Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/3E6E7A0C5FFB11EDBDF5A627C4F9AE02.roa
File:                     3E6E7A0C5FFB11EDBDF5A627C4F9AE02.roa (raw, json)
Hash identifier:          hULC6uSAlepciu0KIOcIk9poH1lBPmwK9Cbq5y+OX4c=
Subject key identifier:   6C:55:2E:14:95:47:BB:EB:8B:7B:C6:33:A5:A3:BF:50:66:8B:84:DD
Certificate issuer:       /CN=A9198996/serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718
Certificate serial:       0424
Authority key identifier: 69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/3E6E7A0C5FFB11EDBDF5A627C4F9AE02.roa
Signing time:             Fri 05 Jun 2026 01:30:07 +0000
ROA not before:           Fri 05 Jun 2026 01:30:07 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     138986
IP address blocks:        2402:e940::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl
                          rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1060 (0x424)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198996, serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718
        Validity
            Not Before: Jun  5 01:30:07 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a22269f-0da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b7:27:18:b4:48:bd:90:7b:85:46:f2:08:9f:
                    cf:69:cb:2e:2b:97:65:04:66:d6:22:00:b5:84:4c:
                    35:46:fc:8b:39:9d:7f:9a:d9:fb:b3:31:27:c1:fe:
                    44:17:09:e1:85:6b:78:10:58:d4:13:11:68:30:fc:
                    52:39:85:c8:23:77:1b:25:46:30:ae:4e:86:4e:05:
                    53:86:86:7f:50:5f:4b:1b:f5:96:f8:9f:f2:21:36:
                    2d:d2:c4:97:1b:c5:39:fd:cf:0a:ac:60:3f:64:a7:
                    81:5e:29:1a:39:72:19:8b:f2:dc:33:d9:5e:17:2a:
                    1c:e5:31:16:d4:74:96:74:eb:1b:26:7d:49:5f:d1:
                    e5:0f:70:a3:c3:7f:d4:bc:eb:7f:d5:59:b5:fc:b4:
                    db:32:19:3b:55:1f:03:01:c0:9e:1e:a8:67:0b:e5:
                    7c:e1:43:7b:bc:ad:34:c5:49:17:79:65:40:b3:0f:
                    5c:77:19:95:21:6d:6d:7b:df:bf:db:7b:6f:17:8c:
                    2d:2e:f0:95:d4:bf:d8:f7:09:93:90:4b:29:b0:2d:
                    0c:d9:4b:67:d4:76:ec:19:bc:3d:ce:5e:6b:d2:2b:
                    83:0e:a2:a2:60:fd:be:2c:8c:98:71:27:58:41:be:
                    80:20:1c:d5:6e:a2:4c:9b:71:6a:2e:4c:27:bb:c9:
                    18:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:55:2E:14:95:47:BB:EB:8B:7B:C6:33:A5:A3:BF:50:66:8B:84:DD
            X509v3 Authority Key Identifier:
                keyid:69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/3E6E7A0C5FFB11EDBDF5A627C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:e940::/44

    Signature Algorithm: sha256WithRSAEncryption
         a4:2b:02:ff:f6:24:6d:50:50:e0:d3:f8:e9:44:cc:8a:c0:39:
         b0:f3:bf:ce:f5:32:96:42:68:10:f5:d2:79:eb:55:59:f8:63:
         35:3d:2e:59:57:de:a8:a1:48:56:2e:fa:ac:23:2e:2c:9b:49:
         15:51:b5:13:47:68:9d:bd:51:65:6f:b9:46:eb:55:3e:91:6d:
         c6:0e:09:f7:b5:d4:21:89:aa:b8:df:3b:95:9b:46:ad:f3:be:
         51:1f:d4:72:c2:66:92:fb:58:42:9f:3f:aa:ed:f9:4a:7f:28:
         76:29:3a:96:a8:20:6e:64:38:62:4c:d0:cc:8c:be:fc:5d:20:
         6c:bc:f7:73:34:d0:aa:4c:75:e8:58:94:b7:09:81:23:ac:c9:
         39:3b:03:a5:98:10:18:94:56:4a:66:58:15:5d:a2:4f:52:54:
         ec:9f:48:7b:36:d2:fc:8a:8e:6c:ec:7a:e5:cc:58:a5:c0:a9:
         43:70:e4:8c:d4:0d:eb:4b:12:53:00:59:ea:c2:2e:8e:14:e6:
         ee:5e:c0:1c:f3:8a:7c:42:75:17:95:17:99:43:2b:a0:a2:e8:
         b3:5f:88:b4:44:67:24:2e:ff:4a:7b:68:28:7d:08:a4:54:f1:
         dd:c0:e8:9a:f4:bc:c5:61:f2:16:fe:dd:1c:0a:e1:31:44:40:
         4f:f7:27:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:44:42 2026 by rpki-client