Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4FA2/691223703D3E11F18BD2783A9F833773/747DC16E3EF211F19456D02EC1833773.roa
File:                     747DC16E3EF211F19456D02EC1833773.roa (raw, json)
Hash identifier:          DzgxAcs3xQLb7+MwxDBKIN04csW3+rM4yVXnENoQ1uk=
Subject key identifier:   51:A6:C0:BB:F2:C3:88:AD:A1:58:CC:51:6F:B0:0C:20:54:AA:99:C3
Certificate issuer:       /CN=A91D4FA2/serialNumber=6DA73FB7C16382348BFF90A9F4E32D4BE8BCC31E
Certificate serial:       06
Authority key identifier: 6D:A7:3F:B7:C1:63:82:34:8B:FF:90:A9:F4:E3:2D:4B:E8:BC:C3:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bac_t8FjgjSL_5Cp9OMtS-i8wx4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4FA2/691223703D3E11F18BD2783A9F833773/747DC16E3EF211F19456D02EC1833773.roa
Signing time:             Thu 23 Apr 2026 08:57:28 +0000
ROA not before:           Thu 23 Apr 2026 08:57:28 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     154641
IP address blocks:        2001:df6:f6c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4FA2/691223703D3E11F18BD2783A9F833773/bac_t8FjgjSL_5Cp9OMtS-i8wx4.crl
                          rsync://rpki.apnic.net/member_repository/A91D4FA2/691223703D3E11F18BD2783A9F833773/bac_t8FjgjSL_5Cp9OMtS-i8wx4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bac_t8FjgjSL_5Cp9OMtS-i8wx4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:16:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4FA2, serialNumber=6DA73FB7C16382348BFF90A9F4E32D4BE8BCC31E
        Validity
            Not Before: Apr 23 08:57:28 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69e9def8-9575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:75:a5:6a:c0:74:48:d1:80:54:23:34:15:1a:
                    68:d8:78:3e:29:87:e4:43:65:c6:da:2b:1d:2f:30:
                    13:b6:70:ce:48:cb:bd:52:55:34:77:da:f9:fa:d1:
                    20:43:06:e2:1f:7c:a1:4f:26:47:26:12:56:51:8b:
                    5d:1d:38:ca:cb:d2:92:8e:73:b5:eb:56:3e:25:a7:
                    f0:df:03:6b:d3:69:c6:44:ee:fa:30:84:bb:2a:88:
                    eb:58:b2:11:07:2b:03:05:86:b2:95:8c:ad:52:f6:
                    4b:06:0d:81:c0:ec:5c:9c:5b:02:55:be:7b:d2:30:
                    83:98:0b:0a:a3:3f:f8:2e:03:88:e9:26:38:18:68:
                    0a:e4:4a:ac:dd:ac:70:eb:7c:3c:47:df:96:bd:07:
                    35:d6:bc:82:16:37:b6:f4:48:3f:3d:7c:43:71:21:
                    b8:62:51:d3:8b:c3:cb:89:e3:85:0a:5a:8c:4a:b6:
                    95:11:44:cb:39:55:51:42:67:17:27:14:8e:f3:82:
                    1d:a7:72:61:c2:4c:a1:6a:86:e3:89:8c:a0:0a:d9:
                    9a:bd:57:bd:04:31:4f:fc:30:1c:49:be:02:33:d1:
                    6e:f4:0b:3c:ac:db:ce:4a:a4:77:b1:2c:34:24:2f:
                    59:75:fb:68:e9:ef:b4:97:df:15:3d:82:5b:1f:74:
                    05:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A6:C0:BB:F2:C3:88:AD:A1:58:CC:51:6F:B0:0C:20:54:AA:99:C3
            X509v3 Authority Key Identifier:
                keyid:6D:A7:3F:B7:C1:63:82:34:8B:FF:90:A9:F4:E3:2D:4B:E8:BC:C3:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4FA2/691223703D3E11F18BD2783A9F833773/bac_t8FjgjSL_5Cp9OMtS-i8wx4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bac_t8FjgjSL_5Cp9OMtS-i8wx4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4FA2/691223703D3E11F18BD2783A9F833773/747DC16E3EF211F19456D02EC1833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:f6c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:02:20:ee:eb:75:ed:f4:32:75:16:00:8b:2c:27:93:46:32:
         1e:75:c6:16:92:6c:55:87:e4:2a:7e:82:ca:08:5b:15:1a:b7:
         76:6a:99:a7:69:7d:dd:a0:4b:9b:34:09:b7:33:79:ef:a1:da:
         22:42:0e:52:e1:88:76:be:2f:03:9a:9e:9d:10:f9:7c:e7:8a:
         1e:8c:5f:d0:06:76:c5:a0:7f:8a:29:65:5e:10:c0:48:85:14:
         b8:27:a6:6e:20:f8:f1:33:6c:29:b1:49:ed:5d:a0:66:6d:ea:
         a6:cc:a3:d6:3a:ee:d4:ea:9d:b1:a2:54:d2:85:6a:cb:8e:53:
         d2:21:5a:f3:1c:a2:60:52:09:9f:a0:a0:d5:de:3c:7f:a1:cd:
         15:f1:05:67:e3:e9:c7:47:bf:94:7e:01:1c:96:1a:59:2d:a0:
         42:68:31:3f:f8:18:d5:e7:62:31:1c:b1:3e:b9:e9:db:0f:1a:
         aa:83:df:e8:34:e7:24:dc:88:95:20:1a:40:18:14:de:05:93:
         a2:ab:32:6b:bc:25:8d:8a:ee:3e:a5:30:ef:31:8b:9c:a5:13:
         1d:7f:00:40:ec:22:65:62:45:93:9a:24:19:f9:42:a3:d6:e3:
         32:05:53:0f:02:23:80:bc:34:4d:37:40:ec:d8:90:fd:ea:b2:
         4e:6b:73:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:34:55 2026 by rpki-client