Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/F0E6E6B4282511ED8C222B0BC4F9AE02.roa
File:                     F0E6E6B4282511ED8C222B0BC4F9AE02.roa (raw, json)
Hash identifier:          GnW7NsaTP5gQjfsjPs6jHuaJPQAXKVzrlocZVWVCPqY=
Subject key identifier:   35:79:27:C5:9D:56:90:1B:9A:E9:5B:B2:83:7F:C2:C3:B3:96:08:F4
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       114E
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/F0E6E6B4282511ED8C222B0BC4F9AE02.roa
Signing time:             Fri 22 May 2026 20:25:32 +0000
ROA not before:           Fri 22 May 2026 20:25:32 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     150184
IP address blocks:        2406:840:e300::/44 maxlen: 48
                          2406:840:fefd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Jun 2026 19:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4430 (0x114e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:25:32 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a10bbbc-7a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2c:9b:60:19:92:d8:f7:08:f6:d4:bb:18:50:
                    cb:de:79:cf:16:d8:d6:3d:5d:9b:4b:ed:08:29:97:
                    f3:f0:11:14:c6:b3:a8:6a:72:25:87:33:bb:b1:86:
                    78:03:98:04:68:c8:1f:37:f6:4b:91:49:25:7f:b9:
                    69:ab:de:67:67:3c:79:01:b3:c2:ed:f4:ba:6e:f9:
                    22:c2:22:f0:1c:f8:8d:54:54:15:0a:e2:57:6e:e5:
                    f3:65:09:5e:62:42:a8:ba:7c:96:2c:47:68:c4:d2:
                    52:df:3c:89:43:b9:5c:08:7c:52:fc:96:eb:12:20:
                    a4:66:bd:5b:e8:f0:ed:d8:14:d5:4f:65:e3:60:98:
                    50:76:65:db:e9:4b:13:f0:af:ea:69:28:34:c7:84:
                    84:2c:47:93:7a:5a:94:35:3d:fa:19:aa:76:e7:32:
                    ff:b7:b4:7b:f0:72:9d:60:51:ed:c4:6c:3a:1c:35:
                    52:53:b1:56:54:8b:00:5d:4d:bb:13:4f:71:eb:cd:
                    0d:e5:2f:19:ac:9a:ef:39:18:44:fb:08:52:fb:23:
                    14:97:76:00:75:94:e8:08:50:db:8e:fd:11:18:8c:
                    a5:7c:b8:12:87:fc:80:27:b5:e0:f0:95:6f:5e:d8:
                    59:95:0d:b8:a3:3c:6c:73:22:a1:79:aa:4d:10:66:
                    8a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:79:27:C5:9D:56:90:1B:9A:E9:5B:B2:83:7F:C2:C3:B3:96:08:F4
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/F0E6E6B4282511ED8C222B0BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:e300::/44
                  2406:840:fefd::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:22:92:2c:08:d1:13:7b:63:03:ac:83:4d:e8:8d:e5:0a:2b:
         26:06:bc:fe:f0:a2:3e:b4:84:3d:e8:06:8b:ff:d6:2b:e7:cf:
         62:ee:fa:fb:8d:b1:16:d7:84:80:a9:a0:cf:ca:fe:7b:5a:01:
         50:bb:8a:60:38:4f:66:0e:92:38:e2:b1:c6:60:ea:fc:e5:f0:
         e2:af:14:fa:11:39:94:db:cc:fc:e2:45:02:d5:82:46:a3:4b:
         8d:50:24:73:a5:d9:d6:81:0c:c5:d7:05:4c:26:b8:7a:82:13:
         08:d7:81:d9:92:dc:fb:ba:3b:d1:50:02:80:a9:4b:54:4f:e0:
         b8:c4:50:4c:70:87:51:27:67:23:07:2a:ba:81:6f:31:f2:9f:
         c7:a5:9c:5a:21:ee:e6:51:59:01:15:26:24:34:61:72:03:c3:
         07:6f:e4:b5:26:53:85:5c:a5:2b:c0:fa:69:e4:f7:43:46:42:
         a1:56:13:5a:bf:9f:9c:a1:ef:3d:da:1e:ad:c1:d6:b0:5f:13:
         38:a0:f1:8d:60:ef:e2:b3:c1:bb:19:22:d1:fb:27:7b:51:23:
         fe:61:5b:b4:40:8c:77:63:a7:0b:8b:48:70:db:69:cc:53:1d:
         de:d3:93:86:11:2d:c9:cb:9c:e6:3a:f4:c8:af:08:58:3d:c9:
         cf:55:b0:79
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICEU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjYwNTIyMjAyNTMyWhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTEwYmJiYy03YTZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsSybYBmS2PcI9tS7GFDL3nnPFtjWPV2bS+0IKZfz8BEUxrOoanIlhzO7sYZ4
A5gEaMgfN/ZLkUklf7lpq95nZzx5AbPC7fS6bvkiwiLwHPiNVFQVCuJXbuXzZQle
YkKounyWLEdoxNJS3zyJQ7lcCHxS/JbrEiCkZr1b6PDt2BTVT2XjYJhQdmXb6UsT
8K/qaSg0x4SELEeTelqUNT36Gap25zL/t7R78HKdYFHtxGw6HDVSU7FWVIsAXU27
E09x680N5S8ZrJrvORhE+whS+yMUl3YAdZToCFDbjv0RGIylfLgSh/yAJ7Xg8JVv
XthZlQ24ozxscyKheapNEGaKqQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFDV5J8Wd
VpAbmulbsoN/wsOzlgj0MB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvRjBFNkU2QjQy
ODI1MTFFRDhDMjIyQjBCQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAAjASAwcEJAYIQOMAAwcAJAYIQP79MA0GCSqGSIb3DQEBCwUAA4IBAQABIpIs
CNETe2MDrINN6I3lCismBrz+8KI+tIQ96AaL/9Yr589i7vr7jbEW14SAqaDPyv57
WgFQu4pgOE9mDpI44rHGYOr85fDirxT6ETmU28z84kUC1YJGo0uNUCRzpdnWgQzF
1wVMJrh6ghMI14HZktz7ujvRUAKAqUtUT+C4xFBMcIdRJ2cjByq6gW8x8p/HpZxa
Ie7mUVkBFSYkNGFyA8MHb+S1JlOFXKUrwPpp5PdDRkKhVhNav5+coe892h6twdaw
XxM4oPGNYO/is8G7GSLR+yd7USP+YVu0QIx3Y6cLi0hw22nMUx3e05OGES3Jy5zm
OvTIrwhYPcnPVbB5
-----END CERTIFICATE-----
Generated at Fri Jun 12 00:13:04 2026 by rpki-client