Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/EADF1D0842CD11EFB80CD237C4F9AE02.roa
File:                     EADF1D0842CD11EFB80CD237C4F9AE02.roa (raw, json)
Hash identifier:          mcCD79OXDlZdGYj/f0DTnwuiQBOdeWJuubTR8PC0nqw=
Subject key identifier:   9D:1F:3B:4C:10:AD:2E:20:89:F1:55:B6:A8:2B:C8:D6:5E:A1:A3:75
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       106A
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/EADF1D0842CD11EFB80CD237C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:30:26 +0000
ROA not before:           Thu 22 May 2025 20:07:39 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153172
IP address blocks:        2406:840:fd80::/44 maxlen: 48
                          2406:840:fe9b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 17:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4202 (0x106a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:07:39 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a493d2-ddbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:23:46:2e:94:be:14:c6:55:c0:c7:c9:51:e8:
                    b9:cb:0d:21:7a:59:a6:9f:d4:62:71:5b:c0:6f:f9:
                    ac:93:b3:b3:c9:96:44:06:89:ce:28:6c:fe:6a:3d:
                    fa:cf:12:6f:dc:42:19:df:e9:ed:be:ac:77:dc:ef:
                    af:cf:cf:f9:27:a0:3b:fa:72:70:12:8e:32:35:eb:
                    c6:0a:aa:c3:f9:ef:68:a4:1b:ee:b0:e8:c2:1c:48:
                    5a:30:65:d3:0f:7e:40:e7:c8:42:46:4d:6b:40:7e:
                    42:5f:dd:00:2d:35:87:e8:f1:2d:84:8a:79:ca:b8:
                    bb:ac:f1:2e:e4:4a:92:b6:42:a7:cd:fc:ba:95:60:
                    a0:05:ba:1a:a6:cd:ab:74:21:13:90:8f:d5:29:89:
                    a7:98:f9:2b:b8:2e:b4:d8:d6:30:11:8e:47:31:5e:
                    e1:b1:b7:58:2b:5c:af:dd:66:7c:46:3a:54:6a:76:
                    05:4d:2d:94:f3:5d:e6:74:72:5f:db:ed:2b:b8:08:
                    ba:d6:af:f9:63:3c:2c:97:cf:36:b3:4b:82:1b:d0:
                    54:7e:9d:f9:f1:90:c1:96:f4:e9:67:e4:d5:f2:ff:
                    bc:ff:a0:be:21:7b:e0:6b:d1:cc:ab:62:29:64:1c:
                    a3:23:64:59:50:c5:90:a3:37:30:05:83:ff:3d:ee:
                    92:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1F:3B:4C:10:AD:2E:20:89:F1:55:B6:A8:2B:C8:D6:5E:A1:A3:75
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/EADF1D0842CD11EFB80CD237C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fd80::/44
                  2406:840:fe9b::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:d2:e6:cd:6a:62:e8:8b:d4:fb:47:2b:c7:9e:0c:53:92:49:
         c8:ee:34:54:15:e5:5e:b6:af:66:ff:60:cc:06:c6:94:43:45:
         c9:30:5b:81:57:71:d5:20:f6:04:bd:0d:f8:07:77:c6:57:f8:
         7b:50:20:df:46:92:e8:59:0b:88:de:f5:29:3f:8f:06:56:56:
         b7:e1:13:41:09:e2:77:71:24:05:0e:7b:2e:e9:cc:01:35:c8:
         f6:63:41:c2:4c:17:3d:8e:47:42:a8:e3:59:26:3a:f6:f1:c3:
         ec:3a:82:20:af:6c:33:90:9a:74:be:02:5d:5f:d7:d0:6d:81:
         1c:23:ab:84:8b:27:0d:3f:bb:a4:a3:7e:e0:ed:d6:93:fb:97:
         4a:e8:38:89:33:b5:e9:17:9a:a9:c6:6c:5d:21:49:ea:e4:48:
         c6:76:b6:12:cf:d2:11:da:34:84:1c:f4:08:73:b6:27:d2:d2:
         74:f5:70:c3:61:8b:15:53:0a:97:0d:74:37:4a:ab:52:45:84:
         a5:39:41:8d:e2:0a:c2:65:f1:cb:a6:71:9c:33:e5:70:b7:22:
         90:03:8a:f9:ce:8d:cd:47:99:28:39:42:75:da:6f:a2:9d:9e:
         a0:24:cc:f4:fe:50:a8:cf:df:7c:b3:65:8b:91:c9:3e:0f:f5:
         06:13:4f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 02:23:45 2026 by rpki-client