Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/FB53E88A2D9F11F19981FFD49F833773.roa
File:                     FB53E88A2D9F11F19981FFD49F833773.roa (raw, json)
Hash identifier:          ZAdRDtRumQ9iSxMpncdOyULKYgh8Rn2K/EDmIVrB3X8=
Subject key identifier:   52:5C:2B:80:25:45:4E:6F:39:44:46:C0:1F:BD:F2:7E:BF:6E:4E:36
Certificate issuer:       /CN=A9192EE9/serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369
Certificate serial:       08C8
Authority key identifier: 2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/FB53E88A2D9F11F19981FFD49F833773.roa
Signing time:             Sun 31 May 2026 21:24:39 +0000
ROA not before:           Sun 31 May 2026 21:24:39 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     147185
IP address blocks:        2404:e740:4::/48 maxlen: 48
                          2404:e740:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl
                          rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2248 (0x8c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192EE9, serialNumber=2F7AEBDC70179D71694FC699D5F3E40E584AB369
        Validity
            Not Before: May 31 21:24:39 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1ca717-849b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e6:21:c7:56:26:c9:63:50:dc:44:39:9a:cd:
                    93:9f:c7:40:df:63:23:0a:12:dd:29:62:4a:3f:01:
                    e9:41:e0:c2:28:56:a9:83:97:9e:75:56:40:60:06:
                    3a:31:65:3f:ed:f2:e8:d2:d1:0f:10:10:2b:11:c9:
                    35:fc:a2:e0:a5:d8:6d:bd:93:02:d3:43:b0:5d:27:
                    bd:cf:17:07:99:4a:bf:08:0b:d8:c6:e8:dc:ac:22:
                    0c:53:c6:67:06:a4:28:ae:3c:fa:26:cf:95:08:5d:
                    4e:a7:10:49:ff:be:6e:17:45:84:62:05:b2:78:e0:
                    d9:b3:22:ce:29:70:89:e8:d5:83:d4:30:8a:f4:e9:
                    bd:a8:92:f2:c5:c5:62:7f:82:31:d9:88:bf:99:aa:
                    80:72:27:02:de:f9:fc:2a:0e:d6:e2:15:bb:a5:c7:
                    ee:da:ce:d7:3d:dc:b7:a1:76:43:5d:97:d2:fa:3f:
                    33:fc:61:2e:5c:2e:11:ae:2b:72:57:e2:d4:0c:8c:
                    66:ad:ad:09:2d:6c:a5:51:a5:72:55:28:4f:9e:90:
                    e1:91:05:11:bc:37:06:62:8a:99:25:61:dd:ca:ab:
                    df:7b:53:e7:3b:d2:40:18:6f:dd:d1:7c:4d:00:ad:
                    0e:f2:c6:ed:83:62:45:05:75:0e:9f:37:5b:2c:d8:
                    28:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:5C:2B:80:25:45:4E:6F:39:44:46:C0:1F:BD:F2:7E:BF:6E:4E:36
            X509v3 Authority Key Identifier:
                keyid:2F:7A:EB:DC:70:17:9D:71:69:4F:C6:99:D5:F3:E4:0E:58:4A:B3:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L3rr3HAXnXFpT8aZ1fPkDlhKs2k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192EE9/324841F4E6FE11EA838EA148C4F9AE02/FB53E88A2D9F11F19981FFD49F833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:e740:4::/48
                  2404:e740:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:1a:01:88:4c:a8:2a:f7:28:64:27:81:fe:71:0b:e6:76:c2:
         f4:5d:9b:07:d6:e5:ca:2f:45:10:40:47:e9:a7:42:40:49:c4:
         7c:a9:a3:a2:3f:52:6e:f0:98:f7:90:fb:61:96:aa:08:df:e5:
         c2:da:6a:49:43:61:4a:8c:c0:c5:bc:0d:83:71:e9:88:6e:fe:
         cf:43:a0:83:0a:35:a0:d5:31:49:d9:d3:a3:b4:22:90:c0:1a:
         98:cc:86:86:df:53:74:3b:7a:b9:de:43:3b:42:c5:58:37:da:
         95:6c:ff:75:2e:e2:74:9f:9f:21:2a:28:7c:a5:c3:11:35:53:
         89:90:81:18:09:4f:bc:d2:e6:71:32:45:64:7b:c0:ca:c9:3d:
         b3:11:ac:06:de:7a:d1:f3:5b:0d:a5:cf:7d:66:15:7b:89:bb:
         bf:71:50:5a:b7:bf:63:54:bc:fb:71:64:d8:98:9f:df:5b:8c:
         9a:2e:b1:ee:da:49:da:3c:bd:e7:f4:ce:33:0e:4d:2f:6d:c2:
         c9:45:06:e5:ab:a2:21:2b:58:53:13:97:2b:e0:f9:22:9f:6a:
         55:9c:ec:d6:60:36:d4:41:ce:86:99:36:90:61:e1:35:d4:c4:
         14:0d:22:e9:4e:cb:f2:3f:f8:87:e1:07:9c:f1:a2:d6:33:bb:
         86:04:02:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:55:08 2026 by rpki-client