Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92D970A2767711F09436191BC4F9AE02.roa
File:                     92D970A2767711F09436191BC4F9AE02.roa (raw, json)
Hash identifier:          hAqHnyQybwFDIVHYD8Zd4WGYdZ+U2/f/UhEPHK8EGVo=
Subject key identifier:   AE:E9:BB:53:7A:73:71:25:5F:B4:9B:C3:01:73:B9:37:52:85:5A:F9
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       EAC6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92D970A2767711F09436191BC4F9AE02.roa
Signing time:             Sun 31 May 2026 17:46:47 +0000
ROA not before:           Sun 31 May 2026 17:46:47 +0000
ROA not after:            Thu 01 Oct 2026 00:00:00 +0000
asID:                     154108
IP address blocks:        2001:df5:edc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 06:09:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60102 (0xeac6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May 31 17:46:47 2026 GMT
            Not After : Oct  1 00:00:00 2026 GMT
        Subject: CN=6a1c7407-a448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ce:19:07:86:82:ae:92:a8:b6:01:0b:e6:72:
                    cd:b2:70:31:84:08:20:ab:e1:ac:3b:fe:14:56:77:
                    84:35:7f:bb:a2:ea:b8:73:10:ef:a5:d4:2c:08:cc:
                    ad:ed:91:4f:c6:f0:4c:1d:5d:6b:f1:44:c6:cc:d2:
                    5d:30:fc:62:49:55:36:e5:37:6b:27:2f:e5:22:d1:
                    e8:3a:c7:28:43:9e:38:4f:2e:5e:65:bf:2d:2b:86:
                    bf:ce:8d:dd:d8:68:60:75:ed:2f:48:9b:d9:e2:b6:
                    90:1c:9f:69:20:e5:af:7a:bc:97:75:32:b1:ed:40:
                    b2:57:0c:ec:1e:c4:1d:08:80:9e:57:af:85:6f:48:
                    8e:2f:e7:22:e7:e7:f9:fb:36:4b:2f:f1:9e:2b:46:
                    ca:d6:52:bf:cb:de:98:09:75:e9:c3:21:e8:5c:13:
                    11:98:39:14:6f:59:a3:c3:96:e1:e2:1f:13:3d:f7:
                    a2:e1:43:fb:22:2a:e3:3d:62:70:ce:24:e9:c0:79:
                    21:82:4d:90:d3:1b:09:56:cb:4e:b6:25:82:a6:2b:
                    2f:69:bd:b0:6e:db:b8:59:df:cd:71:bf:81:d4:12:
                    93:48:62:67:be:7e:9d:c5:37:d1:b8:cb:24:3d:da:
                    e8:ef:10:a3:95:2f:2c:b4:88:7d:42:1e:49:28:17:
                    87:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E9:BB:53:7A:73:71:25:5F:B4:9B:C3:01:73:B9:37:52:85:5A:F9
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92D970A2767711F09436191BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:edc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:1d:1d:b5:51:5e:10:a0:1e:53:07:47:e2:3c:94:bb:09:c9:
         6c:4c:58:d9:46:6b:88:3e:1d:56:dd:13:d4:82:c2:2a:78:63:
         35:91:43:a9:d3:14:53:ae:f6:3e:e2:2a:e8:ff:41:e3:c2:86:
         6f:d1:f6:5b:78:4d:2e:51:c3:01:c3:34:2a:26:33:03:a3:a5:
         fb:a5:13:d6:94:2b:83:49:07:f5:76:f8:ca:d6:ad:b4:05:05:
         bf:85:d6:2a:34:d2:fd:4c:1f:c3:75:68:34:b6:4f:cc:c4:d9:
         6a:47:0f:df:1a:8d:06:ae:7a:7e:07:89:39:c8:14:95:c0:44:
         22:e1:cd:ce:17:a0:51:2d:d8:45:55:a8:a7:6d:f9:b4:fb:54:
         e5:2c:c2:ea:36:ad:3f:ee:98:26:aa:48:cd:ca:49:dd:e1:1c:
         df:80:62:bd:00:f0:e6:3e:2d:6a:6e:c8:11:99:4f:73:bd:01:
         ac:a1:20:1a:ad:53:da:4b:56:ef:8a:5f:bb:2d:ae:ed:aa:15:
         17:4a:63:46:42:ce:8f:ae:d1:e3:79:da:5e:53:47:ad:d3:76:
         3c:35:68:44:31:96:41:3f:00:8c:12:77:c7:cc:e2:a3:a3:b3:
         4a:f4:d6:28:8c:35:cb:5a:c5:cd:a5:08:89:bf:b1:54:94:ad:
         85:5e:9f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:01 2026 by rpki-client