Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/83684F548DF411E7A230506DC4F9AE02.roa
File:                     83684F548DF411E7A230506DC4F9AE02.roa (raw, json)
Hash identifier:          Vucpt8cNLIPa7MveYqDXrFjKUxNzUPcP0AThZUfXmKY=
Subject key identifier:   2A:C6:6C:42:5B:5D:50:D9:A8:D4:41:0B:7C:7A:8B:F4:63:6E:21:C4
Certificate issuer:       /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
Certificate serial:       255D
Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/83684F548DF411E7A230506DC4F9AE02.roa
Signing time:             Sat 02 May 2026 16:19:55 +0000
ROA not before:           Sat 02 May 2026 16:19:55 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     9367
IP address blocks:        2001:200:136::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl
                          rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:46:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9565 (0x255d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
        Validity
            Not Before: May  2 16:19:55 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69f6242b-8778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0e:85:04:5a:13:bc:2f:7a:38:d5:64:7a:e1:
                    9a:f6:b8:3c:08:c9:ce:7c:4a:14:37:ab:23:db:69:
                    0c:07:4b:2a:4d:57:79:e7:78:e7:4d:83:c0:47:2a:
                    a0:27:fb:aa:18:28:aa:1a:27:57:65:d9:8c:e0:5e:
                    ed:59:88:fc:1c:f4:87:78:95:71:df:68:92:a3:d4:
                    4e:00:e7:0c:17:34:a5:93:b6:ce:98:d2:c4:fe:61:
                    9d:70:e4:7b:c6:36:b4:42:7b:38:10:17:43:74:f8:
                    c1:92:58:e9:e5:0f:c4:55:b4:d8:2a:5a:6e:c2:90:
                    73:2e:09:0d:8a:18:31:8c:6f:64:f3:f0:71:dc:6b:
                    9a:8d:82:bd:32:af:b6:bd:68:bd:ca:b3:d6:53:ef:
                    f3:0e:8c:b7:ab:2d:12:98:6e:e7:d9:f3:1f:6d:90:
                    3a:45:96:d5:c3:40:86:87:3a:db:aa:60:a5:e9:c1:
                    67:8e:b8:11:09:7f:41:a0:07:9e:f9:aa:31:51:a2:
                    b5:29:78:a2:5e:48:f1:40:56:94:3f:0a:ce:3c:05:
                    1d:ae:fc:fb:45:72:26:26:73:1b:26:6f:e0:28:e2:
                    6b:9e:1c:4b:9e:04:e8:47:de:3d:8f:24:81:c8:1e:
                    14:c5:ec:7d:76:3e:34:55:73:e2:b0:bc:da:4b:6c:
                    d2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C6:6C:42:5B:5D:50:D9:A8:D4:41:0B:7C:7A:8B:F4:63:6E:21:C4
            X509v3 Authority Key Identifier:
                keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/83684F548DF411E7A230506DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:200:136::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:3d:ca:76:c2:77:4e:63:16:c4:3d:a2:e2:3f:49:df:da:fd:
         5f:c7:f0:51:73:a7:95:49:55:2a:4e:51:42:e6:57:10:0d:ea:
         c3:0e:7a:1d:24:f3:1a:10:3e:6b:18:3e:12:ae:fb:67:6a:13:
         e4:e2:eb:fc:5e:2c:c1:41:72:49:e4:7e:8e:09:71:63:c8:5c:
         17:2c:d3:1f:6c:72:cb:24:fc:d7:d1:30:a3:9d:cb:e0:41:15:
         5a:b3:ed:06:98:3f:09:46:4f:76:a3:b8:56:d3:fb:10:d9:a9:
         d9:57:9c:e7:cc:e6:21:73:1b:79:14:6f:8f:19:2f:d1:2e:80:
         50:07:29:2e:28:14:11:14:22:2d:29:9c:d3:d8:8d:48:ea:f7:
         bf:77:b6:e2:6b:4a:d7:e1:19:73:1e:c9:4f:db:ce:11:4a:e9:
         ba:19:01:96:9d:ce:c4:c6:61:36:b4:63:cf:9a:63:69:8c:95:
         d3:55:a7:41:11:0b:1f:82:33:46:0c:0a:72:e0:91:bd:fd:f6:
         35:a8:42:01:1a:5f:bb:7a:dc:23:67:32:8f:e6:4f:83:03:b5:
         8b:e5:ee:65:92:30:94:8f:e9:c9:67:c3:7c:e6:86:dc:89:ff:
         0f:94:44:06:b3:d0:8c:dd:93:2f:38:0c:2e:29:85:eb:35:1a:
         37:87:e7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:23:41 2026 by rpki-client