Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/6663341A5B6711F19383C9AE9E833773.roa
File:                     6663341A5B6711F19383C9AE9E833773.roa (raw, json)
Hash identifier:          GGXbJncHpVSh7kjLt3m5av1NshHATlj181GsdnLCABU=
Subject key identifier:   7C:57:6A:9F:75:16:BF:BF:E8:74:C6:B5:86:4C:56:E3:42:57:1E:AA
Certificate issuer:       /CN=A913F721/serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4
Certificate serial:       0BE2
Authority key identifier: 1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/6663341A5B6711F19383C9AE9E833773.roa
Signing time:             Fri 29 May 2026 14:05:08 +0000
ROA not before:           Fri 29 May 2026 14:05:08 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     54113
IP address blocks:        2404:5e40:113::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl
                          rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:11:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3042 (0xbe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F721, serialNumber=1DD717B229936190CEB667C7CE1CA9F9BFB5FAC4
        Validity
            Not Before: May 29 14:05:08 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a199d14-7c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8e:ce:37:fb:88:33:bf:f1:bb:c2:41:29:d4:
                    26:c5:86:91:c6:30:53:e2:c5:0f:b0:22:e2:a0:13:
                    e1:13:b7:35:ca:d1:17:b9:aa:7f:b6:cb:4e:24:e0:
                    5f:37:27:a2:ed:8e:c6:66:e7:2b:17:86:ae:91:ea:
                    6d:e7:c9:9b:20:03:3a:c5:1b:50:be:27:eb:78:1c:
                    af:5f:ab:ce:50:2f:b7:17:db:55:b2:e8:b8:3d:d3:
                    00:e9:70:2d:bc:28:d4:7c:99:7b:b4:71:6d:ad:96:
                    37:73:ac:5a:45:70:85:02:66:1c:70:4b:f9:d0:4e:
                    fa:9e:53:f2:18:50:21:9f:37:69:9d:47:f7:fb:4f:
                    c9:d6:62:34:45:1e:48:56:09:28:35:38:b1:58:c5:
                    85:5c:98:c6:97:23:37:48:33:04:0a:74:ab:ff:db:
                    33:5a:f5:8e:84:50:10:a8:ff:a7:8f:79:d4:18:49:
                    11:7c:57:42:b0:19:2a:de:8c:e2:f8:71:9a:e3:18:
                    f0:80:03:36:7e:61:96:bc:fd:19:7a:ab:ee:5e:fe:
                    2d:ef:20:fb:e2:15:e8:24:65:82:98:d8:4b:fe:02:
                    5b:ac:f7:da:f4:cb:4d:9f:ed:db:01:07:13:ca:ec:
                    9f:ce:eb:eb:39:0f:7d:3f:94:77:61:e0:48:67:c7:
                    0a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:57:6A:9F:75:16:BF:BF:E8:74:C6:B5:86:4C:56:E3:42:57:1E:AA
            X509v3 Authority Key Identifier:
                keyid:1D:D7:17:B2:29:93:61:90:CE:B6:67:C7:CE:1C:A9:F9:BF:B5:FA:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/HdcXsimTYZDOtmfHzhyp-b-1-sQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HdcXsimTYZDOtmfHzhyp-b-1-sQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F721/6442437A53AC11EA9AD54B2FC4F9AE02/6663341A5B6711F19383C9AE9E833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:5e40:113::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:12:ab:8e:38:1f:25:02:f9:00:79:b6:64:3b:3e:5b:e8:1e:
         6b:b3:6f:4d:2a:3d:40:80:57:3e:66:92:95:bb:9b:e0:04:b3:
         e7:be:10:da:54:6b:9b:e0:cf:bc:59:4b:17:32:71:3a:6a:cf:
         0c:6e:dc:da:c4:75:69:4a:f1:12:30:c6:ea:d6:5e:ef:4b:2a:
         fb:f8:4a:61:0d:b2:77:a6:af:49:43:b2:8d:62:27:4a:3e:b2:
         5d:b6:58:84:61:9a:9d:a0:84:0e:14:02:e6:30:4a:3e:29:59:
         e5:88:a1:85:cb:ab:24:09:ac:c7:94:7a:48:6f:b0:16:f3:9a:
         77:78:03:2b:a2:98:7a:2a:0c:18:05:30:b4:5e:73:fc:76:ad:
         30:af:14:06:32:6b:a6:67:43:8c:f6:67:af:73:38:60:44:84:
         56:3d:07:b9:d0:4a:98:4c:b6:98:8f:90:26:9f:20:29:f1:ee:
         67:8f:24:ef:0e:7d:d9:b7:15:a0:30:f3:47:18:69:09:a7:56:
         10:09:1b:1a:7d:04:e3:6a:f1:6c:d9:af:6a:5d:79:3c:f3:ce:
         2b:95:36:50:23:80:ae:2a:c6:e4:ac:54:e0:6a:2d:31:6c:0f:
         74:a7:f6:86:85:b8:4a:cc:67:50:5e:b1:0e:0e:27:8c:7e:a7:
         a0:ba:02:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:53:54 2026 by rpki-client