Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/92F925C231F511EFA1744F0EC4F9AE02.roa
File:                     92F925C231F511EFA1744F0EC4F9AE02.roa (raw, json)
Hash identifier:          DkaWQMkaE5vWQ9UkMjaqB0efcfb37G5TJ9A0Ez8ePPQ=
Subject key identifier:   98:A3:FC:19:8C:BA:ED:FA:11:63:D1:E9:89:0F:DF:E1:26:70:33:A1
Certificate issuer:       /CN=A916DB72/serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099
Certificate serial:       018E
Authority key identifier: 33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/92F925C231F511EFA1744F0EC4F9AE02.roa
Signing time:             Thu 09 Jul 2026 06:34:01 +0000
ROA not before:           Thu 09 Jul 2026 06:34:01 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     152925
IP address blocks:        2001:df3:f6c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl
                          rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 05:54:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DB72, serialNumber=3393F9D070B2E70949ACA2AACC8E65E890E74099
        Validity
            Not Before: Jul  9 06:34:01 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a4f40d9-9790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fe:58:4b:a3:a9:6d:2d:33:95:15:1a:c6:66:
                    95:0e:65:6a:f7:bd:8e:37:40:f4:c7:dd:c9:6f:15:
                    13:b9:77:4a:63:cc:bc:88:f8:f9:c1:c0:79:75:0b:
                    e4:57:16:d9:ef:9c:6f:e2:29:50:af:68:f8:ae:f9:
                    ad:9a:7e:8b:54:4d:f0:3e:6b:41:50:9e:df:34:d2:
                    5f:34:15:31:52:2d:c5:7e:be:45:e7:86:0a:26:6c:
                    76:7e:7a:66:e1:d1:f4:cf:c1:f2:02:5c:2e:97:fd:
                    45:7d:9c:3a:45:85:b0:5d:cd:19:d9:b7:4a:7e:df:
                    9c:25:cd:63:e9:78:11:35:b9:f4:b6:e8:c8:37:e5:
                    fe:49:a0:49:75:70:a3:85:22:41:4b:7a:eb:1a:74:
                    18:36:42:2b:86:49:be:c4:68:60:89:43:3b:08:e1:
                    13:41:15:2d:b2:37:ae:01:38:fe:2c:c3:9f:8d:f3:
                    c6:f6:e5:7d:6a:c6:7a:44:53:3e:a0:58:08:50:7d:
                    ba:e7:c3:06:c1:d9:f1:9f:03:22:3b:64:0e:66:f4:
                    22:07:2e:6d:0e:a5:11:03:1d:0a:a1:45:c5:c7:e6:
                    a7:65:53:6a:1e:c6:30:6e:f6:d3:42:60:e7:cd:80:
                    06:82:e0:0b:48:01:ed:30:bb:47:1c:5c:61:c7:8d:
                    5c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A3:FC:19:8C:BA:ED:FA:11:63:D1:E9:89:0F:DF:E1:26:70:33:A1
            X509v3 Authority Key Identifier:
                keyid:33:93:F9:D0:70:B2:E7:09:49:AC:A2:AA:CC:8E:65:E8:90:E7:40:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/M5P50HCy5wlJrKKqzI5l6JDnQJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5P50HCy5wlJrKKqzI5l6JDnQJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DB72/8611E62E31F411EFAE91A00CC4F9AE02/92F925C231F511EFA1744F0EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:f6c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:fd:90:39:4c:0a:96:da:91:b4:c8:10:9f:a5:cd:66:20:63:
         5d:17:9f:47:67:b1:83:75:e6:e4:b3:96:1c:47:59:a2:03:90:
         b3:8d:62:3b:21:38:62:34:c0:47:30:30:d1:6d:62:b4:ca:2f:
         64:63:5e:8f:c8:a4:1c:92:09:de:99:f6:89:52:2a:e7:3b:73:
         11:78:22:2a:ff:3d:9b:00:d9:f6:df:a2:6d:78:dc:7f:3b:9f:
         b0:3d:c1:7a:c6:eb:94:87:02:f3:2b:2e:69:54:1b:c9:4b:e4:
         95:a4:e3:92:66:ca:3c:2f:a9:13:67:ed:5d:55:47:dc:8e:22:
         1b:99:21:d5:05:23:a2:17:2a:82:47:63:89:fd:e0:63:97:27:
         a8:3c:8e:bc:dc:ad:35:11:41:ea:aa:4a:36:af:28:69:1f:37:
         78:ae:13:52:3a:76:83:a5:3e:59:c7:03:2b:4b:60:bb:ae:1c:
         7d:5e:d4:7b:ed:cc:1a:b3:43:59:da:4c:c6:bf:d1:c7:8f:66:
         9c:e2:3a:74:ab:04:f5:d1:01:6b:fd:f5:0b:84:7f:49:3a:fb:
         91:10:4a:3b:e4:ae:be:ba:aa:a4:6c:62:83:02:07:81:87:d2:
         e2:22:ba:7d:95:3a:3b:0d:10:46:e5:70:51:29:13:d5:ec:8a:
         9f:4a:86:48
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkRCNzIxMTAvBgNVBAUTKDMzOTNGOUQwNzBCMkU3MDk0OUFDQTJBQUNDOEU2NUU4
OTBFNzQwOTkwHhcNMjYwNzA5MDYzNDAxWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRmNDBkOS05NzkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzf5YS6OpbS0zlRUaxmaVDmVq972ON0D0x93JbxUTuXdKY8y8iPj5wcB5dQvk
VxbZ75xv4ilQr2j4rvmtmn6LVE3wPmtBUJ7fNNJfNBUxUi3Ffr5F54YKJmx2fnpm
4dH0z8HyAlwul/1FfZw6RYWwXc0Z2bdKft+cJc1j6XgRNbn0tujIN+X+SaBJdXCj
hSJBS3rrGnQYNkIrhkm+xGhgiUM7COETQRUtsjeuATj+LMOfjfPG9uV9asZ6RFM+
oFgIUH2658MGwdnxnwMiO2QOZvQiBy5tDqURAx0KoUXFx+anZVNqHsYwbvbTQmDn
zYAGguALSAHtMLtHHFxhx41c1wIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFJij/BmM
uu36EWPR6YkP3+EmcDOhMB8GA1UdIwQYMBaAFDOT+dBwsucJSayiqsyOZeiQ50CZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REI3Mi84NjExRTYyRTMx
RjQxMUVGQUU5MUEwMENDNEY5QUUwMi9NNVA1MEhDeTV3bEpyS0txekk1bDZKRG5R
SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL001UDUwSEN5NXdsSnJLS3F6STVsNkpEblFKay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkRCNzIvODYxMUU2MkUzMUY0MTFFRkFFOTFBMDBDQzRGOUFFMDIvOTJGOTI1QzIz
MUY1MTFFRkExNzQ0RjBFQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN8/bAMA0GCSqGSIb3DQEBCwUAA4IBAQCZ/ZA5TAqW2pG0yBCf
pc1mIGNdF59HZ7GDdebks5YcR1miA5CzjWI7IThiNMBHMDDRbWK0yi9kY16PyKQc
kgnemfaJUirnO3MReCIq/z2bANn236JteNx/O5+wPcF6xuuUhwLzKy5pVBvJS+SV
pOOSZso8L6kTZ+1dVUfcjiIbmSHVBSOiFyqCR2OJ/eBjlyeoPI683K01EUHqqko2
ryhpHzd4rhNSOnaDpT5ZxwMrS2C7rhx9XtR77cwas0NZ2kzGv9HHj2ac4jp0qwT1
0QFr/fULhH9JOvuREEo75K6+uqqkbGKDAgeBh9LiIrp9lTo7DRBG5XBRKRPV7Iqf
SoZI
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:01:16 2026 by rpki-client