Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/F0E6E6B4282511ED8C222B0BC4F9AE02.roa
File:                     F0E6E6B4282511ED8C222B0BC4F9AE02.roa (raw, json)
Hash identifier:          hW6pMC/xw2suo/JZa1zRTMDxWX4OYDuY2Ds9Po5lF/4=
Subject key identifier:   5A:94:43:D2:B2:06:5D:EC:81:CA:B1:A2:96:35:AD:24:56:D5:4B:1A
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       104A
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/F0E6E6B4282511ED8C222B0BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:29:57 +0000
ROA not before:           Thu 22 May 2025 20:07:09 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     150184
IP address blocks:        2406:840:e300::/44 maxlen: 48
                          2406:840:fefd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 19:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4170 (0x104a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:07:09 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a493b5-cb95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e9:72:ed:11:fd:28:f7:cd:3e:cb:3d:82:5c:
                    f4:5a:c0:60:0b:80:84:8c:d5:9f:e4:8a:99:f8:61:
                    26:12:4b:32:ee:70:0b:99:c9:a6:3b:95:c9:23:df:
                    c6:47:b4:85:b5:98:d4:94:cd:24:75:8f:71:34:94:
                    c0:c5:21:81:f3:75:9e:17:1b:81:cd:e1:f6:a1:de:
                    76:60:7c:73:eb:53:27:4e:d5:92:7a:27:6d:18:c5:
                    5a:2b:34:a5:ce:74:c3:5b:ee:a9:71:30:17:86:51:
                    b8:03:44:b7:77:7c:37:3a:45:b8:5f:a9:72:71:fd:
                    79:9b:84:ca:2e:5b:34:8d:9e:4d:1a:ae:d6:9b:07:
                    ed:8d:e2:0b:57:73:b2:70:1e:6c:c5:1c:99:22:e9:
                    56:21:c7:eb:cc:1a:50:1d:c0:02:db:39:e4:3e:47:
                    5d:5d:d5:67:88:4c:db:89:1f:27:ef:df:71:f2:4a:
                    10:62:5d:1d:08:a6:c7:7d:1c:a7:51:cb:40:75:41:
                    d2:ce:3e:35:ec:17:0b:f7:9b:e8:81:c2:9d:01:6f:
                    55:23:23:e7:50:5d:61:2b:fd:f5:06:7f:b7:29:86:
                    13:f9:17:6a:0f:a8:e9:fd:c3:ca:4c:18:a2:c5:77:
                    a4:41:e4:37:fd:99:ae:9b:ed:29:a3:0f:7c:d3:b4:
                    55:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:94:43:D2:B2:06:5D:EC:81:CA:B1:A2:96:35:AD:24:56:D5:4B:1A
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/F0E6E6B4282511ED8C222B0BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:e300::/44
                  2406:840:fefd::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:14:08:ac:44:dd:1b:51:ed:b6:d5:51:ae:eb:db:4b:9e:53:
         71:6d:ef:2c:16:94:17:6f:9f:97:4f:7b:3f:9e:b9:26:17:d4:
         12:9f:82:1f:00:45:55:df:24:96:b8:e3:21:b7:00:94:e9:0c:
         62:dc:de:e4:1e:15:12:f3:ff:08:57:45:75:ac:cb:8d:18:7d:
         f9:6d:e8:cb:7e:93:75:9d:f8:7b:74:08:97:24:aa:d4:c4:75:
         66:42:45:b2:f7:cc:34:e1:0f:3f:7d:d7:59:cc:a4:ae:7e:74:
         ea:64:11:a2:4e:5c:57:7c:47:5e:10:ea:38:37:00:cd:94:a0:
         c7:b8:fa:9c:81:51:81:a5:2a:fa:ff:ca:a6:50:a0:5f:82:c8:
         02:a0:a6:1e:ac:14:7b:c2:21:76:86:be:96:d6:e3:26:4b:eb:
         02:37:92:17:00:92:32:89:f4:9e:c5:78:c3:78:cb:c3:f6:f4:
         ce:df:e5:89:e5:17:cb:de:e5:6c:09:4a:d4:3d:ad:91:a5:dc:
         7f:18:5e:9b:7a:57:1c:8f:b9:33:ff:a6:19:dc:cc:63:c9:8f:
         f4:25:dd:da:f3:6c:a4:1d:aa:87:a1:ea:81:b6:93:52:3c:3d:
         ba:12:1c:25:17:cd:af:29:16:97:6c:51:54:f4:a3:0a:ff:79:
         61:35:d8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:15:33 2026 by rpki-client