Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1E895050316D11EFB8CB9276C4F9AE02.roa
File:                     1E895050316D11EFB8CB9276C4F9AE02.roa (raw, json)
Hash identifier:          82qoOqrqGP0xVXg4nqCBM14rL2szRtxzESKG3S1fGpc=
Subject key identifier:   B1:E1:29:57:DC:5A:40:94:53:E6:63:B8:AB:17:CB:77:9E:0C:54:D6
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1099
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1E895050316D11EFB8CB9276C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:31:10 +0000
ROA not before:           Thu 22 May 2025 20:08:31 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     63279
IP address blocks:        2406:840:ece0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:12:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4249 (0x1099)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:08:31 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a493fe-f01b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8a:98:e0:4a:0f:76:f8:ee:b0:d9:51:e8:dd:
                    7a:85:b7:06:7a:5b:6c:ff:73:59:79:a8:f2:32:33:
                    c8:f5:53:cb:29:2a:c2:5b:29:31:da:13:7f:6f:9d:
                    87:af:8a:48:87:e6:5c:71:ba:78:af:99:68:1c:5e:
                    2e:1e:61:34:ef:33:32:b3:48:f6:28:b7:97:2c:15:
                    da:89:b3:d8:61:f0:cb:16:ef:61:81:ed:e8:29:a0:
                    91:34:3c:68:de:02:b7:a6:dc:03:0c:b7:47:89:60:
                    10:3e:85:b9:d9:15:1a:6f:31:a4:d0:41:8c:6f:7e:
                    3e:59:04:95:7a:b0:b5:02:98:c2:dd:0a:c7:39:32:
                    9e:b8:3e:b9:32:34:de:50:40:e6:06:e4:ee:81:c7:
                    5e:fb:65:57:99:ad:85:f0:b0:bb:dc:19:bb:1e:6a:
                    a5:52:7d:ec:48:74:8b:9f:73:26:fe:b0:e2:bf:fe:
                    85:bb:70:d2:53:3d:83:a5:d8:ff:e1:27:0d:cf:92:
                    15:ee:5d:73:47:31:29:ec:f9:0c:a0:f3:69:99:dc:
                    2e:68:e6:4c:89:5c:58:a2:57:6a:72:c0:26:e7:35:
                    79:b4:82:01:ce:a0:61:ea:90:a2:50:e4:99:70:71:
                    78:46:73:51:37:42:15:b7:4d:43:68:3c:b6:c1:b4:
                    66:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E1:29:57:DC:5A:40:94:53:E6:63:B8:AB:17:CB:77:9E:0C:54:D6
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/1E895050316D11EFB8CB9276C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:ece0::/44

    Signature Algorithm: sha256WithRSAEncryption
         4e:5e:0b:5c:99:03:1e:8d:d3:ab:a3:55:b9:69:d4:0b:e8:3e:
         f7:56:90:dd:51:a9:e9:23:30:4a:71:03:5a:74:56:75:a1:9e:
         25:77:37:9e:66:cb:b1:a1:9e:cf:e5:4a:b9:63:12:9c:ff:49:
         31:bd:8e:8f:60:7a:17:15:4a:cd:a9:2e:d7:85:5d:8d:28:f6:
         6c:f6:c5:8e:27:0c:29:6e:c9:20:b3:e3:b5:fe:ba:fd:ec:e6:
         9b:2e:03:cc:52:54:31:a0:7f:1c:fa:17:89:d5:4b:fd:e3:75:
         a5:cf:6d:b2:d7:a0:04:10:b0:07:8e:47:32:33:3e:fc:79:c0:
         6b:4d:41:6a:9c:94:ee:24:71:f4:e6:30:08:ea:5c:b2:32:2d:
         06:ae:71:17:0a:83:4c:50:42:7c:58:6d:ea:9b:37:58:1f:42:
         87:59:cb:c6:6f:71:12:f6:5d:76:0f:ec:10:1c:de:d7:b7:0c:
         2e:97:ae:59:72:b8:38:f6:e6:55:80:11:f1:18:9b:84:79:b9:
         3a:07:dd:5d:d8:b8:e9:68:54:4a:a7:01:4f:45:e6:88:18:cd:
         a3:f5:f9:2d:44:be:c2:17:5a:72:8a:69:9a:4a:00:6f:d4:29:
         c4:68:da:67:85:7a:70:53:5d:0a:6b:c6:5b:26:c4:d3:1b:17:
         26:a4:47:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:22:43 2026 by rpki-client