Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92D970A2767711F09436191BC4F9AE02.roa
File:                     92D970A2767711F09436191BC4F9AE02.roa (raw, json)
Hash identifier:          76OvkRLW5CH+8wanrSBrx5nidb0ZUHLJQ4a20muSynw=
Subject key identifier:   F7:08:47:5E:F8:D5:33:32:B8:25:D1:5B:AE:81:0B:27:41:75:90:1E
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       F6E6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92D970A2767711F09436191BC4F9AE02.roa
Signing time:             Mon 06 Jul 2026 17:45:56 +0000
ROA not before:           Mon 06 Jul 2026 17:45:56 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     154108
IP address blocks:        2001:df5:edc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 08:21:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63206 (0xf6e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jul  6 17:45:56 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a4be9d3-7aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:ba:6b:a0:e0:34:3b:ba:e9:4f:c6:82:6c:
                    ca:9a:46:91:f2:f4:d0:86:12:29:0f:90:85:34:c2:
                    62:57:0d:17:bc:97:bf:b5:18:48:22:b6:dc:29:6d:
                    b9:50:c1:6f:2c:24:4f:bb:4f:92:8e:65:01:60:6a:
                    86:48:08:83:8c:0b:84:61:f5:4d:5a:46:80:c5:f6:
                    9a:2f:0d:bb:ef:68:d9:02:83:fb:88:30:15:0c:5c:
                    94:a8:9f:c4:17:2f:6b:58:6b:70:1d:73:04:80:e3:
                    78:38:2f:5c:03:1b:d5:51:7c:ce:8a:31:f0:b8:22:
                    83:cc:49:e5:56:61:46:ae:6f:a4:b5:db:37:c2:3c:
                    2f:f7:8d:62:d9:0f:e3:f3:04:50:78:30:cd:50:6a:
                    d8:f3:1b:23:d7:b1:c1:e8:2d:a2:1f:c8:58:1f:9e:
                    b9:da:20:23:f7:61:9c:72:5e:1f:e6:ed:41:ec:2c:
                    31:6c:18:cb:1c:2c:a1:04:b7:50:34:a3:13:b5:f6:
                    52:48:f4:c3:0b:42:4b:5b:20:95:cf:69:68:ef:83:
                    cf:c9:b0:c6:ad:d8:26:de:97:e8:8e:e3:f8:41:41:
                    26:d1:43:2a:7a:99:c4:59:e0:a1:f7:60:d6:0d:de:
                    fb:7c:c5:23:f4:29:83:2e:59:a9:64:ba:7e:2e:75:
                    33:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:08:47:5E:F8:D5:33:32:B8:25:D1:5B:AE:81:0B:27:41:75:90:1E
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92D970A2767711F09436191BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:edc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:d9:fc:1c:ae:a1:25:bb:04:9e:49:75:48:af:46:07:69:a8:
         85:c9:7b:c6:82:b4:e0:19:61:45:f0:52:84:d7:cc:3a:85:5a:
         0e:a3:93:5b:11:b1:1e:0f:78:3a:e2:65:04:b7:76:c6:35:8d:
         3c:86:5e:d7:39:9c:5f:bd:8f:97:d3:9f:f8:3c:7d:80:04:a6:
         0e:75:53:68:95:47:25:23:fc:2a:03:86:6b:d1:eb:21:76:b0:
         31:09:29:f0:7b:e8:e4:73:59:ac:71:a8:31:d9:fd:d1:8c:98:
         55:9e:a7:13:cd:66:2c:80:30:d7:60:74:22:fb:18:59:e4:7b:
         5b:a2:50:b3:75:cf:58:d2:a2:39:b6:ac:83:e2:15:93:d1:12:
         5c:e5:83:77:80:74:40:33:25:4b:4f:46:47:9d:46:60:0a:8e:
         04:f1:2b:ec:bb:41:09:fa:e3:90:80:f0:06:8e:dc:1b:eb:9e:
         1a:c5:8a:cf:c4:1f:e6:1e:95:10:2c:8d:45:d0:06:56:7b:02:
         a4:7e:d4:0c:e3:35:73:b0:54:5a:74:22:25:15:29:7b:32:54:
         13:d0:d8:87:ac:88:9a:a2:67:f8:cb:50:fe:0a:d0:57:b0:e9:
         74:60:7d:95:f4:e8:5f:af:e2:64:ba:1a:38:1c:d3:f1:22:63:
         66:67:b0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:13:46 2026 by rpki-client