Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/92F5E790172E11EA9CCC934DC4F9AE02.roa
File:                     92F5E790172E11EA9CCC934DC4F9AE02.roa (raw, json)
Hash identifier:          JVqWfxQ3Imk/tHtB1lFlgnw7x7J3sXEP1K4IX9cY6Sk=
Subject key identifier:   46:CB:D2:7B:B6:8E:56:D5:BE:79:82:CB:BB:65:DB:9C:04:BB:32:C9
Certificate issuer:       /CN=A91BC847/serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
Certificate serial:       1499
Authority key identifier: 79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/92F5E790172E11EA9CCC934DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:15:03 +0000
ROA not before:           Thu 18 Sep 2025 17:26:13 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     63932
IP address blocks:        180.211.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl
                          rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:31:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5273 (0x1499)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC847, serialNumber=79D66C64A6165A2E4CB37D49700E6C761841C39A
        Validity
            Not Before: Sep 18 17:26:13 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a48227-9732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:8b:b8:cb:5c:b7:08:04:4a:87:0e:0e:f6:a5:
                    0b:65:e8:9a:f4:0f:b9:ff:f1:09:0c:37:d0:e7:08:
                    0e:74:e4:74:86:b4:0a:54:13:14:73:cc:5c:f1:a2:
                    17:6e:af:93:68:14:77:7b:0f:9a:f4:65:99:1e:c2:
                    ee:35:5c:47:e8:07:59:3c:da:cf:fb:e9:61:12:84:
                    32:24:1f:45:4c:3d:80:fb:71:4d:01:1e:24:f9:40:
                    70:ac:de:90:8b:58:79:88:38:62:69:15:0a:99:44:
                    37:4e:45:55:0b:38:78:8d:24:63:e8:c5:12:99:07:
                    a2:e1:37:71:42:76:7d:7a:9e:65:04:12:0c:d7:63:
                    77:2b:13:69:b5:51:f8:a1:ee:7a:3a:b7:c6:63:5e:
                    87:48:ec:6b:07:ec:e8:00:5b:de:5e:94:56:58:ac:
                    46:b9:fe:d2:a1:46:2a:25:d1:ed:a6:09:b6:01:a5:
                    02:4d:fa:dd:99:2d:f6:90:b7:28:d9:ee:e6:b2:5e:
                    38:0f:c4:ee:d1:d8:b8:4b:8a:1f:6c:72:b4:7a:ba:
                    6f:41:1b:96:8d:9a:53:dc:34:6b:e6:64:a8:02:0c:
                    3b:1d:7a:23:de:b1:a0:63:e1:8c:74:a7:c0:1b:1d:
                    bb:5e:4f:d8:4d:43:60:f3:98:59:56:c7:1f:4d:80:
                    ae:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:CB:D2:7B:B6:8E:56:D5:BE:79:82:CB:BB:65:DB:9C:04:BB:32:C9
            X509v3 Authority Key Identifier:
                keyid:79:D6:6C:64:A6:16:5A:2E:4C:B3:7D:49:70:0E:6C:76:18:41:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/edZsZKYWWi5Ms31JcA5sdhhBw5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/edZsZKYWWi5Ms31JcA5sdhhBw5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC847/ACF943529AF311E8AAB4D55DC4F9AE02/92F5E790172E11EA9CCC934DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.211.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:78:6d:1d:63:19:31:c8:a3:bb:18:56:4a:eb:fe:c6:13:1e:
         e5:da:84:86:da:65:15:83:f5:85:df:fa:f0:9c:e5:43:3f:0e:
         5d:3a:6b:1c:e0:1a:0d:d6:40:66:c2:4f:06:4a:ad:ce:32:d5:
         17:bd:5b:cc:64:12:59:5c:8b:2e:39:50:85:e3:8b:de:ee:cb:
         19:24:c1:11:c2:3a:9c:cc:fb:e4:f2:7c:d4:67:9c:bd:4b:e3:
         3c:6e:c8:93:54:29:ae:50:86:1d:18:29:da:d9:c4:78:ab:76:
         75:cc:14:3d:28:9e:dc:8f:5c:72:07:c5:66:47:99:a7:38:d3:
         90:a3:a0:76:cb:b1:58:ec:b8:5b:a5:85:66:6a:d5:a6:8d:4d:
         64:fa:a2:8b:e3:08:9f:d9:f1:6e:c0:bf:ea:4c:9c:0b:68:6f:
         ec:ae:6e:30:9b:d8:6e:c5:0c:43:6e:67:72:b3:b9:25:5f:83:
         87:1e:d4:cc:f6:14:f8:5e:2a:62:ae:68:a4:a4:5d:94:d0:37:
         8c:c2:c6:a0:0b:c4:e7:d6:aa:1f:c9:9d:7a:ec:0a:60:a6:2d:
         a0:2c:38:ab:8f:c2:b2:a4:fc:4b:e0:9d:57:a3:31:ab:0d:05:
         ff:fd:00:8f:65:8d:71:e7:83:9f:6a:2f:69:3c:ee:00:98:f7:
         b6:9d:65:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:48:11 2026 by rpki-client