Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1275EBB054C311EFB296F71BC4F9AE02.roa
File:                     1275EBB054C311EFB296F71BC4F9AE02.roa (raw, json)
Hash identifier:          3nkDOLV4KguPdhTDzi1Phbi/0iWUGasIdGvz2WUfehU=
Subject key identifier:   28:05:42:31:24:39:5D:91:3F:59:E0:8B:DD:1D:80:71:44:A8:98:8D
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       106E
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1275EBB054C311EFB296F71BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:30:30 +0000
ROA not before:           Thu 22 May 2025 20:07:44 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153189
IP address blocks:        2406:840:fc60::/44 maxlen: 48
                          2406:840:fef4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4206 (0x106e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:07:44 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a493d6-c730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8a:c7:e8:fe:7d:83:00:b0:22:44:31:75:de:
                    d5:e6:4a:25:03:31:4d:d4:a6:55:dc:4b:99:3f:d1:
                    39:1d:c1:6e:94:d0:2a:6f:46:43:6e:49:03:0f:ba:
                    00:d6:02:97:3d:dc:29:e4:c6:19:f2:4c:61:75:ef:
                    5e:95:5b:8d:6b:2b:47:4e:0a:fa:b4:b5:54:a9:00:
                    fd:99:66:74:07:27:ff:dc:1b:a1:e5:79:7b:b2:29:
                    a4:3f:8c:69:e3:39:a1:d5:ff:88:45:72:0d:5f:50:
                    26:a4:cf:32:0b:66:48:70:b5:15:40:ba:c5:74:f6:
                    c6:98:01:d8:59:37:2b:5a:45:8b:44:b9:e1:ce:23:
                    9d:2c:3e:d1:6d:46:2c:6c:da:76:60:fa:19:bf:6c:
                    fe:e8:f5:9c:a7:75:91:e8:74:51:9d:f4:e3:9b:3e:
                    c7:fe:41:31:9c:99:bf:2a:c3:f3:85:d1:63:73:e0:
                    39:8b:cc:b2:29:9b:47:bb:15:42:09:70:be:5d:e9:
                    e5:54:15:49:88:09:d1:d5:8c:cc:8d:b6:44:09:5e:
                    de:63:22:b5:a8:21:ad:d2:3b:3b:9e:d3:d3:00:f4:
                    c7:cf:53:d7:50:a7:c4:6a:7d:3b:d1:57:ce:e6:f1:
                    3e:59:34:ae:7f:98:fb:53:87:67:2b:cd:f2:d7:40:
                    19:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:05:42:31:24:39:5D:91:3F:59:E0:8B:DD:1D:80:71:44:A8:98:8D
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1275EBB054C311EFB296F71BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fc60::/44
                  2406:840:fef4::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:da:4d:46:91:12:61:1b:0c:87:09:a7:ef:ad:59:8a:31:c3:
         4c:53:2f:b8:3d:12:47:79:d2:7d:b6:52:e0:6a:50:54:67:ea:
         98:af:15:db:ff:3c:11:b6:3b:02:a0:f1:b5:d0:a2:e3:2b:cb:
         3c:85:83:2f:04:b0:d2:b1:f4:1a:73:e3:d2:26:0e:44:4a:58:
         95:17:74:4a:b3:41:77:c7:e0:88:ce:d7:30:54:92:b7:b1:8c:
         10:2f:13:d4:05:cd:f0:3c:1b:33:f6:8d:ed:8b:f1:3d:3b:fe:
         ef:f3:33:88:48:af:80:07:dc:7f:84:69:a5:14:ad:99:d1:d9:
         7d:dd:26:81:2a:82:89:f2:38:3d:ba:e2:e8:be:c3:52:15:13:
         3f:9e:3c:3c:99:95:cb:dc:85:4d:68:86:45:f8:e6:2b:61:14:
         f4:8d:d3:34:59:4e:31:c5:3c:85:b3:74:c5:d7:8b:0d:5f:9b:
         41:29:33:68:cf:80:43:8c:cd:d7:51:a9:12:e7:55:ed:cb:ef:
         1f:af:bd:5e:f5:a1:7a:21:10:98:1b:80:1e:2d:43:5d:db:00:
         64:8c:4a:2e:c9:ca:7e:07:c3:71:37:86:57:e5:cc:9f:f6:18:
         61:67:3a:89:94:a0:e2:f8:d7:e2:13:35:cf:ea:47:d9:3f:f9:
         6e:d5:12:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:24:02 2026 by rpki-client