Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/5818925E826A11ECBF45DE23C4F9AE02.roa
File:                     5818925E826A11ECBF45DE23C4F9AE02.roa (raw, json)
Hash identifier:          zM/TfgLYOYbBDMUZLUpfMS0sNlYD5nRjMd67GVcRr98=
Subject key identifier:   7F:79:0C:7B:4B:50:FE:31:64:5D:DE:E7:A3:A9:1E:DD:8F:AB:71:63
Certificate issuer:       /CN=A917647E/serialNumber=FDD2507822183CE80759419D56540606A2486B4B
Certificate serial:       08FE
Authority key identifier: FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/5818925E826A11ECBF45DE23C4F9AE02.roa
Signing time:             Wed 06 May 2026 20:25:34 +0000
ROA not before:           Wed 06 May 2026 20:25:34 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     17439
IP address blocks:        2400:ffc0::/47 maxlen: 48
                          2400:ffc0:13c::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl
                          rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2302 (0x8fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917647E, serialNumber=FDD2507822183CE80759419D56540606A2486B4B
        Validity
            Not Before: May  6 20:25:34 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69fba3be-06b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f9:49:c1:56:3c:2e:24:6f:c4:01:d2:76:ae:
                    30:c2:c7:33:72:80:0e:dc:4e:f9:b4:c4:2e:1e:6a:
                    cc:ae:34:eb:a0:ae:c9:03:17:9c:44:2e:69:61:e2:
                    63:85:eb:0d:6f:1a:12:90:59:96:bd:c2:41:e6:ae:
                    5a:1a:3b:3b:6e:32:b7:31:7e:29:be:3e:7d:fe:67:
                    2f:e3:8f:d6:2d:e3:20:b2:1e:cc:e4:09:67:02:b2:
                    cc:59:88:f6:b1:70:e6:89:f5:87:cd:75:45:8f:3d:
                    ac:67:b1:18:bd:b2:97:b4:80:0b:82:7a:de:e4:74:
                    d9:94:cf:a8:f4:ae:71:b8:58:fb:ed:3d:cc:c8:d6:
                    67:c8:74:3a:cf:5a:67:f2:ee:c9:ce:e4:32:60:73:
                    44:63:09:16:79:78:c9:5e:7d:b2:2f:11:dc:7a:c6:
                    56:22:b9:42:ce:47:08:84:bd:d7:6d:74:29:89:e1:
                    f9:dc:10:fa:33:9b:8c:aa:d5:f5:99:e2:b3:92:95:
                    f1:a2:24:6d:48:c2:fe:12:e9:a3:14:0c:9d:6a:03:
                    e4:19:60:86:ab:c8:e3:47:e0:8b:6d:77:b8:b2:49:
                    62:b5:16:80:a8:08:61:92:c8:1a:03:a4:f4:f1:1b:
                    16:11:ee:eb:8b:55:72:8e:b5:0c:e0:a2:8e:b2:90:
                    65:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:79:0C:7B:4B:50:FE:31:64:5D:DE:E7:A3:A9:1E:DD:8F:AB:71:63
            X509v3 Authority Key Identifier:
                keyid:FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/5818925E826A11ECBF45DE23C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:ffc0::/47
                  2400:ffc0:13c::/47

    Signature Algorithm: sha256WithRSAEncryption
         06:f7:3e:58:18:7f:82:22:d1:88:b6:82:c7:d9:6c:0c:6a:4c:
         6e:44:6d:30:0c:fa:40:dc:7b:91:7f:96:33:65:25:b8:a4:e2:
         fc:12:6f:89:d6:ae:b5:f3:61:ba:7e:89:0e:aa:c2:d5:e9:81:
         f0:a6:4b:83:dc:44:e2:e8:16:d8:14:d6:32:0f:65:b6:05:2d:
         fb:8b:e4:78:8f:73:75:5b:c2:4d:ea:00:de:74:c1:1a:63:f4:
         63:4b:2a:67:8c:38:65:dc:5a:2e:bc:ff:1c:88:54:ed:4b:a0:
         f6:54:a3:9d:e0:8a:81:b7:ff:de:fa:74:1d:d3:95:6f:a4:b7:
         1f:2c:2e:9e:78:b5:53:88:6a:f7:92:9e:e7:bb:2b:a7:12:3d:
         af:45:5d:35:34:78:19:df:9e:6e:7f:65:ae:cd:44:a0:66:ad:
         dd:c8:16:a4:8c:65:77:d5:f2:43:c2:ca:78:2f:15:e0:21:fb:
         58:ae:7f:09:7c:fa:08:f3:3d:ed:5a:e3:b1:0e:d8:12:11:59:
         60:36:63:e0:05:f8:47:b3:ca:e5:90:77:75:dc:93:c7:fd:fa:
         a9:ca:d1:ab:72:ae:95:ed:94:ad:7b:45:00:17:63:65:c8:25:
         86:06:a6:ab:fd:13:3b:f1:33:60:49:b5:bb:fb:6a:68:66:44:
         52:f3:f3:b5
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICCP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzY0N0UxMTAvBgNVBAUTKEZERDI1MDc4MjIxODNDRTgwNzU5NDE5RDU2NTQwNjA2
QTI0ODZCNEIwHhcNMjYwNTA2MjAyNTM0WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWZiYTNiZS0wNmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk/lJwVY8LiRvxAHSdq4wwsczcoAO3E75tMQuHmrMrjTroK7JAxecRC5pYeJj
hesNbxoSkFmWvcJB5q5aGjs7bjK3MX4pvj59/mcv44/WLeMgsh7M5AlnArLMWYj2
sXDmifWHzXVFjz2sZ7EYvbKXtIALgnre5HTZlM+o9K5xuFj77T3MyNZnyHQ6z1pn
8u7JzuQyYHNEYwkWeXjJXn2yLxHcesZWIrlCzkcIhL3XbXQpieH53BD6M5uMqtX1
meKzkpXxoiRtSML+EumjFAydagPkGWCGq8jjR+CLbXe4sklitRaAqAhhksgaA6T0
8RsWEe7ri1VyjrUM4KKOspBl6wIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFH95DHtL
UP4xZF3e56OpHt2Pq3FjMB8GA1UdIwQYMBaAFP3SUHgiGDzoB1lBnVZUBgaiSGtL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjQ3RS8wRDEwQjgwNEQ2
MzExMUVBOUE1QTU4M0JDNEY5QUUwMi9fZEpRZUNJWVBPZ0hXVUdkVmxRR0JxSklh
MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19kSlFlQ0lZUE9nSFdVR2RWbFFHQnFKSWEwcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzY0N0UvMEQxMEI4MDRENjMxMTFFQTlBNUE1ODNCQzRGOUFFMDIvNTgxODkyNUU4
MjZBMTFFQ0JGNDVERTIzQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAAjASAwcBJAD/wAAAAwcBJAD/wAE8MA0GCSqGSIb3DQEBCwUAA4IBAQAG9z5Y
GH+CItGItoLH2WwMakxuRG0wDPpA3HuRf5YzZSW4pOL8Em+J1q6182G6fokOqsLV
6YHwpkuD3ETi6BbYFNYyD2W2BS37i+R4j3N1W8JN6gDedMEaY/RjSypnjDhl3Fou
vP8ciFTtS6D2VKOd4IqBt//e+nQd05VvpLcfLC6eeLVTiGr3kp7nuyunEj2vRV01
NHgZ355uf2WuzUSgZq3dyBakjGV31fJDwsp4LxXgIftYrn8JfPoI8z3tWuOxDtgS
EVlgNmPgBfhHs8rlkHd13JPH/fqpytGrcq6V7ZSte0UAF2NlyCWGBqar/RM78TNg
SbW7+2poZkRS8/O1
-----END CERTIFICATE-----
Generated at Wed May 13 15:50:51 2026 by rpki-client