Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/EC31F29ABEFC11EC82FBEC0AC4F9AE02.roa
File:                     EC31F29ABEFC11EC82FBEC0AC4F9AE02.roa (raw, json)
Hash identifier:          YAchrxsWT6tCXrhVPxxuFBPnuy9X8BSZLsZnCkm1+JI=
Subject key identifier:   A2:DD:A8:A9:B3:D0:1C:91:0B:23:C3:81:28:2E:E0:34:5B:AD:3B:0E
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1046
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/EC31F29ABEFC11EC82FBEC0AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:29:53 +0000
ROA not before:           Thu 22 May 2025 20:07:04 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     149475
IP address blocks:        2406:840:e666::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 17:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4166 (0x1046)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:07:04 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a493b1-a506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1e:4e:f9:b1:d8:a9:88:13:a3:35:14:70:3e:
                    95:ec:63:fa:9f:98:5d:cc:58:7f:eb:ed:4d:95:01:
                    ee:0b:c9:60:07:d7:ee:f7:e3:8a:a9:d2:1d:5f:9d:
                    df:f4:a4:a3:6a:66:1a:df:7b:11:8d:86:14:75:e0:
                    1c:a6:97:d5:2f:81:c9:71:70:8a:3a:32:01:15:19:
                    dc:02:17:12:df:b0:94:50:d4:19:5a:b8:7d:4f:e9:
                    fa:a9:9e:12:6c:b3:57:2c:c6:dc:ff:c3:3d:ab:ca:
                    91:c8:04:7c:94:ce:6e:bd:8f:ee:af:77:17:28:37:
                    1c:22:00:cd:22:63:ec:e2:02:7d:95:1f:a7:2d:01:
                    92:44:12:c0:93:b2:80:ca:6b:42:89:b7:f9:20:49:
                    88:3a:23:4f:2a:9a:4b:83:17:d5:88:ed:32:68:92:
                    6d:30:7e:6a:70:ac:42:fe:20:65:72:0b:4c:6f:5b:
                    2d:85:d4:79:8d:d5:7f:d6:36:f5:78:73:df:b2:93:
                    0b:02:af:30:5a:6c:f0:cf:db:9c:ee:ab:9b:bb:ea:
                    cc:38:66:c5:d9:ff:44:bc:d4:0f:38:38:c1:d8:71:
                    99:20:78:ec:5a:cd:11:de:5e:89:07:2b:28:12:bb:
                    60:c3:28:cb:12:ab:83:fa:12:dd:d7:87:cb:2f:3b:
                    aa:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DD:A8:A9:B3:D0:1C:91:0B:23:C3:81:28:2E:E0:34:5B:AD:3B:0E
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/EC31F29ABEFC11EC82FBEC0AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:e666::/47

    Signature Algorithm: sha256WithRSAEncryption
         23:f7:17:34:7c:d8:80:38:cf:cf:7f:28:93:8f:19:2f:9f:32:
         69:27:2c:ab:29:be:54:97:35:02:52:8f:fe:a2:cc:bc:0c:ce:
         7a:71:d2:db:be:a7:5a:57:cc:70:18:7d:ac:9f:3b:f1:56:4a:
         9b:16:00:9f:f6:f7:d3:3d:c9:5b:62:7e:9f:4e:26:62:fc:2e:
         66:bb:78:1b:52:2c:83:df:a8:75:01:6f:ea:aa:75:91:0c:bd:
         24:37:68:ae:bb:40:74:f3:4d:8f:99:33:e5:4b:b0:79:d4:62:
         81:7e:57:2f:74:7e:90:c5:2e:58:df:23:07:5b:32:bf:cb:82:
         98:ec:ab:4f:3a:10:b2:a2:0f:1b:12:97:4b:cc:c2:05:65:d9:
         dd:17:26:eb:f4:b9:81:cc:d2:6b:61:12:c1:d1:fb:d7:d4:bb:
         30:3f:8e:5f:38:68:67:0a:c1:91:55:19:d6:d0:cb:b7:4b:55:
         81:af:a1:8a:6c:a7:43:5a:d6:43:d0:8f:2f:7d:c6:45:69:96:
         70:fa:51:d4:f9:b2:8e:57:d9:38:7a:04:52:90:51:5f:43:de:
         5d:19:6f:f9:6c:b3:e2:0a:90:36:de:aa:03:5a:4d:02:a4:b4:
         7c:61:d6:60:40:4b:e2:82:7a:8d:c6:0e:fa:28:7e:22:22:62:
         4e:31:08:6e
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICEEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjUwNTIyMjAwNzA0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTNiMS1hNTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkB5O+bHYqYgTozUUcD6V7GP6n5hdzFh/6+1NlQHuC8lgB9fu9+OKqdIdX53f
9KSjamYa33sRjYYUdeAcppfVL4HJcXCKOjIBFRncAhcS37CUUNQZWrh9T+n6qZ4S
bLNXLMbc/8M9q8qRyAR8lM5uvY/ur3cXKDccIgDNImPs4gJ9lR+nLQGSRBLAk7KA
ymtCibf5IEmIOiNPKppLgxfViO0yaJJtMH5qcKxC/iBlcgtMb1sthdR5jdV/1jb1
eHPfspMLAq8wWmzwz9uc7qubu+rMOGbF2f9EvNQPODjB2HGZIHjsWs0R3l6JByso
ErtgwyjLEquD+hLd14fLLzuqvQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFKLdqKmz
0ByRCyPDgSgu4DRbrTsOMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvRUMzMUYyOUFC
RUZDMTFFQzgyRkJFQzBBQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcBJAYIQOZmMA0GCSqGSIb3DQEBCwUAA4IBAQAj9xc0fNiAOM/PfyiT
jxkvnzJpJyyrKb5UlzUCUo/+osy8DM56cdLbvqdaV8xwGH2snzvxVkqbFgCf9vfT
PclbYn6fTiZi/C5mu3gbUiyD36h1AW/qqnWRDL0kN2iuu0B0802PmTPlS7B51GKB
flcvdH6QxS5Y3yMHWzK/y4KY7KtPOhCyog8bEpdLzMIFZdndFybr9LmBzNJrYRLB
0fvX1LswP45fOGhnCsGRVRnW0Mu3S1WBr6GKbKdDWtZD0I8vfcZFaZZw+lHU+bKO
V9k4egRSkFFfQ95dGW/5bLPiCpA23qoDWk0CpLR8YdZgQEvignqNxg76KH4iImJO
MQhu
-----END CERTIFICATE-----
Generated at Sat Mar 7 02:23:46 2026 by rpki-client