Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/92F925C231F511EFA1744F0EC4F9AE02.roa
File:                     92F925C231F511EFA1744F0EC4F9AE02.roa (raw, json)
Hash identifier:          MdsgxtSVf/cKPbVHpzAfXZzC0tIBREHraRN4Ts8algE=
Subject key identifier:   B9:3E:8D:5B:40:FC:36:96:B5:05:BE:F7:2B:3B:2A:BE:5E:5A:83:A5
Certificate issuer:       /CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099
Certificate serial:       0149
Authority key identifier: 33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/92F925C231F511EFA1744F0EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:42:25 +0000
ROA not before:           Mon 07 Jul 2025 06:13:23 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     152925
IP address blocks:        2001:df3:f6c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl
                          rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 04:16:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DB72, serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099
        Validity
            Not Before: Jul  7 06:13:23 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a585b1-f02b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d0:4e:70:0d:58:e6:6b:f3:82:fd:7c:15:2e:
                    9d:4e:83:26:ae:52:8b:b6:eb:15:1d:22:31:99:05:
                    d1:f7:33:5b:f3:ba:08:0d:a5:20:1e:ee:ec:e7:15:
                    2b:6b:32:d9:a1:7b:51:d8:68:c4:ff:5a:e0:e0:c4:
                    43:c4:d0:ae:61:ab:20:57:39:cf:4a:c0:ce:ad:3e:
                    b2:cc:b5:09:2c:27:18:4d:44:cd:09:1d:39:d1:f5:
                    56:fb:6e:96:8d:fe:2c:4a:43:07:11:91:ac:40:10:
                    4a:8e:03:a5:b5:49:fe:bb:97:ec:ef:e7:79:67:10:
                    56:db:44:08:9f:43:be:6c:8c:3f:6a:a3:eb:49:2c:
                    2e:44:be:8d:bb:89:07:1f:29:a3:c7:b8:88:ee:ed:
                    59:67:13:dd:41:74:d9:fb:dd:d7:32:86:10:58:fe:
                    96:9e:9b:4d:f0:90:4d:6f:e0:3d:7d:e2:9a:de:3c:
                    54:a9:e4:df:a3:ee:9c:79:36:c6:e1:d9:19:c2:b4:
                    18:6d:83:bc:11:a4:a4:d8:91:ce:a9:b0:42:4a:48:
                    5f:1e:78:dc:da:98:77:95:2a:22:51:d7:07:95:96:
                    1a:02:00:7e:87:eb:fa:8c:88:a3:d3:4f:bb:e7:cb:
                    ea:3f:db:89:4b:ff:1f:70:6e:17:fa:e3:4f:0f:ca:
                    0c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:3E:8D:5B:40:FC:36:96:B5:05:BE:F7:2B:3B:2A:BE:5E:5A:83:A5
            X509v3 Authority Key Identifier:
                keyid:33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/92F925C231F511EFA1744F0EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:f6c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:76:36:59:4f:98:7c:aa:06:49:1f:32:fa:e2:44:37:ef:43:
         62:df:64:0c:c9:ba:d1:24:c6:2e:4e:74:86:27:ff:d8:b0:a7:
         43:09:50:da:55:38:74:f1:90:88:c7:46:9a:c5:0f:93:14:4b:
         4f:05:18:85:6b:3e:75:87:4f:c4:20:92:1c:df:67:ea:e1:dc:
         fe:2e:a8:4d:72:8b:25:9e:5a:50:bd:75:e8:1c:4a:13:c1:0c:
         b8:65:ee:9a:5d:93:89:60:b3:09:b2:cc:31:bd:40:9f:8a:09:
         91:7a:0a:4c:97:44:51:8b:ba:dc:dd:ea:40:01:d4:5d:cd:ff:
         69:90:14:65:fd:38:57:2e:f9:eb:2c:8c:b5:34:a0:58:70:45:
         dc:39:0c:d3:d1:1c:fb:78:6b:3f:17:cc:29:da:61:b4:46:6f:
         d2:41:d5:98:d3:f7:50:b8:2b:f9:d0:2c:46:81:39:be:66:ee:
         22:d6:a2:43:75:4f:a2:ae:86:99:6a:72:f3:b2:15:38:e5:7e:
         2d:08:5f:e7:8f:cc:93:75:cf:c4:85:90:8b:b9:3c:f1:52:47:
         18:90:01:c0:5c:01:3c:bc:11:fd:3c:09:d9:91:78:78:14:ea:
         88:e7:68:67:9e:a6:67:db:05:79:56:72:a7:90:48:11:96:90:
         45:9a:ab:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 18:50:34 2026 by rpki-client