Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/EB6D8A161F4B11EFB166F834C4F9AE02.roa
File:                     EB6D8A161F4B11EFB166F834C4F9AE02.roa (raw, json)
Hash identifier:          IwfsWxTNt2dlfO9OqGrlY7Q4HSlOVQFVMMraBZPuphE=
Subject key identifier:   DA:2D:B9:2D:DE:D2:99:D6:89:FB:B3:0C:FF:4A:42:9F:D6:D3:48:0D
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       105E
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/EB6D8A161F4B11EFB166F834C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:30:15 +0000
ROA not before:           Thu 22 May 2025 20:07:29 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     152892
IP address blocks:        2406:840:e330::/44 maxlen: 48
                          2406:840:fe9d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 17:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4190 (0x105e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:07:29 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a493c7-5c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:04:a3:be:32:ca:45:f9:17:47:d3:ed:fc:9c:
                    56:da:bc:f8:c9:63:9d:1e:7d:a0:02:a2:85:81:81:
                    45:08:c6:be:3f:e5:c6:e6:2a:e5:5c:cd:d8:a5:fa:
                    d8:bd:81:1d:aa:b5:9f:35:5c:bf:50:7e:f6:c8:2b:
                    bd:fe:cb:0f:1a:b7:25:d5:ef:5a:f5:88:4c:28:2d:
                    4d:d7:00:84:a3:29:81:80:a2:c8:a3:f3:b9:f0:2e:
                    b1:9a:03:46:e6:b7:76:b9:90:ca:81:5a:77:ff:84:
                    9a:c6:bf:de:63:c8:85:03:fa:de:81:17:92:ec:68:
                    b3:8a:36:34:91:4a:b0:65:5b:de:f1:ac:cd:a1:77:
                    de:af:98:fe:5f:2e:95:4b:64:37:2b:70:02:a3:c7:
                    5d:11:bc:59:2d:d8:cf:bf:be:31:00:30:ca:3e:e9:
                    b8:94:ce:43:e1:ca:1b:6a:f5:3b:ac:01:dc:f4:c6:
                    61:0a:67:7a:3d:38:a1:c2:9b:18:b1:8e:ca:d0:0c:
                    67:a5:a2:b8:94:7a:29:2c:42:4b:b7:12:03:c9:b0:
                    37:c4:51:15:a6:c8:c5:55:70:98:37:ac:f3:6c:3e:
                    2e:72:a6:89:1d:2d:f5:25:be:75:ea:cb:7c:71:85:
                    9c:5d:70:11:82:f3:0a:48:18:37:2a:12:1a:aa:ab:
                    c7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2D:B9:2D:DE:D2:99:D6:89:FB:B3:0C:FF:4A:42:9F:D6:D3:48:0D
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/EB6D8A161F4B11EFB166F834C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:e330::/44
                  2406:840:fe9d::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:17:e1:3d:75:0a:96:6b:71:3d:e0:af:b3:33:3e:6f:42:c7:
         fb:77:5f:8c:0c:b4:a7:02:0c:c4:74:b4:f6:98:79:fc:83:a6:
         56:1e:0f:3b:b4:cc:2f:37:d5:72:5e:5b:22:4c:4c:39:f7:c0:
         65:9e:58:b6:1d:fd:ef:7d:e9:58:6e:7b:b4:77:76:54:38:5f:
         81:b9:1d:b3:02:86:97:fa:c5:6a:d7:25:a3:74:da:22:65:54:
         62:f2:3d:63:c4:46:ec:de:82:ab:4f:f1:29:8f:2f:d3:58:84:
         92:c1:ee:0c:b3:15:1f:ba:ca:89:f1:29:91:a6:2d:0d:30:02:
         12:c1:45:ab:44:3f:72:00:cc:8c:fb:87:62:52:05:b2:2c:ee:
         f6:81:c3:0a:64:39:df:b4:e7:d9:71:f7:d6:14:d4:82:80:97:
         13:76:37:75:4d:fb:2d:cb:eb:10:a9:e6:db:4d:0f:ba:a0:fb:
         58:a9:14:1d:3c:21:7b:71:be:45:cf:7f:56:58:dc:98:a1:45:
         f8:d5:90:bd:08:b8:2f:5a:c3:77:d7:e5:36:15:ed:c2:97:9b:
         54:15:12:69:f5:31:7b:9b:2a:4d:0a:2d:e6:a1:05:94:09:f5:
         5b:4b:0b:e5:d5:fc:de:6b:27:ef:e4:2b:06:f6:f3:e4:da:ec:
         db:ed:a7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 02:24:43 2026 by rpki-client