Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/92AEE092378211EFAEB6B36DC4F9AE02.roa
File:                     92AEE092378211EFAEB6B36DC4F9AE02.roa (raw, json)
Hash identifier:          Sw7KRJ3Hz6dAXQ9/sIjAX/GFlM314WtidHFZ3x1gnFQ=
Subject key identifier:   49:46:B8:EF:5A:84:AA:F3:51:E3:B6:C4:76:8C:8B:2D:D7:1C:1B:32
Certificate issuer:       /CN=A919EAF3/serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D
Certificate serial:       1A3B
Authority key identifier: 29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/92AEE092378211EFAEB6B36DC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 04:58:14 +0000
ROA not before:           Thu 31 Jul 2025 16:54:53 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     9234
IP address blocks:        168.245.188.0/22 maxlen: 22
                          168.245.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl
                          rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:15:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6715 (0x1a3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EAF3, serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D
        Validity
            Not Before: Jul 31 16:54:53 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a518e6-b094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:45:d1:b7:95:ce:39:6f:73:39:df:08:f2:8d:
                    72:27:04:40:b9:6f:f3:95:f4:7b:ab:13:4f:ef:a5:
                    e2:1d:0e:10:19:d5:ef:4f:4c:18:c8:b6:07:c5:97:
                    c4:a6:bf:24:41:8f:9c:b0:0c:3d:54:03:da:f9:41:
                    a3:09:1e:a2:21:39:09:73:90:31:1b:74:b6:35:08:
                    72:45:14:2a:d3:f1:b3:cc:a6:9b:39:bf:d2:15:8f:
                    85:d0:a6:23:e1:5f:74:33:74:89:86:16:74:fe:d1:
                    51:11:76:16:60:64:0b:28:52:80:ea:89:0c:bb:04:
                    68:4f:4c:8d:e1:ed:36:eb:ce:52:75:a2:2d:fd:8f:
                    b1:ac:ae:b2:36:90:8c:61:19:3e:d7:4f:e7:92:fb:
                    0d:4f:81:59:ef:d8:93:96:85:91:b2:72:3b:30:ef:
                    5e:46:ad:a4:e1:44:e1:d1:e5:9e:84:76:54:5f:b0:
                    07:7c:f5:c7:07:7a:35:01:fe:13:1f:34:96:37:5f:
                    21:02:14:16:ff:86:e9:84:b7:8b:7a:5f:48:ac:a9:
                    6e:92:27:19:e0:f4:d4:50:cd:e7:df:7b:32:83:40:
                    fa:b0:5b:52:a2:b3:e4:8b:33:25:6d:de:a0:eb:55:
                    0d:89:f4:12:ea:de:95:0b:ef:70:32:f9:d0:b3:e6:
                    4c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:46:B8:EF:5A:84:AA:F3:51:E3:B6:C4:76:8C:8B:2D:D7:1C:1B:32
            X509v3 Authority Key Identifier:
                keyid:29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/92AEE092378211EFAEB6B36DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.245.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:ff:c4:3d:2d:64:39:6a:c0:fa:5e:7d:5c:33:10:5d:bd:7a:
         f5:88:1d:20:22:dd:49:ef:25:c0:11:02:52:0a:e5:fa:31:33:
         2d:e4:ae:7b:b1:4c:37:03:93:51:0b:a7:a6:df:bf:bc:c0:d6:
         54:d0:17:53:7c:57:af:94:90:83:e3:36:18:c5:76:c7:64:5c:
         d4:72:b9:60:6f:ca:92:d5:90:f3:d5:5d:bd:39:f9:77:f3:60:
         e2:8d:ce:0e:16:85:18:fd:21:db:3a:d0:b0:a0:71:fb:b7:87:
         4b:28:8d:6e:5d:0b:78:10:a2:17:a6:fc:27:e3:d5:eb:32:ee:
         bb:06:d1:68:de:c0:39:30:b9:14:ad:2e:bb:8d:c2:ca:59:6c:
         03:4c:c2:71:26:f0:57:93:ea:5b:f5:8a:3b:d9:91:2a:b7:e1:
         5e:e4:4a:83:df:53:6d:90:58:d3:35:ff:28:f0:4f:60:fa:34:
         63:df:3d:f4:74:1d:2b:83:0b:8e:06:0e:d2:d1:a2:49:cc:04:
         69:00:9f:a1:61:15:c8:15:23:9d:25:e0:d9:f5:d9:0b:89:af:
         01:4f:d8:10:3f:21:cb:0c:1e:bb:ad:f7:06:19:c5:b6:67:b9:
         57:7b:92:ff:77:0f:6c:35:c2:de:ea:af:f2:55:b6:b9:e6:b2:
         fd:5e:d6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:40:12 2026 by rpki-client