Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/750910509E7411EE9B044572C4F9AE02.roa
File:                     750910509E7411EE9B044572C4F9AE02.roa (raw, json)
Hash identifier:          cUlLMemXds/G+ckDxlOVlNYxutb3ZLK5Rjwb97AIVRY=
Subject key identifier:   D0:4D:F9:BD:C6:F1:06:C7:CA:92:97:78:27:36:3E:73:82:50:CB:4E
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       115C
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/750910509E7411EE9B044572C4F9AE02.roa
Signing time:             Fri 22 May 2026 20:25:59 +0000
ROA not before:           Fri 22 May 2026 20:25:59 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     152186
IP address blocks:        2406:840:fec5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:38:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4444 (0x115c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:25:59 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a10bbd7-e1fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0b:6b:5c:74:1b:53:d9:76:cf:1f:11:d9:df:
                    c2:4f:48:5b:e3:b4:a6:ee:49:d0:96:7d:ee:0c:af:
                    00:83:de:18:39:48:17:ec:67:3c:27:f5:88:cd:5b:
                    a2:c5:4a:d4:75:34:17:8f:94:98:69:5d:c1:ba:bb:
                    70:ac:47:15:d3:b5:3b:ba:b6:d4:41:bb:e5:29:51:
                    62:fd:7a:68:cf:f0:69:7e:9b:82:32:2c:91:91:0c:
                    f9:cf:9c:b8:31:00:05:fd:dd:6b:42:81:23:bd:01:
                    56:0a:c8:9a:f2:f7:9c:21:ef:ff:b2:42:84:7a:1e:
                    30:93:80:0a:2a:97:27:f0:87:60:2b:ee:dc:3d:4f:
                    f1:40:b9:8a:1d:cd:75:4b:e9:88:1d:9e:e7:ea:2b:
                    35:e8:bb:53:04:40:8c:1f:b7:81:f7:e9:d3:90:c5:
                    55:5f:a9:cd:49:ae:ea:58:68:a0:5d:71:59:4f:35:
                    0e:ca:ca:e2:3f:cb:58:15:5d:c8:44:b8:11:66:42:
                    e9:99:d8:1b:b7:e0:ab:6d:73:2b:5b:7d:8e:fa:f2:
                    96:1c:6d:ba:62:58:33:84:c1:d9:c5:19:72:d9:fd:
                    11:4b:bf:f2:44:ee:78:28:fe:c5:ee:82:dc:1d:7d:
                    59:d7:34:82:f7:e7:75:fb:9f:32:d4:4d:a6:89:68:
                    1a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:4D:F9:BD:C6:F1:06:C7:CA:92:97:78:27:36:3E:73:82:50:CB:4E
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/750910509E7411EE9B044572C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:fec5::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:6f:7e:63:7b:c4:99:9f:ed:d8:3e:62:b6:47:b3:b5:ac:eb:
         71:31:20:55:c2:89:27:27:c7:49:15:35:b6:1a:bd:88:f4:47:
         56:90:3f:7c:2c:95:b8:ee:36:52:28:f0:04:c5:50:64:7b:ef:
         97:3c:2c:a3:c7:c8:65:2b:02:26:37:a9:55:23:33:56:32:79:
         9e:82:76:21:76:68:69:f1:7f:2c:3b:88:69:14:76:e1:14:78:
         0c:10:91:3e:32:fe:23:0f:89:8b:fb:7f:22:5a:87:ed:8f:63:
         62:4a:1b:19:14:f8:93:e9:80:a7:e5:c9:00:ad:4f:6a:8f:ac:
         7f:85:6e:80:ec:3d:5d:bf:97:57:4c:72:5e:17:d6:a7:f0:d2:
         95:16:ad:7d:32:fa:47:8a:7e:ea:23:ed:b4:86:1c:99:34:72:
         69:4a:c2:95:3b:01:bd:e3:be:53:aa:04:5e:33:a6:17:de:2e:
         43:0f:6a:24:ec:48:f6:c1:e2:36:5c:50:e4:d2:58:03:f8:f2:
         64:84:ad:a6:bb:94:3b:5f:1c:b5:8a:4e:32:6b:0f:e4:40:88:
         7d:04:04:41:14:3b:44:7b:f0:15:9e:05:c3:ef:97:4f:71:ac:
         4d:cb:f3:70:6a:8f:b0:38:26:9c:c4:03:56:11:ea:5f:d5:a3:
         02:1c:ee:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:15:02 2026 by rpki-client