Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/185EA954250011F192DC095DB9833773.roa
File:                     185EA954250011F192DC095DB9833773.roa (raw, json)
Hash identifier:          6Y9bm6Y1YpbnmDba9KAIZrqqwJmBWn2KhVnFlIiq+2I=
Subject key identifier:   C6:D8:05:E3:D3:DB:AB:41:01:59:E3:60:5B:F2:DF:A7:0C:C1:E6:9B
Certificate issuer:       /CN=A91392AE/serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4
Certificate serial:       1A88
Authority key identifier: 4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/185EA954250011F192DC095DB9833773.roa
Signing time:             Sat 21 Mar 2026 08:29:36 +0000
ROA not before:           Sat 21 Mar 2026 08:29:36 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     153319
IP address blocks:        2001:df4:45c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl
                          rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6792 (0x1a88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91392AE, serialNumber=4DAA776F8792800F42B89780F32D9E73276155D4
        Validity
            Not Before: Mar 21 08:29:36 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69be56f0-5f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5e:aa:ac:09:5e:d0:07:af:5a:37:7d:64:4a:
                    3c:73:b6:e9:49:bf:db:d7:b3:4f:51:03:69:09:b4:
                    8c:1c:ae:00:7d:fc:01:b5:6c:ca:6d:15:f6:3e:6a:
                    d2:d4:d4:b9:0b:10:d9:d4:1d:34:55:76:7f:18:31:
                    8f:ec:c9:ef:40:30:80:82:dc:78:a7:1d:7f:fe:90:
                    25:7a:7e:a5:fd:e5:02:48:08:10:8c:37:dd:cb:46:
                    45:9d:f6:5d:43:2f:b0:ac:1c:d3:f4:0d:7f:f6:7b:
                    f1:a3:73:e4:65:18:d5:48:34:c0:ad:de:6e:b2:89:
                    22:63:f5:ae:cf:90:90:66:95:7c:13:d7:52:39:8a:
                    c8:9a:66:d4:8a:ff:10:d6:f9:0b:86:d6:7c:f9:db:
                    22:4c:c1:51:e8:0b:70:46:20:20:8c:40:25:ae:53:
                    c7:c3:55:ed:51:d2:f6:be:56:ed:01:55:11:1f:e3:
                    7b:e2:6a:9e:ca:27:27:b4:06:39:53:05:66:27:66:
                    88:aa:7c:5a:10:a2:cf:5d:bf:62:02:3e:38:5a:10:
                    1f:4e:35:51:46:28:b5:89:81:42:7a:b1:d7:52:83:
                    5a:e8:24:6e:14:2d:65:90:fe:49:0e:1b:27:bc:02:
                    19:d0:29:d1:7b:03:bc:8f:23:0b:7c:4f:a0:bd:0f:
                    31:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D8:05:E3:D3:DB:AB:41:01:59:E3:60:5B:F2:DF:A7:0C:C1:E6:9B
            X509v3 Authority Key Identifier:
                keyid:4D:AA:77:6F:87:92:80:0F:42:B8:97:80:F3:2D:9E:73:27:61:55:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/Tap3b4eSgA9CuJeA8y2ecydhVdQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tap3b4eSgA9CuJeA8y2ecydhVdQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91392AE/336EF67660E811E7AC175259C4F9AE02/185EA954250011F192DC095DB9833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:45c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:59:34:ac:9f:b7:e1:0c:00:71:44:01:3e:a3:3d:3d:16:99:
         ea:d7:40:1e:02:8f:7b:6c:10:52:39:6f:a6:09:26:62:43:32:
         b4:fc:63:39:5a:73:5e:eb:9a:a4:7b:be:27:80:5a:38:fd:ad:
         d5:c1:5e:c8:90:78:a9:be:9b:ce:34:a2:32:36:34:e2:b9:9d:
         79:9b:46:8b:da:b4:b9:ac:18:c3:82:3a:f5:88:0f:b3:7d:90:
         cd:6c:9c:2d:92:b9:fc:5f:be:01:0d:e0:9b:b6:40:99:78:a6:
         70:8c:75:e5:52:8f:c0:82:4f:a7:71:79:33:49:04:3d:02:23:
         6a:a4:af:fa:72:24:d1:fe:eb:e9:d8:9a:e9:27:52:6f:a0:7e:
         98:39:bb:02:1d:29:47:a0:55:55:1a:24:2a:9b:8d:ec:b3:56:
         06:0c:23:e7:65:31:d0:92:37:53:d0:4b:29:09:a5:af:b1:fc:
         f6:a1:9e:85:d0:e3:76:3f:07:ad:0c:62:85:2b:5c:8b:a6:cf:
         26:16:a9:1c:dd:71:9e:cf:3d:b0:1e:f5:ab:5c:e5:84:ad:df:
         87:1e:b5:ce:59:a9:66:9c:c8:93:5c:c5:6e:31:2a:a1:93:bc:
         bc:07:ba:01:10:89:fe:02:a8:a6:d9:ce:83:98:26:97:f4:22:
         49:96:6f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:58:19 2026 by rpki-client