Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/F0C4B4D8B2C711EB897C7A52C4F9AE02.roa
File:                     F0C4B4D8B2C711EB897C7A52C4F9AE02.roa (raw, json)
Hash identifier:          2ynAwdjUDWBHY1oyjRDYv21g3Yj2ho4fsk5jQNcRXec=
Subject key identifier:   3E:8F:04:E0:46:65:A2:81:CC:B3:84:33:F0:F6:18:31:8A:55:A5:DC
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       103F
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/F0C4B4D8B2C711EB897C7A52C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:29:47 +0000
ROA not before:           Thu 22 May 2025 20:06:57 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     142164
IP address blocks:        2406:840:e140::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 19:34:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4159 (0x103f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:06:57 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a493ab-da59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8e:87:6f:2d:64:d3:ba:4c:f4:59:be:93:0e:
                    d2:9b:d6:19:d2:06:2c:3b:9c:46:bd:0c:75:ee:de:
                    08:68:24:bb:d5:f6:a7:ff:51:32:1e:8d:91:bf:2b:
                    14:25:8b:27:72:8e:3c:7e:0a:62:d4:47:65:f4:1e:
                    7f:c5:d3:4c:36:a9:2a:3e:79:63:4d:87:40:a4:c6:
                    32:96:7d:be:7d:26:b6:fc:f7:75:9a:82:ea:fd:0d:
                    59:bb:7f:c1:a1:ff:eb:06:79:1e:ca:eb:99:cf:90:
                    74:90:9e:8c:b8:fc:b4:6d:af:f0:33:ac:31:3c:fe:
                    98:e7:c9:85:7f:88:b4:22:0c:a3:5a:38:72:5b:6f:
                    5b:6e:fb:f8:58:9a:19:42:b2:8e:14:6e:29:62:1d:
                    e9:7a:b4:69:00:7b:8b:6c:45:d7:5e:ec:88:18:1d:
                    ba:cf:d9:7f:42:8a:1a:75:ac:35:ff:1f:b5:79:d9:
                    0c:43:56:7f:ea:e3:f4:0c:da:d8:0e:1d:dc:26:15:
                    22:21:aa:5c:f4:ad:ac:00:62:25:98:6c:ce:4c:65:
                    5d:04:b0:5b:42:0c:87:19:2a:81:80:6b:f5:c7:4f:
                    58:87:e3:41:56:b1:25:50:10:8e:14:ac:50:f3:6e:
                    b4:75:34:d4:2d:54:a8:ae:e7:86:cf:a1:7c:90:04:
                    93:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8F:04:E0:46:65:A2:81:CC:B3:84:33:F0:F6:18:31:8A:55:A5:DC
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/F0C4B4D8B2C711EB897C7A52C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:e140::/44

    Signature Algorithm: sha256WithRSAEncryption
         18:0a:c4:1b:ae:c2:2d:37:89:a3:67:8e:a6:6a:7a:37:a0:ae:
         8a:c5:09:85:47:b1:db:66:b3:ae:6c:7e:00:f8:5c:33:63:75:
         ae:35:2a:ea:e1:d7:c2:c3:3e:fd:0d:be:1d:93:61:c3:15:4c:
         8c:d7:63:04:07:6e:2b:8c:06:b9:71:74:85:4f:4d:db:36:d8:
         db:1d:fe:2c:cd:45:d4:2f:da:81:e8:29:ee:62:35:47:73:06:
         5a:47:4b:85:ec:29:fb:fc:9e:f7:af:aa:89:74:3a:d9:65:57:
         f6:e7:eb:16:37:3b:f6:c6:38:8c:98:da:5e:e1:de:c1:e4:76:
         38:ef:75:b3:5c:eb:ba:e6:d2:2d:f4:b8:6a:0f:6f:dd:b7:a0:
         96:9b:1f:ca:82:1f:8d:46:93:e3:70:95:c9:9d:d6:e0:4b:05:
         50:35:6a:5d:17:b6:a1:4e:8d:6d:ab:37:83:3b:46:8b:25:aa:
         61:45:83:f9:97:e4:c7:c6:e4:9e:d7:97:4a:b6:af:71:e9:9d:
         cf:11:3f:ae:0f:38:12:86:0d:58:d8:e3:3c:14:15:2a:5d:e5:
         5d:c4:eb:c7:d4:78:af:b4:4a:a3:62:3b:23:6b:7b:89:1c:43:
         ef:4c:2c:3a:f4:7b:3c:0d:4e:dc:09:4d:a5:c3:0a:36:60:b1:
         92:ef:e4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:12:45 2026 by rpki-client