Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/6579B1188F5811F0BE083D3DC4F9AE02.roa
File:                     6579B1188F5811F0BE083D3DC4F9AE02.roa (raw, json)
Hash identifier:          HH9ky92fQzGNTYsX0+VQPTLNrW/aQl3+AElKQhw1OdM=
Subject key identifier:   EC:F5:B6:B6:02:5E:86:15:9C:C4:1E:42:CA:6C:14:B6:19:61:45:3D
Certificate issuer:       /CN=A917C0CC/serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
Certificate serial:       9E
Authority key identifier: 0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/6579B1188F5811F0BE083D3DC4F9AE02.roa
Signing time:             Fri 05 Jun 2026 08:39:47 +0000
ROA not before:           Fri 05 Jun 2026 08:39:47 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     15224
IP address blocks:        2406:fb00:1000::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl
                          rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C0CC, serialNumber=0DCAFAC145B22F1560780166CD1F151504EEF8A1
        Validity
            Not Before: Jun  5 08:39:47 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a228b52-becd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ae:cf:c8:d3:ed:ff:00:51:f4:7d:44:92:8c:
                    1a:07:94:5e:a6:ab:d2:fb:66:39:a6:29:77:27:17:
                    b8:93:40:ff:7e:73:cf:e5:23:0a:a6:93:03:c8:48:
                    2b:63:96:e9:19:15:0e:3a:27:99:85:05:3d:52:ac:
                    f3:41:b3:9f:93:13:72:d4:22:c1:b1:17:ba:f3:e9:
                    24:80:9c:04:aa:b5:07:8b:c1:51:28:16:de:8f:4e:
                    0c:34:70:ac:ec:43:18:fe:2b:2c:e5:e7:2f:ab:52:
                    95:53:23:07:c8:f3:21:1e:76:4c:fc:ed:59:ed:bc:
                    20:3d:3e:71:0e:64:32:b4:92:57:07:a2:c5:0f:40:
                    91:39:95:e4:7a:48:5e:75:6d:a2:ef:8a:4a:a8:91:
                    3b:ca:2a:6b:c8:cd:7b:0a:36:88:14:55:05:54:de:
                    d2:bc:ae:dd:31:c1:70:59:02:43:69:57:f4:51:d4:
                    c9:56:1f:e1:cd:5c:5b:82:79:0d:62:57:2a:1f:44:
                    6b:4b:a7:b4:72:c3:7c:6f:f2:81:85:5d:0d:64:6f:
                    c4:8e:5e:56:78:b2:45:95:0f:92:fc:95:cb:5c:27:
                    05:f6:3b:25:77:bf:c1:cb:03:33:2d:78:57:a7:49:
                    df:e8:bf:75:dc:80:96:f3:80:ad:ba:1c:96:65:0d:
                    2b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F5:B6:B6:02:5E:86:15:9C:C4:1E:42:CA:6C:14:B6:19:61:45:3D
            X509v3 Authority Key Identifier:
                keyid:0D:CA:FA:C1:45:B2:2F:15:60:78:01:66:CD:1F:15:15:04:EE:F8:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dcr6wUWyLxVgeAFmzR8VFQTu-KE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0CC/8FCCC7F88F5711F09C51EC3BC4F9AE02/6579B1188F5811F0BE083D3DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:fb00:1000::/47

    Signature Algorithm: sha256WithRSAEncryption
         93:aa:26:69:3f:e6:58:ff:fb:6b:a9:27:03:79:53:2f:5a:60:
         7e:c1:2e:81:1c:d5:89:d4:ff:07:d2:56:9a:ba:12:b8:04:40:
         5a:08:ad:aa:8c:d7:4c:f1:8f:8a:ad:de:55:56:c2:d4:bc:3a:
         d4:a2:8f:61:74:e6:9a:cc:e9:2b:bd:98:23:a1:d3:b2:21:07:
         63:57:7e:94:db:55:47:77:b3:11:e2:fc:6f:1c:0e:c6:ba:ea:
         84:a9:d9:e1:54:74:e8:43:86:9c:06:e2:e4:c9:a4:6a:71:87:
         ab:0c:b9:85:4b:2e:73:2c:73:10:a6:e4:1c:a4:35:ea:85:8d:
         45:b1:4c:e3:26:cf:2a:fb:90:ad:8a:a5:6b:1c:a8:e2:79:0c:
         a0:14:b1:d6:08:ec:87:c8:1f:bf:1f:59:7b:2a:3d:5c:4b:d1:
         ab:5d:d1:c3:ba:91:e8:ac:f6:5a:e7:d9:fb:09:1e:65:07:82:
         b1:8f:c2:2d:2c:07:80:3a:14:a2:80:76:95:38:6b:bd:28:75:
         db:4e:f8:d5:07:ee:ac:4e:a4:c3:cb:b6:5d:84:ba:fe:10:1d:
         9e:4b:ac:3c:d5:85:16:40:d6:da:c5:aa:93:bd:a3:25:c5:63:
         75:b8:9f:c7:53:67:29:8a:7a:ae:d0:12:d3:a3:c4:a5:ae:00:
         99:85:92:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:59:10 2026 by rpki-client