Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165746/7C4024565F3511F1A3AE2F757E47A888/26B060C25F3611F1918BCC0A8047A888.roa
File:                     26B060C25F3611F1918BCC0A8047A888.roa (raw, json)
Hash identifier:          75R6dGO5HakR3AKLxJh4RDBgHy3ftrxyVx3QxqSSZSw=
Subject key identifier:   F1:2D:64:93:F3:CC:AE:72:5E:C6:C4:9C:E6:41:38:F2:9E:6B:C3:A3
Certificate issuer:       /CN=A9165746/serialNumber=555C36769D0E0C3002C9C8D70516305D96136B38
Certificate serial:       02
Authority key identifier: 55:5C:36:76:9D:0E:0C:30:02:C9:C8:D7:05:16:30:5D:96:13:6B:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVw2dp0ODDACycjXBRYwXZYTazg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165746/7C4024565F3511F1A3AE2F757E47A888/26B060C25F3611F1918BCC0A8047A888.roa
Signing time:             Wed 03 Jun 2026 10:22:41 +0000
ROA not before:           Wed 03 Jun 2026 10:22:41 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     154694
IP address blocks:        2001:df7:1240::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165746/7C4024565F3511F1A3AE2F757E47A888/VVw2dp0ODDACycjXBRYwXZYTazg.crl
                          rsync://rpki.apnic.net/member_repository/A9165746/7C4024565F3511F1A3AE2F757E47A888/VVw2dp0ODDACycjXBRYwXZYTazg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVw2dp0ODDACycjXBRYwXZYTazg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 09:15:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165746, serialNumber=555C36769D0E0C3002C9C8D70516305D96136B38
        Validity
            Not Before: Jun  3 10:22:41 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a200071-a8bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:26:ad:da:dd:1c:ff:70:65:88:dd:a9:fa:af:
                    42:cd:bc:18:b1:a1:ae:5a:78:06:d6:f7:0d:9c:a9:
                    6f:60:d9:e6:9e:32:21:70:36:05:4e:9f:6c:ab:18:
                    7a:ec:79:f7:15:13:cb:47:e4:73:b5:87:59:f0:d7:
                    0b:59:5d:f4:67:37:85:71:4e:2d:e1:2e:cb:34:36:
                    09:22:8c:e8:f7:70:54:2f:4f:b8:0d:8b:d3:2d:1c:
                    c9:39:7d:a9:06:ac:69:be:f0:d9:20:4b:40:d3:5c:
                    c0:6e:69:d9:15:6f:43:2b:56:52:c7:a7:ad:b3:45:
                    3c:36:1f:6c:5b:7b:5c:3b:a5:5d:10:d8:23:4e:b8:
                    00:26:7a:5a:4d:42:e2:e0:38:42:06:4e:e0:9f:2b:
                    c6:af:92:6b:0d:08:b7:bc:29:2c:14:5a:8c:54:c7:
                    4e:4e:0f:fa:97:f0:1d:95:88:cd:0c:b5:15:c7:3a:
                    3f:3f:02:de:54:82:5d:9a:a1:6e:bf:04:f9:c7:79:
                    fa:8e:44:37:b0:68:0f:cc:44:83:e0:23:98:79:c5:
                    5b:55:11:97:e5:48:3b:1c:45:6f:b7:ef:48:21:ac:
                    2d:d4:33:7c:b1:de:27:bd:e2:5f:9f:26:aa:d3:0d:
                    04:9e:f8:43:c9:1f:3e:5e:74:8d:24:a0:95:20:b7:
                    a0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2D:64:93:F3:CC:AE:72:5E:C6:C4:9C:E6:41:38:F2:9E:6B:C3:A3
            X509v3 Authority Key Identifier:
                keyid:55:5C:36:76:9D:0E:0C:30:02:C9:C8:D7:05:16:30:5D:96:13:6B:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165746/7C4024565F3511F1A3AE2F757E47A888/VVw2dp0ODDACycjXBRYwXZYTazg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVw2dp0ODDACycjXBRYwXZYTazg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165746/7C4024565F3511F1A3AE2F757E47A888/26B060C25F3611F1918BCC0A8047A888.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:1240::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:dc:f7:9d:0e:61:af:3a:db:0d:3d:a8:84:e6:fd:02:0e:8f:
         b9:16:65:14:68:e3:8a:8c:53:b0:bb:e6:ee:5f:04:a3:2b:a8:
         f3:6a:12:b6:e1:84:16:56:9f:51:f1:97:7b:8c:c1:21:00:a0:
         a8:98:b6:3f:ed:f0:b1:97:46:a9:21:4a:3f:50:d5:05:ef:db:
         2b:1c:74:79:65:38:bf:ef:30:8e:6c:22:c6:e0:96:37:24:cc:
         6b:4c:27:d9:91:2e:fc:65:e6:00:d2:c7:62:ab:7d:30:bc:9f:
         a0:2e:7d:41:df:29:20:a6:7f:b6:9b:23:0c:a6:14:65:54:db:
         1a:d9:72:6c:02:a1:17:9d:28:3d:6e:b4:65:97:72:a3:8c:a1:
         0b:55:4c:bc:48:67:f4:67:8d:c1:3f:95:d6:29:ae:f0:41:a0:
         e5:88:b2:3e:04:c5:d5:61:08:dd:dc:f4:be:62:2c:54:02:13:
         e6:ed:9f:1a:d6:2b:63:31:fa:79:70:e5:5b:73:d0:29:22:9c:
         97:7b:43:e8:46:f0:ae:f8:6d:22:50:ba:71:03:53:24:73:ea:
         92:31:81:cd:04:33:d8:a8:dd:56:37:08:ba:0a:3f:a7:44:99:
         17:8a:e1:d3:90:91:60:66:40:17:bf:1c:93:2b:a3:80:b6:0e:
         44:36:58:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:58:57 2026 by rpki-client