Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/6FA6ED7E82C711F0AD86D64DC4F9AE02.roa
File:                     6FA6ED7E82C711F0AD86D64DC4F9AE02.roa (raw, json)
Hash identifier:          rHMVmuHlGcAJ9rF7Bi/K5y8f08f2S8PIfG+MCG+CXao=
Subject key identifier:   85:8C:64:2A:21:C4:E4:7F:4A:22:2A:B7:33:51:E6:FD:6D:64:8C:E7
Certificate issuer:       /CN=A9146AD7/serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
Certificate serial:       06
Authority key identifier: 17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/6FA6ED7E82C711F0AD86D64DC4F9AE02.roa
Signing time:             Tue 26 Aug 2025 21:55:53 +0000
ROA not before:           Tue 26 Aug 2025 21:55:53 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     19905
IP address blocks:        47.72.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl
                          rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 16:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146AD7, serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2
        Validity
            Not Before: Aug 26 21:55:53 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68ae2d69-6166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:10:95:af:1f:d3:41:9b:c4:08:96:c9:67:02:
                    ee:07:f0:fc:c5:2b:e2:2e:ad:a5:c0:10:9f:74:48:
                    d4:fd:73:1e:c6:e1:6c:3c:48:5a:6e:bb:01:93:e8:
                    27:03:b5:ed:33:16:9d:eb:f9:1b:8b:43:cb:68:94:
                    f1:43:45:95:e9:02:a3:fe:6c:f1:18:25:96:bc:0e:
                    01:dc:94:ec:32:16:be:2d:ff:f6:6b:f3:07:63:95:
                    9c:03:c5:f1:a8:7c:fb:a4:bf:3c:f1:77:80:5c:c7:
                    5d:b0:38:0b:14:97:22:c6:ae:b9:c7:37:c9:96:d2:
                    15:53:c9:08:20:11:f3:d0:9e:6b:af:ba:96:84:46:
                    a0:09:d3:56:4a:e9:97:9f:34:be:98:20:01:c8:5b:
                    f1:d4:99:d9:43:cc:c7:f8:e3:97:ea:25:32:dc:a9:
                    e7:b3:94:f3:4c:5a:59:e4:61:42:65:d6:55:4c:cc:
                    06:90:07:a8:57:a1:94:8b:f3:1a:f1:ae:df:eb:80:
                    19:36:14:d7:c1:f5:65:4c:bf:ec:8c:f2:ca:17:d7:
                    01:4e:56:38:fc:69:4e:b8:bc:20:73:f0:9e:c0:30:
                    ce:5f:69:e1:ec:3c:83:bd:d1:93:f9:3e:14:c4:d0:
                    09:4b:12:48:89:e0:a0:2e:21:41:9e:34:74:ae:19:
                    a8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8C:64:2A:21:C4:E4:7F:4A:22:2A:B7:33:51:E6:FD:6D:64:8C:E7
            X509v3 Authority Key Identifier:
                keyid:17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/6FA6ED7E82C711F0AD86D64DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.72.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1e:22:87:c2:4c:3f:28:3b:93:24:17:8e:96:88:e2:78:64:37:
         f1:a6:e7:bf:3c:58:bf:74:a2:41:1b:27:f4:69:23:49:bd:84:
         86:33:71:80:9d:ed:a5:82:55:59:e9:58:0e:47:86:64:60:8c:
         2e:8b:55:8f:f1:1f:14:50:3d:36:56:cf:b4:98:5d:db:c4:e1:
         0b:45:ca:89:7b:ea:0b:7e:b5:0a:1d:8e:6e:d3:d3:04:2f:fd:
         d5:5b:b7:d5:9d:b7:d0:b8:ff:b8:45:02:14:1a:dd:d0:54:49:
         cf:64:08:63:8d:43:c6:7d:a1:b9:ab:61:d3:ea:aa:29:a9:cf:
         ed:71:f9:e0:ee:a8:5e:a8:9d:33:e9:a0:35:a8:f6:8a:4d:51:
         42:5a:db:ff:84:3e:2e:21:d4:bd:9b:a7:a3:63:fc:29:90:a8:
         66:c0:88:86:3b:f4:ff:ae:8e:ad:2c:72:c5:62:f8:91:9f:b7:
         47:d3:41:63:91:13:b3:a2:ad:c9:be:29:40:65:d1:fb:61:a3:
         a6:0a:9c:a0:65:e1:70:63:e1:8e:40:6d:eb:02:92:be:94:f8:
         19:4f:df:c9:ec:63:55:bc:51:be:26:e2:13:b6:12:bb:c4:73:
         7f:b2:9f:ea:92:5d:18:94:76:9f:32:3f:5a:28:5c:16:f0:1a:
         54:19:61:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 05:47:05 2025 by rpki-client