Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E999BF0A510511ECB3B1A47AC4F9AE02.roa
File:                     E999BF0A510511ECB3B1A47AC4F9AE02.roa (raw, json)
Hash identifier:          Urib5Gn4GNA+Vq1MdntGSH4inHfhPmUFDKBGBwNS5NM=
Subject key identifier:   F4:24:B7:10:CB:3D:83:3A:CA:01:B6:8C:91:09:F9:08:4F:75:48:10
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       103C
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E999BF0A510511ECB3B1A47AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:29:45 +0000
ROA not before:           Thu 22 May 2025 20:06:53 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     141445
IP address blocks:        2406:840:feff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4156 (0x103c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:06:53 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a493a9-13be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7e:3a:c4:6c:6e:89:68:e9:0b:9e:e8:29:4f:
                    5b:02:82:3c:63:9e:39:fe:c2:4f:0d:eb:b9:49:f5:
                    f7:17:08:0f:df:98:47:3c:8d:69:20:fd:83:12:1d:
                    a3:85:35:9f:63:c4:5f:14:fe:58:82:f4:9e:4a:dd:
                    9e:70:7f:6e:d9:1a:ee:91:a4:6e:92:5f:5a:dd:ed:
                    04:37:01:15:ff:ee:dc:42:a2:ef:e4:b5:ea:e3:b9:
                    09:25:65:0b:45:46:c2:d3:11:2a:51:03:ed:77:2c:
                    c7:a1:8f:44:3f:ee:8b:56:df:b1:83:2c:df:2a:e6:
                    b4:85:1d:24:2a:5c:01:ee:eb:38:22:97:57:fd:94:
                    88:85:7b:ff:2f:05:d0:15:71:f2:ce:23:2a:1b:cd:
                    0f:e8:f1:6b:4c:0c:fd:74:02:7c:7c:7f:c8:4d:f4:
                    9b:aa:0a:ac:91:73:e8:40:a7:88:e7:56:33:ce:1b:
                    f3:58:91:7c:2d:17:d8:04:28:ea:33:77:ff:29:d9:
                    f6:95:f9:74:a4:3f:c6:58:ca:50:48:2b:5e:ab:23:
                    b7:46:67:b5:3c:e9:ec:d2:73:28:a2:0c:b1:c2:ef:
                    2b:7a:e0:ee:09:15:77:04:33:2d:e6:68:51:36:94:
                    e8:5b:38:0c:9d:d7:14:ad:fd:51:24:36:ac:a0:9d:
                    44:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:24:B7:10:CB:3D:83:3A:CA:01:B6:8C:91:09:F9:08:4F:75:48:10
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/E999BF0A510511ECB3B1A47AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:feff::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:4e:5f:dd:d7:38:bc:6d:42:a1:ed:69:39:87:fd:68:95:53:
         e3:93:b9:07:36:be:66:a2:6a:c8:f2:2b:36:83:e1:1e:49:93:
         69:92:99:47:9b:6f:92:ec:e6:ca:d2:a8:a8:b2:f1:d0:9d:e4:
         41:cc:0e:86:ce:07:64:87:28:53:ac:3d:7d:69:bc:6f:cc:69:
         54:11:a4:9b:39:d7:55:c8:7d:f2:51:30:5e:d1:63:9c:9d:e1:
         72:5f:2d:11:15:57:eb:9f:08:41:93:e5:7f:56:4b:a1:36:7f:
         d8:db:8a:b5:48:84:14:21:b4:e1:c9:d4:29:b6:29:bf:ee:0e:
         ed:d4:b9:2f:f1:0d:56:c4:0c:8c:5b:62:0d:88:f2:24:db:d5:
         36:d0:1a:2c:1f:64:a0:99:89:5d:1a:70:5b:65:8a:4d:64:7c:
         10:3b:ac:36:00:35:bf:d6:d7:93:a5:e1:c5:09:79:21:f5:74:
         8c:e6:63:16:f8:ee:e0:ad:5b:19:9e:ab:5b:10:12:ea:cf:41:
         94:a4:a8:84:48:9d:ac:6a:ab:18:38:ac:01:1d:36:fc:e7:6c:
         e4:36:66:28:74:83:a4:ea:79:94:ed:89:84:b4:53:79:06:24:
         5c:35:f6:52:07:82:7e:1e:d1:35:14:97:ae:5c:cf:18:45:2d:
         1b:d1:d6:c9
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICEDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjUwNTIyMjAwNjUzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTNhOS0xM2JlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArH46xGxuiWjpC57oKU9bAoI8Y545/sJPDeu5SfX3FwgP35hHPI1pIP2DEh2j
hTWfY8RfFP5YgvSeSt2ecH9u2RrukaRukl9a3e0ENwEV/+7cQqLv5LXq47kJJWUL
RUbC0xEqUQPtdyzHoY9EP+6LVt+xgyzfKua0hR0kKlwB7us4IpdX/ZSIhXv/LwXQ
FXHyziMqG80P6PFrTAz9dAJ8fH/ITfSbqgqskXPoQKeI51YzzhvzWJF8LRfYBCjq
M3f/Kdn2lfl0pD/GWMpQSCteqyO3Rme1POns0nMoogyxwu8reuDuCRV3BDMt5mhR
NpToWzgMndcUrf1RJDasoJ1EjwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFPQktxDL
PYM6ygG2jJEJ+QhPdUgQMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvRTk5OUJGMEE1
MTA1MTFFQ0IzQjFBNDdBQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAYIQP7/MA0GCSqGSIb3DQEBCwUAA4IBAQALTl/d1zi8bUKh7Wk5
h/1olVPjk7kHNr5momrI8is2g+EeSZNpkplHm2+S7ObK0qiosvHQneRBzA6Gzgdk
hyhTrD19abxvzGlUEaSbOddVyH3yUTBe0WOcneFyXy0RFVfrnwhBk+V/VkuhNn/Y
24q1SIQUIbThydQptim/7g7t1Lkv8Q1WxAyMW2INiPIk29U20BosH2SgmYldGnBb
ZYpNZHwQO6w2ADW/1teTpeHFCXkh9XSM5mMW+O7grVsZnqtbEBLqz0GUpKiESJ2s
aqsYOKwBHTb852zkNmYodIOk6nmU7YmEtFN5BiRcNfZSB4J+HtE1FJeuXM8YRS0b
0dbJ
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:44:51 2026 by rpki-client