Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/FC64C3D08D7F11F1965C34BC3611F970.roa
File:                     FC64C3D08D7F11F1965C34BC3611F970.roa (raw, json)
Hash identifier:          c4YNboA/EEO1pYasDnz3sjb/ccTsIYDXCShnmfCFRbU=
Subject key identifier:   5C:4D:50:86:81:CC:A5:91:EE:1D:D6:41:DA:4F:71:12:C6:40:76:F8
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1239
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/FC64C3D08D7F11F1965C34BC3611F970.roa
Signing time:             Sat 01 Aug 2026 08:07:06 +0000
ROA not before:           Sat 01 Aug 2026 08:07:06 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     151490
IP address blocks:        2406:840:fedb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 19:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4665 (0x1239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: Aug  1 08:07:06 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a6da92a-822a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c1:46:02:33:fb:b3:8c:84:69:80:9e:40:26:
                    96:68:49:84:47:4d:af:0c:34:46:5b:eb:d3:b1:10:
                    49:75:4c:6c:4c:01:12:68:35:a4:c5:a6:3f:51:d6:
                    f7:4f:40:6b:27:d7:00:47:1a:00:47:50:5b:8a:cc:
                    c7:62:36:52:13:95:60:60:74:69:d6:5b:2b:55:ce:
                    3b:03:79:09:70:2b:1c:82:41:aa:df:1b:4b:93:5e:
                    1d:89:dd:b4:fd:a5:0d:a7:b0:d4:8e:9a:b3:30:11:
                    9f:f0:88:e2:e2:aa:db:d5:89:50:8d:e3:76:d4:47:
                    b0:a4:6e:18:24:15:e4:77:2b:dd:b2:d8:3c:4b:75:
                    36:d3:90:71:c2:55:7d:15:5d:4f:3f:97:e6:94:9a:
                    ac:7f:22:f1:42:57:38:59:75:5c:a3:61:8b:8b:ac:
                    75:36:59:5d:5f:20:a0:4d:92:0e:d5:d7:15:ae:c3:
                    89:71:b9:8b:1a:5f:87:fe:d4:a0:7a:fe:cb:67:1c:
                    cf:cd:6f:ab:e2:68:89:aa:10:2e:98:97:32:76:e7:
                    f7:26:29:fa:c5:82:fa:1c:b9:c4:24:b6:13:a2:a9:
                    09:d6:d7:4d:9e:4d:59:de:c0:6f:d1:11:c3:be:ee:
                    10:1e:3a:57:53:4d:05:9e:72:16:92:1a:07:73:8c:
                    ce:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:4D:50:86:81:CC:A5:91:EE:1D:D6:41:DA:4F:71:12:C6:40:76:F8
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/FC64C3D08D7F11F1965C34BC3611F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fedb::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:9c:e3:58:a8:b0:fd:13:37:59:31:23:ef:86:f9:c4:94:33:
         10:4e:54:20:62:fe:f3:ce:84:9c:dc:57:1d:cc:f3:22:44:02:
         ea:0d:ee:73:b7:4a:02:67:61:e1:3c:9b:2f:7b:9e:fb:c2:fb:
         f8:ad:9a:a0:c6:42:03:aa:7a:71:dc:0a:9d:8e:60:2e:cb:1e:
         96:a0:ab:9a:72:71:0f:7c:85:64:ea:24:7f:7d:4a:72:e4:14:
         63:ee:f3:49:c7:f0:2e:f7:e4:c0:60:44:92:26:8a:48:cd:e8:
         78:c5:34:33:f1:2f:84:cf:9b:ad:7e:ff:72:4b:aa:23:13:16:
         a1:1a:e8:10:25:47:41:10:66:2f:c0:45:9c:6a:d3:66:24:b3:
         6b:62:20:9a:0a:76:7b:18:e7:01:76:0b:f4:77:eb:a9:8a:8d:
         26:d9:42:16:97:63:ef:85:4a:6c:dd:18:7a:80:62:5f:c2:4e:
         64:db:78:c1:01:e4:ef:db:c8:c9:73:0b:83:f7:45:4c:59:5f:
         48:43:30:c5:dc:64:81:da:0f:48:be:3b:1a:dd:4e:df:d9:0b:
         1e:12:fb:d5:6a:45:fa:46:7e:e2:49:78:59:0c:f8:c5:83:03:
         dd:da:20:72:5f:ce:79:1b:59:ca:2c:96:26:32:3a:aa:fe:3d:
         60:b7:99:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:43:59 2026 by rpki-client