Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/1A83389CC35211EE8CE04C38C4F9AE02.roa
File:                     1A83389CC35211EE8CE04C38C4F9AE02.roa (raw, json)
Hash identifier:          G3AZcfArLBgVhuokmF/dQxJk3out8og0ZVXYVtVJ8gU=
Subject key identifier:   4D:1A:30:65:54:9F:DD:5C:BC:BB:BF:67:58:E4:36:A9:DC:5B:C5:F9
Certificate issuer:       /CN=A911C5B0/serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
Certificate serial:       35EE
Authority key identifier: 7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/1A83389CC35211EE8CE04C38C4F9AE02.roa
Signing time:             Tue 28 Jul 2026 15:10:43 +0000
ROA not before:           Tue 28 Jul 2026 15:10:43 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     23925
IP address blocks:        210.246.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl
                          rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:10:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13806 (0x35ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C5B0, serialNumber=7A961769549E0AAD0A9BF9925683BAEF733A2F1A
        Validity
            Not Before: Jul 28 15:10:43 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a68c673-aa5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:42:57:5e:c6:59:c3:16:29:af:a7:66:71:d1:
                    02:93:4c:fe:9b:4f:eb:06:e1:02:10:ab:3c:25:7e:
                    6a:e2:32:db:61:40:2c:93:1f:72:02:01:00:c5:92:
                    10:de:d1:8a:62:3e:69:0f:35:22:0f:5c:c6:7d:6a:
                    ed:8f:e6:96:0c:8a:7d:07:b7:b7:e4:e4:e3:d9:81:
                    f2:5d:c4:6f:1c:84:79:3f:ae:27:79:d1:02:44:67:
                    74:07:24:7d:9a:9b:f1:0d:d2:1c:2f:d7:58:b7:1d:
                    64:3d:d1:f0:a5:32:78:71:0f:db:eb:60:94:78:19:
                    d6:29:18:db:5b:d4:33:d1:67:20:cd:04:fe:ae:b0:
                    31:c9:cc:da:dc:e5:63:b3:ce:c0:b6:f5:b8:cd:8c:
                    00:54:bd:8b:b0:af:79:69:9e:22:6e:9b:3a:01:fd:
                    2d:ab:ee:cf:1a:67:a1:e4:35:6c:bd:51:a2:51:6c:
                    e4:75:9b:bf:c0:2b:70:46:6f:7f:56:41:66:5f:08:
                    03:91:68:08:f3:d7:02:35:74:02:f2:53:33:1b:d7:
                    b4:7b:fe:d5:fd:ff:b7:f0:94:02:15:34:65:af:53:
                    66:80:43:8f:c5:38:39:bb:65:cc:d4:44:a0:ba:52:
                    98:07:54:46:f7:b8:86:d8:48:ce:c5:2d:bc:db:bd:
                    e6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1A:30:65:54:9F:DD:5C:BC:BB:BF:67:58:E4:36:A9:DC:5B:C5:F9
            X509v3 Authority Key Identifier:
                keyid:7A:96:17:69:54:9E:0A:AD:0A:9B:F9:92:56:83:BA:EF:73:3A:2F:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/epYXaVSeCq0Km_mSVoO673M6Lxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epYXaVSeCq0Km_mSVoO673M6Lxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C5B0/40C8D5A61D8311E2823A5FD808B02CD2/1A83389CC35211EE8CE04C38C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.246.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:40:46:49:67:08:20:7f:38:c9:82:78:d1:00:6d:f4:b8:b9:
         85:2b:b2:09:b4:cf:9f:d9:ba:29:83:8d:81:51:ee:6f:76:01:
         b3:5e:5a:3f:79:9d:95:96:9b:7b:ca:24:b6:3a:f8:25:10:04:
         71:76:85:2b:cc:94:9b:77:4d:78:c6:c8:31:78:24:27:d6:92:
         3c:0a:a6:1c:93:02:6a:da:17:8e:42:02:27:98:68:47:20:2d:
         1f:f2:13:ee:fb:c4:dc:fd:85:bf:d2:e2:f6:ea:ef:8e:89:e1:
         17:c0:74:0c:b9:11:e6:48:e2:ce:e8:81:31:90:fc:a6:3a:71:
         a4:27:97:d4:fe:c0:6b:5e:a6:af:e8:07:59:8e:b6:82:7e:a3:
         93:af:61:16:52:fa:85:f9:44:04:1a:fe:b9:28:78:7b:ee:2a:
         51:1b:16:39:59:3d:62:29:f2:87:ab:ae:ee:65:c2:ac:ab:d7:
         66:0d:11:2b:63:37:cc:82:1a:de:13:9d:ca:be:9c:cc:b1:b7:
         9a:a8:76:b7:f6:fd:ad:ed:f3:c7:86:4d:ba:39:f6:d8:48:e2:
         db:5e:1b:31:23:b1:4b:f9:ea:35:ce:b5:a4:93:2c:8b:55:a2:
         7a:0f:e0:f6:b5:31:2f:e9:7b:62:81:2b:81:bb:b4:5d:08:f7:
         85:de:14:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:27:04 2026 by rpki-client