         56:5c:c6:ab:50:11:20:20:de:55:ea:f7:54:a2:99:96:c0:e1:
         4d:c0:46:cc:df:e8:25:e0:24:62:cd:94:7e:f3:eb:07:3b:3d:
         84:cc:06:87:ab:80:59:9d:fc:60:33:93:7d:46:72:ee:c1:7a:
         9d:95:67:0e:8d:5f:ed:a4:26:ac:dc:03:65:6f:3b:5f:ca:b9:
         ad:a2:3c:cc:ff:18:17:3c:af:d0:41:71:8e:55:2c:a6:88:6d:
         8b:8a:2c:92:3d:c3:16:36:57:d5:50:37:3c:85:e4:05:da:b6:
         39:85:6e:97:9d:84:2f:46:37:d7:26:2a:6a:fd:f6:13:cd:83:
         3e:9d:2c:ba:04:22:75:90:18:15:da:a5:08:d3:9c:0b:08:3b:
         79:2a:73:80:38:d1:6f:54:a0:ab:e0:5c:15:10:c0:7f:c2:c6:
         35:13:14:eb:d9:a5:e0:3d:a7:eb:50:68:9a:b8:c0:ae:1b:61:
         9f:d6:8b:04:38:fc:24:49:4d:14:3e:5e:5e:6b:cd:eb:1b:95:
         79:10:d0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 10:10:25 2026 by rpki-client