Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/618A7D781F7111F09D1AC487C4F9AE02.roa
File:                     618A7D781F7111F09D1AC487C4F9AE02.roa (raw, json)
Hash identifier:          IZyg4Fas/9IWukov6Dektnm2jiaHOXiUtTOZZUt7+3M=
Subject key identifier:   D1:84:C1:FF:46:12:E0:05:F7:CC:0F:DF:CF:07:C1:A8:A8:BF:58:A1
Certificate issuer:       /CN=A912986D/serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB
Certificate serial:       0B65
Authority key identifier: 17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/618A7D781F7111F09D1AC487C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:59:59 +0000
ROA not before:           Mon 11 Aug 2025 14:26:57 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     19637
IP address blocks:        2406:2200:560::/48 maxlen: 48
                          2406:2200:568::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl
                          rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:16:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2917 (0xb65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912986D, serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB
        Validity
            Not Before: Aug 11 14:26:57 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4627f-b0ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:31:75:48:62:2e:a6:b3:2c:ba:f4:8c:84:5b:
                    02:b2:b3:da:57:f4:b5:c8:0e:fa:cc:6d:a4:f4:54:
                    78:65:32:71:b5:cd:d6:5c:5d:10:13:a3:e6:c7:ad:
                    1c:c5:09:d6:96:e9:af:02:c7:89:77:af:39:39:6d:
                    7e:6c:91:03:43:9f:3f:8d:72:dc:f9:67:e0:b7:09:
                    b3:06:f1:b9:1d:30:1a:1e:73:ac:29:db:f3:d2:3c:
                    96:cd:58:16:df:02:e2:b3:70:f0:a7:c3:06:65:bc:
                    75:c5:32:10:19:d5:1d:0b:c1:ee:b9:50:f5:32:4c:
                    0a:56:16:d5:40:9c:31:69:3d:7a:e2:47:12:01:a2:
                    86:bc:2c:37:93:80:d8:75:d4:b2:c4:12:95:46:00:
                    74:2c:44:a8:e9:3d:5f:2c:bb:13:38:e0:2d:4b:90:
                    3e:3e:af:39:84:7a:7e:c9:97:58:5b:41:ab:1c:84:
                    a0:78:75:73:b6:86:bd:2d:22:fb:da:19:0a:8a:c9:
                    e1:74:c4:a2:79:2d:a6:85:b4:07:46:f9:b3:ae:ec:
                    fe:e0:fe:40:53:d1:07:18:e9:9b:f4:64:7e:ac:f3:
                    82:48:c7:2b:01:50:52:11:c7:a5:b5:aa:0a:e0:fc:
                    13:fb:90:a0:1d:67:c4:d3:33:4e:e6:49:81:d4:78:
                    c7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:84:C1:FF:46:12:E0:05:F7:CC:0F:DF:CF:07:C1:A8:A8:BF:58:A1
            X509v3 Authority Key Identifier:
                keyid:17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/618A7D781F7111F09D1AC487C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:2200:560::/48
                  2406:2200:568::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:cd:2f:22:94:68:5a:6d:e0:0c:eb:cf:c9:cb:fe:9c:62:82:
         82:3a:b6:37:07:23:61:d5:2d:a3:0b:d8:99:15:ce:ba:a7:d7:
         58:3e:ba:4f:20:43:50:ab:cd:67:d3:43:f2:50:53:b9:48:8e:
         10:48:f9:a0:66:e7:5b:da:df:52:18:f2:2f:3a:9a:c4:aa:b4:
         c5:04:f1:b6:3d:b1:b2:e6:ba:10:30:97:9d:54:78:6d:ef:55:
         dc:a3:52:33:a9:4d:34:d2:f0:bf:80:e7:d3:81:7d:00:2f:33:
         33:6f:fd:4e:21:0a:d2:7c:f4:04:e2:e3:cd:69:b2:6a:0a:45:
         c4:c3:00:e4:ae:40:66:19:96:a9:3d:b7:e2:f4:02:5e:44:e9:
         0d:3c:e4:bc:72:20:f5:62:ee:21:32:99:79:0f:18:55:94:98:
         3d:1f:5d:a9:92:95:5f:12:16:41:1b:a6:26:3a:fe:e1:7a:95:
         b1:a6:9e:49:e2:b1:4b:4a:c3:62:72:1a:0f:66:cd:c4:7f:ed:
         58:a3:53:fc:f7:cb:5e:da:e1:31:2e:d5:41:70:a8:49:b3:c1:
         0d:a2:44:ca:28:fa:99:13:3a:6d:9a:9c:47:e0:09:17:2d:75:
         29:ce:71:f3:67:54:98:39:a5:58:2a:67:59:26:13:3c:75:c6:
         7d:92:5a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:09:59 2026 by rpki-client