Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/10D2721054C311EFB296F71BC4F9AE02.roa
File:                     10D2721054C311EFB296F71BC4F9AE02.roa (raw, json)
Hash identifier:          weNPT3JHlpjirvKZLJlxAgPrOc7EKE602d72gCMMs5k=
Subject key identifier:   D9:FC:9B:DB:4E:D3:2D:82:31:D5:09:AE:B5:40:23:93:15:93:F6:6F
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       106B
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/10D2721054C311EFB296F71BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:30:27 +0000
ROA not before:           Thu 22 May 2025 20:07:40 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153185
IP address blocks:        2406:840:fc30::/44 maxlen: 48
                          2406:840:fec2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4203 (0x106b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:07:40 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a493d3-451c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5a:45:33:1d:c6:01:e4:14:5d:1b:3d:d8:80:
                    4b:cb:b2:02:06:27:c9:22:a5:56:d9:ce:b0:56:77:
                    cf:b4:85:67:f6:f3:a4:a6:2f:68:23:d7:29:d8:bb:
                    05:81:2b:4c:df:62:be:af:6b:88:9e:2a:ad:f8:92:
                    cb:93:99:c0:b6:58:6c:5b:5c:03:a7:bb:92:c3:66:
                    c8:c9:bc:7c:32:ce:c1:fe:be:e3:77:01:77:76:c9:
                    8e:4b:eb:73:88:8a:a4:e3:93:53:06:50:3f:0a:d1:
                    3c:24:74:8a:8b:4b:d9:2b:f3:d1:31:de:e8:3d:eb:
                    8c:89:5f:1f:cc:09:e4:3d:a6:fe:db:57:5c:87:c2:
                    e9:06:6d:83:b1:8e:61:4b:ec:d8:64:e2:15:b7:04:
                    2b:78:ec:49:e2:59:50:f7:44:73:75:31:ca:8d:4f:
                    04:61:95:1c:12:46:f4:c4:06:6d:47:53:57:36:77:
                    11:1e:3c:8f:50:f6:04:3b:e5:db:8c:00:b3:1d:ab:
                    b4:b4:81:e8:01:41:87:67:3f:05:87:9b:98:2b:2d:
                    1a:df:a7:c8:d1:b9:f4:a8:09:5f:8a:b1:ae:bc:c8:
                    1a:27:0d:6d:a1:1d:af:3d:b7:e8:59:14:5e:56:29:
                    8d:4d:c1:8b:f7:8c:de:23:81:f3:57:6a:99:84:f5:
                    7b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FC:9B:DB:4E:D3:2D:82:31:D5:09:AE:B5:40:23:93:15:93:F6:6F
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/10D2721054C311EFB296F71BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fc30::/44
                  2406:840:fec2::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:87:02:26:a0:29:08:92:ee:3e:61:af:47:e6:5e:4d:4c:11:
         69:9d:2b:07:e6:1b:bd:44:ab:05:29:db:47:1e:e7:7b:ea:e7:
         2e:8d:10:50:5a:d9:2b:6f:7c:76:10:75:53:3c:de:af:a8:ae:
         de:86:10:81:e0:04:b8:f9:48:b2:c6:03:fd:9c:13:19:a0:5a:
         55:7e:c8:10:1b:c8:9c:d4:ca:52:49:9e:2d:12:3d:8f:07:6d:
         e2:38:fa:9a:7a:75:07:b0:ab:61:92:ab:a7:bf:55:9f:a0:23:
         5e:f5:54:6f:11:65:a9:27:15:9b:23:73:81:ab:5b:62:13:bb:
         4f:7f:c6:a2:44:d0:f0:4f:34:74:4a:ea:c6:5f:7b:63:02:92:
         90:ea:d8:9d:74:57:f1:d6:c2:37:e6:f4:b3:4a:61:82:9a:26:
         75:40:6b:bd:2d:49:4f:1d:21:51:e9:81:57:10:b3:e7:28:36:
         9d:9f:76:66:cb:99:ba:e3:28:2f:06:b7:01:c2:42:0a:9d:60:
         ea:e6:3c:10:94:e4:28:89:64:36:d4:df:ad:46:ff:30:27:f9:
         07:d4:03:c1:80:ad:a9:54:85:34:ec:26:37:97:52:16:c0:ba:
         c0:0b:28:aa:ef:50:7c:0e:1d:e4:2c:c1:28:80:70:aa:bc:ae:
         d1:b5:4d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:09:15 2026 by rpki-client