Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55F629EADA6411F0815F864397D3641D.roa
File:                     55F629EADA6411F0815F864397D3641D.roa (raw, json)
Hash identifier:          hbpgpZYD8AAKzdnZ/2cPcxaQQcEbjdkf0x6fGxNvYrM=
Subject key identifier:   80:BD:36:CE:E5:C9:FC:9C:36:62:0A:94:B4:D0:7C:B0:FA:AC:18:FC
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       E4FF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55F629EADA6411F0815F864397D3641D.roa
Signing time:             Sun 31 May 2026 16:58:22 +0000
ROA not before:           Sun 31 May 2026 16:58:22 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     136904
IP address blocks:        2402:39e0::/32 maxlen: 32
                          2402:39e0::/40 maxlen: 40
                          2402:39e0:100::/40 maxlen: 40
                          2402:39e0:200::/40 maxlen: 40
                          2402:39e0:300::/40 maxlen: 40
                          2402:39e0:400::/40 maxlen: 40
                          2402:39e0:500::/40 maxlen: 40
                          2402:39e0:600::/40 maxlen: 40
                          2402:39e0:700::/40 maxlen: 40
                          2402:39e0:800::/40 maxlen: 40
                          2402:39e0:900::/40 maxlen: 40
                          2402:39e0:a00::/40 maxlen: 40
                          2402:39e0:b00::/40 maxlen: 40
                          2402:39e0:c00::/40 maxlen: 40
                          2402:39e0:d00::/40 maxlen: 40
                          2402:39e0:e00::/40 maxlen: 40
                          2402:39e0:f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58623 (0xe4ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 16:58:22 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c68ae-958a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bc:a0:64:84:75:2d:3a:e5:2d:57:d4:b6:76:
                    0e:9f:8c:54:20:8d:87:b2:bc:ed:4e:db:da:27:7b:
                    e8:39:cd:57:25:a2:0c:62:85:7d:99:a9:bf:64:9f:
                    0d:ae:46:06:16:8c:55:67:34:04:64:86:b7:2c:14:
                    c6:de:50:0f:99:5b:2b:ae:01:e2:9a:74:f5:2f:a5:
                    ca:e1:55:1c:28:c5:66:1e:f4:47:9d:cd:70:52:46:
                    e5:1c:f4:02:3a:b1:97:6c:41:02:b3:39:28:b4:b5:
                    ce:54:74:e3:55:3b:d3:3f:e3:04:c7:4d:c2:a5:2a:
                    7f:a2:71:14:aa:4d:e4:fe:0d:f4:74:e9:b2:e2:4d:
                    7e:8b:a4:61:43:3e:5e:34:2f:a7:11:4e:fb:d2:dd:
                    c3:0f:b5:b9:6e:db:d8:3a:fe:58:82:e7:0e:86:44:
                    9c:5f:a2:23:a6:c6:3c:7c:9f:b3:cc:f0:c3:c7:de:
                    eb:5c:ad:cf:62:6b:c1:8d:1f:71:0b:25:d2:ee:a1:
                    7b:8b:01:75:ec:5a:11:0d:d6:e8:d0:79:1c:b4:95:
                    27:9e:33:83:cf:5a:08:b2:3e:16:e2:d7:12:ba:3b:
                    68:13:94:ac:5d:cf:5e:1e:a4:01:55:cd:f4:67:c6:
                    85:0a:e1:d3:ee:a9:23:29:dd:eb:db:31:c9:4b:3a:
                    ec:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:BD:36:CE:E5:C9:FC:9C:36:62:0A:94:B4:D0:7C:B0:FA:AC:18:FC
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55F629EADA6411F0815F864397D3641D.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:39e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:68:02:64:ea:49:91:ab:44:a2:8f:8c:15:ad:63:9e:d9:7c:
         af:f0:03:bb:26:6d:3c:02:d5:95:89:01:c4:df:f7:3b:a2:48:
         a0:87:89:72:35:c1:7e:8f:93:3e:00:8d:26:63:0e:6d:6b:ef:
         38:72:1c:df:af:58:90:af:74:21:ea:a6:8a:aa:ed:8f:3c:97:
         2f:56:e4:ec:78:05:2f:db:ce:69:30:5a:dc:97:b3:4f:1d:49:
         1b:aa:85:d1:e6:e8:2f:04:e7:47:35:af:71:f8:39:64:fd:8c:
         cb:00:0e:76:52:55:8d:e9:8f:8a:07:3f:6f:ed:c7:f6:47:81:
         08:81:c1:fd:95:91:3e:69:29:00:02:c1:38:9e:41:77:28:ec:
         75:00:a2:9a:91:35:8a:00:f2:c2:49:01:e9:8b:9a:f5:4c:c9:
         73:c8:68:a1:f2:78:b8:6c:93:1d:d7:4a:16:57:12:a3:45:f1:
         fa:56:0d:6c:d2:13:55:1f:6d:c6:7d:88:26:41:fc:dc:c3:85:
         28:49:98:aa:f9:45:0b:fe:5e:e4:ad:68:dd:fc:a0:c4:86:c8:
         fc:2f:4d:e0:48:2c:aa:f6:a6:a1:28:f6:6b:bf:c9:fb:ec:33:
         52:11:7f:ab:2d:b6:7d:31:ea:19:73:b1:19:dd:ee:d4:b1:dc:
         b1:2a:fe:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:09:00 2026 by rpki-client