Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/6FA6ED7E82C711F0AD86D64DC4F9AE02.roa
File:                     6FA6ED7E82C711F0AD86D64DC4F9AE02.roa (raw, json)
Hash identifier:          HxueVyeG48TlpzJ0pvXXuxMket+vhTgEYarRY925CZ0=
Subject key identifier:   93:65:14:66:73:8B:A9:0B:ED:D1:8F:65:85:7D:3D:1F:DB:23:51:81
Certificate issuer:       /CN=A9146AD7/serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
Certificate serial:       91
Authority key identifier: 17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/6FA6ED7E82C711F0AD86D64DC4F9AE02.roa
Signing time:             Fri 08 May 2026 17:19:53 +0000
ROA not before:           Fri 08 May 2026 17:19:53 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     19905
IP address blocks:        47.72.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl
                          rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146AD7, serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
        Validity
            Not Before: May  8 17:19:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69fe1b38-6a7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d2:7c:73:57:e9:62:22:26:39:a6:5a:76:18:
                    d4:2f:3c:92:67:06:b2:cf:de:1f:de:56:b8:73:61:
                    94:c3:6a:4d:97:20:c7:1c:e2:2e:d5:ef:3c:2c:18:
                    58:06:b5:7c:b2:ec:61:c8:cb:9b:3c:b4:5a:13:20:
                    94:a7:03:6f:37:1a:45:16:d9:ce:48:2f:57:2b:c3:
                    bc:9e:17:47:c1:fc:bc:68:7c:bb:9e:e7:63:aa:a4:
                    3b:37:63:3c:67:4c:42:1b:c8:43:d7:4e:9c:d8:e7:
                    68:dd:bc:a3:e6:81:a1:5f:0b:3b:c9:e5:fa:ae:96:
                    dc:04:48:0c:90:b3:cf:2d:9f:6c:10:ae:8c:02:b3:
                    21:7d:cd:23:05:1b:1f:d8:2c:54:ed:ca:12:2b:34:
                    22:c1:14:0f:48:43:33:90:42:bf:3a:d1:13:7c:21:
                    b2:c6:7e:80:62:f5:3d:dc:9b:14:4e:ad:c2:b6:7e:
                    48:3b:bb:0e:6b:a6:fa:cc:5a:2f:9d:f4:25:c2:cb:
                    b3:61:4e:40:af:50:9c:dc:00:86:ea:ea:ae:93:50:
                    29:b3:4e:2c:e4:be:b1:0b:63:85:c3:56:e3:c2:be:
                    72:9f:cf:3e:f5:3d:14:0a:fd:02:97:b0:c2:2e:f1:
                    0b:8d:89:7a:0c:a4:37:47:b5:5a:3f:2b:73:e5:a9:
                    43:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:65:14:66:73:8B:A9:0B:ED:D1:8F:65:85:7D:3D:1F:DB:23:51:81
            X509v3 Authority Key Identifier:
                keyid:17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/6FA6ED7E82C711F0AD86D64DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.72.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         29:b5:9f:74:1c:e1:b0:6b:7d:ee:bb:54:fb:21:10:1e:9a:6b:
         60:d3:2a:4e:b1:d5:58:c8:57:87:39:af:a1:03:91:50:39:18:
         5f:e7:45:da:01:08:d4:9c:43:4a:d0:52:1b:7e:54:6b:6b:b3:
         86:5e:62:c6:c4:c7:ca:f1:1f:44:6d:8f:aa:55:5c:b3:1c:ae:
         2b:cf:50:1b:f1:3b:a5:22:22:ec:44:ad:a8:35:5f:f4:e6:44:
         21:63:21:1a:b3:f5:13:6e:08:71:d3:1c:84:6a:11:f6:f9:f9:
         df:74:c3:37:e0:c3:f3:fa:e8:46:c8:d5:e2:16:03:ec:60:7e:
         ae:50:e2:e6:b4:e7:79:8e:93:f1:88:55:97:b2:ff:a7:48:20:
         be:8a:f5:46:b7:b5:5b:e9:3a:62:fb:9e:ca:22:66:0b:15:4c:
         4f:98:f3:8a:20:29:b8:9f:18:fa:6d:3c:02:1d:d5:e4:16:30:
         b7:cd:b1:a4:82:fa:17:b2:57:7a:37:77:2f:44:fd:45:48:f3:
         05:10:a4:bf:28:2b:8d:46:83:ad:f1:9c:f0:14:5e:0a:7c:f5:
         ad:5f:0b:a1:e3:03:d6:5b:58:39:0e:3b:d6:01:9e:12:a5:dd:
         fa:be:94:ec:d9:f9:d5:d7:ea:83:1d:a4:64:61:f1:72:36:98:
         a9:a8:3c:d2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 04:02:02 2026 by rpki-client