Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1154663A54C311EFB296F71BC4F9AE02.roa
File:                     1154663A54C311EFB296F71BC4F9AE02.roa (raw, json)
Hash identifier:          Etyl3DuTLrV7kHKQfq311UbJvQBHgXDuUOBB2+bTVvI=
Subject key identifier:   1C:56:5F:F0:84:F7:53:A1:38:D7:75:1D:0D:AA:E8:17:58:9F:BB:E4
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       106C
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1154663A54C311EFB296F71BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:30:28 +0000
ROA not before:           Thu 22 May 2025 20:07:42 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153186
IP address blocks:        2406:840:fc40::/44 maxlen: 48
                          2406:840:fefa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4204 (0x106c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:07:42 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a493d4-75fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:de:3b:5a:cf:d6:45:61:f5:b1:ba:2f:33:50:
                    e5:08:37:df:7c:81:a5:0f:ec:bb:94:58:35:d9:95:
                    d5:f1:6a:62:38:35:01:9d:33:90:9d:6b:57:28:0f:
                    2c:c5:24:ed:81:3b:eb:74:78:44:e7:a6:44:a9:0b:
                    59:58:7e:3b:98:63:d1:36:95:f1:83:0f:3e:a3:57:
                    26:5a:cb:df:7e:e2:bc:d0:4a:48:e3:b8:3c:13:8d:
                    64:fc:a6:79:74:10:ed:f7:1f:81:6c:65:96:bb:67:
                    80:9d:70:0a:49:ca:4e:21:22:87:cc:e1:38:7c:b2:
                    a7:8b:33:9a:16:77:49:2f:70:0e:da:ed:e4:af:72:
                    95:10:04:da:b0:d1:ab:c8:3b:52:8a:6e:b8:3c:bb:
                    07:67:0e:e5:fa:1e:06:3b:b7:30:37:32:7a:46:04:
                    3b:59:5c:e7:e1:d7:86:76:9b:e5:4a:1c:b8:e9:5d:
                    c5:e2:4e:a6:f0:5b:d4:81:33:f4:b3:3b:2f:ff:a7:
                    5f:41:0f:f4:2c:82:4d:91:3f:2d:df:15:14:e0:0b:
                    44:b6:80:6b:d5:bc:fa:33:89:a4:6b:e1:88:ca:59:
                    a2:ad:39:2b:d9:67:58:55:a1:70:c4:95:85:14:68:
                    7a:3e:c3:39:ad:e8:09:fc:34:23:28:03:9b:e2:d3:
                    5f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:56:5F:F0:84:F7:53:A1:38:D7:75:1D:0D:AA:E8:17:58:9F:BB:E4
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1154663A54C311EFB296F71BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fc40::/44
                  2406:840:fefa::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:81:b4:e5:e8:b3:1e:4f:f2:4e:44:82:33:66:38:ca:17:5f:
         4f:ac:ef:c0:57:d2:38:43:9c:f1:7d:95:c9:8f:20:db:25:ff:
         b7:01:76:7f:6e:8e:64:bf:44:7e:d2:26:65:86:af:bf:06:06:
         07:80:86:06:95:32:a6:ac:60:de:69:f2:1a:2d:72:3f:aa:57:
         e7:de:e6:ec:44:66:10:1f:27:f8:b8:f2:82:7b:9f:3f:aa:9f:
         8d:06:26:35:03:81:65:bd:1f:c3:bc:13:91:ae:4e:28:0f:a9:
         2f:33:4a:71:19:69:86:47:cc:41:32:e6:52:83:0a:45:86:c4:
         af:3a:b4:eb:4a:78:60:70:85:c5:0e:e0:df:4c:68:43:20:30:
         5c:dd:48:e5:ae:07:5d:9d:f4:e3:b8:7a:bf:89:4d:81:ab:73:
         60:50:ae:0f:eb:0a:f2:31:96:89:d1:0f:ea:84:2c:32:e8:36:
         af:eb:f9:25:c7:7d:7a:43:d8:75:19:64:89:53:4a:9a:17:e7:
         d9:a8:48:a9:62:15:9e:5f:83:c4:03:7c:7e:4a:3a:43:88:6d:
         f5:6f:e0:50:a7:8a:a9:dc:80:cf:a3:0b:f2:a2:bf:0d:5c:60:
         c5:d7:0c:68:7d:72:64:43:4e:c7:a9:82:a9:9e:56:01:f0:cf:
         d4:df:c9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:51:56 2026 by rpki-client