Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/618A7D781F7111F09D1AC487C4F9AE02.roa
File:                     618A7D781F7111F09D1AC487C4F9AE02.roa (raw, json)
Hash identifier:          qEr6VEvXI6OBrYj9VZWiZG1VxOQGnfc0jjazeMYNLQ0=
Subject key identifier:   6E:1F:4B:01:71:55:80:36:BB:01:AD:65:11:E7:AA:0C:3E:C9:A2:F6
Certificate issuer:       /CN=A912986D/serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB
Certificate serial:       0BF2
Authority key identifier: 17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/618A7D781F7111F09D1AC487C4F9AE02.roa
Signing time:             Thu 29 Oct 2026 10:20:54 +0000
ROA not before:           Thu 29 Oct 2026 10:20:54 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     19637
IP address blocks:        2406:2200:560::/48 maxlen: 48
                          2406:2200:568::/48 maxlen: 48
                          2406:2200:57e::/48 maxlen: 48
                          2406:2200:596::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl
                          rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Nov 2026 18:56:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3058 (0xbf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912986D, serialNumber=1717ACAC053F131E2261452736513E4E8F626CDB
        Validity
            Not Before: Oct 29 10:20:54 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6ae31e06-52b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c1:66:f6:f0:d8:26:93:4f:71:92:13:5e:6a:
                    b9:94:93:1a:b9:37:e0:84:29:b7:99:57:84:ab:c4:
                    b9:bc:40:4f:eb:30:3c:56:06:61:7a:8e:f0:d3:1c:
                    59:17:32:48:80:fb:ee:f2:2c:1f:18:6f:be:31:39:
                    fb:41:63:ea:a8:c2:43:06:19:ea:c6:16:34:44:dd:
                    2b:f3:51:13:26:d8:d4:6e:4b:c2:2b:ec:b7:9c:55:
                    40:31:f8:a5:0f:45:d8:59:c2:42:5a:76:0d:3a:bd:
                    9b:29:ba:48:5a:3b:97:17:3a:f9:44:01:5c:01:4a:
                    10:39:a3:af:58:e9:ba:e5:1b:83:a0:f6:b1:2d:87:
                    dd:cd:ee:f3:ce:51:e9:2e:3e:df:0c:87:0a:4a:f0:
                    b2:4c:64:f2:11:8b:b4:e8:1c:85:75:d8:91:0d:e6:
                    fd:4b:7e:23:d9:80:ef:a2:c7:f8:74:7f:47:4e:a3:
                    d4:f0:04:9a:3c:6d:03:43:57:92:da:5c:c3:9c:a1:
                    25:7e:a6:2e:d6:1f:b8:fb:b0:b4:14:6f:bb:79:ad:
                    62:4b:ab:9a:0c:bc:ac:d1:e9:f1:68:af:b9:a0:94:
                    30:ad:5b:50:d7:bd:59:b7:1e:e2:e9:01:8a:6e:fb:
                    d2:e0:bf:10:47:da:35:eb:09:61:d4:16:2d:59:a4:
                    5a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1F:4B:01:71:55:80:36:BB:01:AD:65:11:E7:AA:0C:3E:C9:A2:F6
            X509v3 Authority Key Identifier:
                keyid:17:17:AC:AC:05:3F:13:1E:22:61:45:27:36:51:3E:4E:8F:62:6C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/FxesrAU_Ex4iYUUnNlE-To9ibNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FxesrAU_Ex4iYUUnNlE-To9ibNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912986D/A0074D18533B11EABAA75B3AC4F9AE02/618A7D781F7111F09D1AC487C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:2200:560::/48
                  2406:2200:568::/48
                  2406:2200:57e::/48
                  2406:2200:596::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:6a:9a:16:bd:9b:41:fe:67:38:d6:fe:7b:44:26:6e:c0:90:
         7d:f9:7c:30:f2:f5:9d:20:35:d9:9f:ce:d6:76:e9:b8:8d:f7:
         47:b3:46:db:c9:6a:f2:6a:59:41:72:e1:1d:fe:1f:d1:77:22:
         ca:93:e2:cc:15:bd:bb:9e:99:34:66:fd:71:d8:57:91:04:fe:
         ec:c6:86:97:7e:ec:c3:07:f3:57:25:ca:ed:a9:6c:31:65:08:
         a5:cf:2e:88:24:0b:1d:bd:89:ad:39:5e:69:6c:81:13:81:72:
         e4:b8:86:99:f6:d1:56:ba:b0:6e:8f:75:91:e1:ec:cd:ed:98:
         35:19:6f:c4:57:de:00:96:52:81:8d:3e:94:16:85:b7:16:92:
         14:40:91:67:dd:bf:cc:eb:7f:da:2c:6a:01:ee:5f:9c:06:7d:
         5a:bb:74:0b:cc:09:dc:32:d4:04:27:31:13:29:76:cc:23:cb:
         dc:c6:ab:9b:91:ae:8a:9e:6a:af:b3:3c:1f:da:5a:dd:52:42:
         a6:9b:4a:ec:e7:fd:12:f9:4d:e5:d6:40:c5:01:d4:82:02:1b:
         fa:c4:c1:f4:1c:6e:df:88:79:98:d0:45:88:69:cc:ff:fa:04:
         87:16:05:67:2c:57:7f:5a:f5:b0:0f:e2:78:5a:9c:b7:e8:3f:
         e6:f1:7a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:52:18 2026 by rpki-client