Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/A55DE586ED6311EDB69EB62AC4F9AE02.roa
File:                     A55DE586ED6311EDB69EB62AC4F9AE02.roa (raw, json)
Hash identifier:          5DPxa9zh03P/4EIxkUOZTnMchK9kaQkZ16Z7NXsueHg=
Subject key identifier:   A8:E7:26:07:9F:80:6A:EE:54:34:61:39:40:09:9C:F7:66:D8:CC:4A
Certificate issuer:       /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
Certificate serial:       0428
Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/A55DE586ED6311EDB69EB62AC4F9AE02.roa
Signing time:             Thu 11 Jun 2026 03:31:16 +0000
ROA not before:           Thu 11 Jun 2026 03:31:16 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     18004
IP address blocks:        2407:2440:1b::/48 maxlen: 48
                          2407:2440:1c::/48 maxlen: 48
                          2407:2440:1d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl
                          rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 03:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1064 (0x428)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F
        Validity
            Not Before: Jun 11 03:31:16 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a2a2c04-8ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:17:5a:7b:3a:e5:de:51:c6:45:63:32:a3:
                    1b:0a:68:6c:a2:60:06:4f:0d:58:db:3e:61:af:d3:
                    c7:67:58:be:c4:09:59:17:4c:39:e9:10:3f:81:1e:
                    40:e3:53:bd:93:11:f5:6e:52:63:16:19:b3:d4:7f:
                    8f:72:e0:ba:78:5f:ba:23:2a:6a:f5:9f:8b:78:9c:
                    c9:49:cf:9b:49:e0:ea:16:37:28:f3:aa:7c:50:3b:
                    0e:f8:c0:4e:fa:21:b2:73:f2:3b:50:96:f7:7d:9b:
                    79:9a:5b:dc:1b:2a:df:65:7b:e1:ac:d0:58:67:30:
                    fc:c3:56:03:bb:67:c9:56:20:22:ee:43:af:a8:12:
                    42:cf:d9:00:a5:e8:bc:85:bd:3e:5e:bb:b5:4e:b3:
                    bb:ce:0d:b7:0b:78:63:37:fe:30:23:5c:cd:bb:fa:
                    01:d7:5d:96:69:c7:57:59:19:08:03:94:15:75:aa:
                    53:ce:74:80:9e:92:55:2e:d8:56:e7:9a:f7:6b:39:
                    2b:ec:53:9d:6d:71:de:59:c7:09:c3:f2:16:36:16:
                    d8:50:46:66:25:a9:4c:1a:51:42:37:15:49:f6:2c:
                    00:5d:44:b7:71:57:9a:30:04:db:4a:25:15:36:8b:
                    98:69:e7:91:de:7e:7b:b1:64:4f:fb:7d:4b:ff:59:
                    ef:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E7:26:07:9F:80:6A:EE:54:34:61:39:40:09:9C:F7:66:D8:CC:4A
            X509v3 Authority Key Identifier:
                keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/A55DE586ED6311EDB69EB62AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:2440:1b::-2407:2440:1d:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         b9:ee:fb:56:be:0d:55:26:ef:b3:f3:71:1f:a9:c3:56:63:96:
         fd:1c:53:35:dd:e1:1c:e9:a6:26:12:48:89:6f:f7:eb:7c:71:
         76:5b:a4:6e:c3:43:b6:ac:a7:dd:db:a0:ad:b9:76:86:bf:bd:
         92:31:8b:cc:df:e4:2b:3d:17:5a:62:75:58:30:bf:20:d9:d5:
         42:18:69:d9:a2:f2:a1:ee:25:6c:cd:b3:72:69:64:bc:94:a2:
         9f:41:23:5d:50:67:97:80:2a:36:6b:f0:9d:34:8a:ec:d7:07:
         c5:d5:d5:4a:f2:65:68:83:49:fc:d8:f1:4c:95:c6:c0:1c:96:
         96:13:21:07:5b:20:50:db:4f:86:f3:53:7b:60:ac:73:5b:6e:
         d5:a0:c2:df:7e:75:a4:63:0f:72:b1:a6:d6:10:26:78:03:e7:
         d3:1d:31:73:04:3c:7b:9b:f3:9f:14:7e:fc:3d:46:21:48:2f:
         99:e0:70:57:59:fa:89:05:0e:ad:d6:7d:9e:84:46:02:f5:14:
         8f:e0:4c:60:15:45:19:7b:18:cd:50:bd:cd:28:e0:c7:c5:c8:
         26:a0:52:bb:67:ef:42:e9:4b:01:ab:b6:11:77:e9:86:43:57:
         cf:28:27:e1:3a:bd:e3:6c:ca:a2:eb:31:50:46:1f:98:11:da:
         fc:fc:a3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 12:21:10 2026 by rpki-client