Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/5FCBF00EB89511EFA8E14384C4F9AE02.roa
File:                     5FCBF00EB89511EFA8E14384C4F9AE02.roa (raw, json)
Hash identifier:          Zq9XaghvHBgenbE2aZa42nyj5aMtJ6AQHtZPwdfC2pM=
Subject key identifier:   D5:93:71:E0:9F:C1:79:FE:9C:02:96:F2:7E:17:00:43:0F:1B:B0:BA
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       112C
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/5FCBF00EB89511EFA8E14384C4F9AE02.roa
Signing time:             Fri 22 May 2026 20:24:29 +0000
ROA not before:           Fri 22 May 2026 20:24:29 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     137908
IP address blocks:        2406:840:ee40::/44 maxlen: 48
                          2406:840:feaf::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:38:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4396 (0x112c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:24:29 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a10bb7d-0de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8b:05:5f:72:c5:44:b4:31:63:a3:b7:40:34:
                    00:15:5a:d7:de:0c:5d:cd:26:5d:c9:a4:fa:5c:c2:
                    d6:ed:7f:de:05:d3:76:ed:e5:c4:7c:15:59:fe:6c:
                    a8:75:35:f7:6a:77:64:58:19:b2:95:40:9a:e8:c1:
                    d4:58:6e:97:54:e7:ba:52:3e:a5:9e:6b:e3:f0:2b:
                    99:52:31:19:fc:7a:13:8b:03:e1:6f:0b:4e:4d:be:
                    ad:07:ca:0c:79:f7:da:7e:c2:a2:7e:a8:40:c2:7f:
                    c4:13:13:95:ef:0a:33:a8:c9:3b:b0:9a:47:25:86:
                    cc:f5:24:5f:e0:74:c7:29:6f:d7:9c:26:30:7f:f9:
                    52:af:fc:a9:20:5e:1c:bd:b5:60:fe:13:91:b5:d8:
                    b2:3c:f3:ff:bb:ed:6b:0c:41:69:98:91:75:82:eb:
                    17:0c:1e:04:12:81:c4:f9:81:8a:ea:cc:46:8d:a5:
                    35:b7:28:6d:7e:7a:0e:56:aa:5c:ac:52:75:4b:81:
                    ac:82:f1:78:f4:cd:45:56:75:1d:5a:10:be:d8:c3:
                    85:9f:6b:1c:0d:d4:12:24:09:39:d9:3c:3d:a7:63:
                    ca:e3:54:1e:52:b8:ad:63:d0:21:b3:4e:b9:60:7b:
                    07:b4:09:ef:3c:eb:04:1e:2e:83:b4:43:ac:29:25:
                    b7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:93:71:E0:9F:C1:79:FE:9C:02:96:F2:7E:17:00:43:0F:1B:B0:BA
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/5FCBF00EB89511EFA8E14384C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:ee40::/44
                  2406:840:feaf::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:32:55:f3:db:79:fd:07:61:e5:82:38:87:92:a8:8b:83:0e:
         cb:9b:a1:62:de:de:e5:8a:8f:03:91:49:9e:8d:1c:e1:55:af:
         bc:28:cd:e1:da:aa:71:06:52:97:69:f5:99:b4:11:a6:cf:a6:
         10:7f:0c:41:0e:76:92:65:5e:e9:19:f9:22:cf:0f:18:ac:0e:
         5c:e8:0b:01:d2:81:3b:42:59:e9:06:11:ac:2e:cf:f3:65:92:
         17:60:ef:19:01:30:22:30:c3:da:2d:c9:ec:9d:9f:d6:45:3f:
         9b:ab:49:0e:b5:2f:52:11:a8:ee:f5:22:38:ef:08:ab:e8:a6:
         a0:df:ca:a4:30:5c:45:a6:97:27:d7:d3:af:bf:c1:72:fc:c6:
         21:84:e6:bb:84:e0:a0:56:24:f9:54:a1:56:44:b3:b8:68:12:
         ef:df:d0:45:31:ad:79:bc:c3:71:ce:3d:02:9c:e8:f7:1a:0f:
         fc:c6:64:87:8c:61:94:d3:f2:b3:85:5e:1c:1b:d9:86:fd:f5:
         eb:63:40:9c:d9:47:e5:89:1e:45:91:d5:16:12:5e:b5:df:44:
         f3:70:ed:4e:43:57:2a:22:8b:01:5c:1e:be:38:f3:c3:05:74:
         ec:79:f0:aa:5d:88:8e:ea:87:1b:d3:da:1e:0a:0e:e5:98:63:
         d1:f3:19:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:04:47 2026 by rpki-client