Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/17B8A8547B6A11F18E1A84F95FA30FBC.roa
File:                     17B8A8547B6A11F18E1A84F95FA30FBC.roa (raw, json)
Hash identifier:          nrBaU7iZQSC+FLQvbkU6ic7bwgfAUClqxQi743KCfc0=
Subject key identifier:   C4:BD:EB:06:ED:E1:4E:5E:57:96:89:F9:C5:D3:5E:F8:23:AC:C6:4C
Certificate issuer:       /CN=A919C7D0/serialNumber=267E3D35D811A872BFEDDF057B75D550DE47F726
Certificate serial:       7C
Authority key identifier: 26:7E:3D:35:D8:11:A8:72:BF:ED:DF:05:7B:75:D5:50:DE:47:F7:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/17B8A8547B6A11F18E1A84F95FA30FBC.roa
Signing time:             Thu 09 Jul 2026 07:45:02 +0000
ROA not before:           Thu 09 Jul 2026 07:45:02 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     147016
IP address blocks:        2001:df6:4840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.crl
                          rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Jul 2026 08:56:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C7D0, serialNumber=267E3D35D811A872BFEDDF057B75D550DE47F726
        Validity
            Not Before: Jul  9 07:45:02 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a4f517e-bdf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1d:ff:4b:06:eb:67:22:22:6d:c3:c4:69:44:
                    0f:a7:b4:65:ed:9f:54:3c:47:ac:35:d4:f5:a0:26:
                    66:75:f7:85:7c:4e:29:3f:07:b9:16:6d:3f:0e:17:
                    17:11:ed:ae:49:4a:5d:79:d7:ce:a2:0d:8f:c5:c1:
                    f0:92:6b:66:66:42:a4:b3:a4:a1:bb:ca:80:f9:fc:
                    1d:79:fe:fd:bf:01:7f:72:2f:50:8e:d5:ee:0a:17:
                    6c:c7:60:ff:aa:28:d2:f0:94:74:e5:0b:3e:3b:c6:
                    d8:20:b2:c7:75:31:df:24:8e:16:c7:af:09:4e:5f:
                    47:c0:3e:ac:3f:64:34:ab:77:dc:aa:35:50:00:4f:
                    8d:a8:92:24:f6:90:c3:2d:3c:7a:d2:03:52:18:71:
                    af:b6:3a:ff:d5:58:b8:87:0c:5e:7e:fb:00:2a:52:
                    ba:3f:42:ab:46:6c:01:91:ce:99:fe:34:46:f5:b2:
                    8a:ca:5a:92:82:e8:74:5a:23:f4:5b:a7:6d:8d:52:
                    85:96:63:c3:39:9e:5a:c7:8c:cc:a8:29:2e:0b:c1:
                    5d:5a:6f:9c:24:5c:6c:10:96:d4:22:7c:6e:93:89:
                    90:6b:65:e7:35:11:85:03:40:33:26:04:cd:54:24:
                    aa:30:08:30:f7:db:5b:fe:31:b2:d9:b4:53:3f:72:
                    1c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BD:EB:06:ED:E1:4E:5E:57:96:89:F9:C5:D3:5E:F8:23:AC:C6:4C
            X509v3 Authority Key Identifier:
                keyid:26:7E:3D:35:D8:11:A8:72:BF:ED:DF:05:7B:75:D5:50:DE:47:F7:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jn49NdgRqHK_7d8Fe3XVUN5H9yY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C7D0/7E5823F6BD5A11F0B89B1D66C4F9AE02/17B8A8547B6A11F18E1A84F95FA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:4840::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:4b:05:49:85:69:eb:77:f5:64:38:cb:3f:2d:ed:34:ba:0e:
         f9:4a:11:ec:17:dd:e3:05:e2:24:93:e3:a6:bc:25:2b:24:79:
         cb:ea:6f:9e:3d:30:89:2f:bc:23:34:9c:4e:88:04:63:26:d3:
         47:92:20:13:ac:cb:b2:0e:63:ec:37:a6:d7:53:63:94:dd:19:
         8c:c1:41:31:e0:1d:39:2f:28:8f:80:45:5a:f0:a3:b6:6a:0c:
         f7:59:4f:dd:05:b6:ee:1e:37:3a:05:2e:49:04:32:4b:94:3b:
         2c:5f:bb:0a:a7:ea:58:6b:3f:40:6a:88:18:b7:a0:6e:ea:1c:
         9c:5f:f0:3f:ff:fb:e9:bf:60:10:4b:03:2c:d4:81:39:bc:bf:
         0f:18:a6:91:ac:b6:c0:2b:01:62:75:8c:fb:06:ef:e4:34:09:
         c8:7f:cb:60:c9:f4:2d:e3:cd:d9:80:22:ff:7f:b0:8b:bf:df:
         1a:1e:69:c3:8b:67:cd:e6:3a:b7:7a:20:e8:d8:6b:6b:ba:8d:
         77:a4:9d:19:dc:d8:2e:46:52:88:59:8f:05:47:47:41:ab:7d:
         4d:d5:d0:d5:cb:33:da:79:79:7a:ad:f4:36:ff:30:c8:59:e7:
         c3:96:61:4a:96:4f:ef:e8:7b:3d:94:58:8c:7e:13:ab:cc:b8:
         92:86:11:7f
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
QzdEMDExMC8GA1UEBRMoMjY3RTNEMzVEODExQTg3MkJGRURERjA1N0I3NUQ1NTBE
RTQ3RjcyNjAeFw0yNjA3MDkwNzQ1MDJaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhNGY1MTdlLWJkZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCwHf9LButnIiJtw8RpRA+ntGXtn1Q8R6w11PWgJmZ194V8Tik/B7kWbT8OFxcR
7a5JSl15186iDY/FwfCSa2ZmQqSzpKG7yoD5/B15/v2/AX9yL1CO1e4KF2zHYP+q
KNLwlHTlCz47xtggssd1Md8kjhbHrwlOX0fAPqw/ZDSrd9yqNVAAT42okiT2kMMt
PHrSA1IYca+2Ov/VWLiHDF5++wAqUro/QqtGbAGRzpn+NEb1sorKWpKC6HRaI/Rb
p22NUoWWY8M5nlrHjMyoKS4LwV1ab5wkXGwQltQifG6TiZBrZec1EYUDQDMmBM1U
JKowCDD321v+MbLZtFM/chxvAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUxL3rBu3h
Tl5Xlon5xdNe+COsxkwwHwYDVR0jBBgwFoAUJn49NdgRqHK/7d8Fe3XVUN5H9yYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlDN0QwLzdFNTgyM0Y2QkQ1
QTExRjBCODlCMUQ2NkM0RjlBRTAyL0puNDlOZGdScUhLXzdkOEZlM1hWVU41SDl5
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSm40OU5kZ1JxSEtfN2Q4RmUzWFZVTjVIOXlZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QzdEMC83RTU4MjNGNkJENUExMUYwQjg5QjFENjZDNEY5QUUwMi8xN0I4QTg1NDdC
NkExMUYxOEUxQTg0Rjk1RkEzMEZCQy5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQ32SEAwDQYJKoZIhvcNAQELBQADggEBACZLBUmFaet39WQ4yz8t
7TS6DvlKEewX3eMF4iST46a8JSskecvqb549MIkvvCM0nE6IBGMm00eSIBOsy7IO
Y+w3ptdTY5TdGYzBQTHgHTkvKI+ARVrwo7ZqDPdZT90Ftu4eNzoFLkkEMkuUOyxf
uwqn6lhrP0BqiBi3oG7qHJxf8D//++m/YBBLAyzUgTm8vw8YppGstsArAWJ1jPsG
7+Q0Cch/y2DJ9C3jzdmAIv9/sIu/3xoeacOLZ83mOrd6IOjYa2u6jXeknRnc2C5G
UohZjwVHR0GrfU3V0NXLM9p5eXqt9Db/MMhZ58OWYUqWT+/oez2UWIx+E6vMuJKG
EX8=
-----END CERTIFICATE-----
Generated at Wed Jul 15 13:45:38 2026 by rpki-client