Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7FD58B60CC3111ECB2C4EA3CC4F9AE02.roa
File:                     7FD58B60CC3111ECB2C4EA3CC4F9AE02.roa (raw, json)
Hash identifier:          FH79RWedLVXOpwJCzlLKM8thVd4H480Puwel6dAGuOA=
Subject key identifier:   00:EB:C4:33:9B:09:BB:6C:D8:24:29:CA:4D:7A:B1:13:DA:36:B6:DC
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1147
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7FD58B60CC3111ECB2C4EA3CC4F9AE02.roa
Signing time:             Fri 22 May 2026 20:25:18 +0000
ROA not before:           Fri 22 May 2026 20:25:18 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     142641
IP address blocks:        2406:840:ff00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:38:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4423 (0x1147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:25:18 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a10bbae-6a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:97:f9:51:63:53:a3:76:d9:d4:98:6c:5e:d3:
                    5f:bc:c8:9c:5b:6f:7d:3b:12:8f:28:e6:6e:8e:55:
                    85:dd:d2:31:82:45:eb:f4:0b:cc:45:13:eb:6e:fe:
                    af:70:c4:bd:e4:dc:61:5e:13:63:d0:bf:fa:72:13:
                    58:fe:4b:de:3b:87:e0:b9:d9:cf:5d:87:45:69:c3:
                    10:42:ef:b3:b2:39:c4:2f:88:b5:a8:45:e7:b2:9b:
                    f7:62:37:c0:ca:b5:f9:b1:26:25:97:14:d8:8b:5f:
                    f4:5f:19:38:09:6c:2f:85:f9:7b:06:71:26:d1:b5:
                    13:ed:58:ff:74:2b:5c:f7:e6:64:52:6f:06:e7:30:
                    9c:03:80:e7:5d:ab:c7:aa:d2:8b:50:97:2e:44:f2:
                    b7:54:e3:69:74:48:35:30:31:a0:a1:16:23:f7:f9:
                    17:cc:54:a7:22:85:a2:74:59:34:63:6a:64:3d:17:
                    8a:17:70:81:c3:51:d6:84:bb:3c:9a:3d:d4:72:06:
                    c2:41:08:97:3b:70:7e:df:ae:e2:46:54:87:c3:fe:
                    c7:4f:08:05:3d:df:5c:17:8c:97:e0:fa:22:4c:a0:
                    d0:1f:72:03:40:56:ce:31:91:a1:fd:e4:a2:bc:b0:
                    17:38:47:5c:94:22:bb:26:46:0a:46:5e:a8:fd:92:
                    fc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:EB:C4:33:9B:09:BB:6C:D8:24:29:CA:4D:7A:B1:13:DA:36:B6:DC
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/7FD58B60CC3111ECB2C4EA3CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a1:d8:71:58:f5:17:b2:97:46:d3:49:2e:52:3c:5c:6d:44:0b:
         1e:a9:b7:c2:af:ec:97:a1:0e:06:e5:64:15:2f:eb:27:25:6f:
         e4:59:5a:46:8a:1d:d9:82:7a:b0:b0:5f:92:5d:71:a9:fc:9f:
         e6:ab:2d:09:c9:cf:e3:23:f1:fd:76:08:b6:f6:97:bf:e7:00:
         7a:41:c4:5b:1c:4f:00:39:f3:f2:db:62:86:42:63:0f:11:ab:
         d6:c5:f5:6c:fe:51:e9:b9:e0:88:b5:0e:b3:22:98:6d:ad:85:
         13:b3:25:78:03:01:9f:71:08:68:79:58:e9:14:55:e9:d8:e6:
         c5:5e:49:ad:e4:5a:ad:23:d7:af:b3:ef:08:4a:91:66:87:e6:
         cf:16:0f:ec:ed:4c:50:ee:2b:c2:e0:f7:48:e6:0f:e0:a2:8a:
         44:16:29:c3:8e:5e:52:f9:bc:28:1c:2b:c1:2f:af:3b:b0:33:
         cf:aa:e7:1f:9b:91:13:4b:21:fe:9f:c4:7f:04:a9:c7:9d:11:
         4e:cc:d2:88:3c:ed:be:42:12:4b:67:6f:a1:ac:6c:f8:e6:7b:
         12:14:66:da:13:03:11:a8:4a:ca:b8:64:bf:c1:49:f6:96:a4:
         33:4f:17:6f:3b:c9:e8:86:07:99:58:4a:63:1c:b9:1c:b1:c1:
         e1:52:b7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:58:13 2026 by rpki-client