Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/8068BF600E9711EB9A6C2B3CC4F9AE02.roa
File:                     8068BF600E9711EB9A6C2B3CC4F9AE02.roa (raw, json)
Hash identifier:          G5p/j+Iz5urbmVn/3Zvh7rlgms1JVRVsFtuoDTKUJVA=
Subject key identifier:   87:89:CA:B4:9D:B4:10:D8:29:F1:7D:6C:67:66:F1:08:31:67:F4:3F
Certificate issuer:       /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Certificate serial:       0864
Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/8068BF600E9711EB9A6C2B3CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:02:50 +0000
ROA not before:           Wed 16 Apr 2025 21:31:41 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     131245
IP address blocks:        202.92.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
                          rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:45:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2148 (0x864)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110718, serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
        Validity
            Not Before: Apr 16 21:31:41 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a47f49-cf37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:fb:dd:e1:a7:74:57:1b:3e:24:99:f9:88:
                    fd:b6:69:97:04:93:0b:67:77:0a:d7:f5:6f:af:2d:
                    cd:5a:82:45:c3:05:41:5e:30:69:2a:c1:aa:ec:f5:
                    02:b8:7c:36:ca:f9:4c:59:6d:f1:5a:a7:b3:0e:c1:
                    1b:2a:14:07:ae:37:ab:cd:1a:ed:6c:ca:f8:44:13:
                    02:94:69:4e:ba:c2:27:00:47:9c:b7:41:e7:a8:3e:
                    d5:e3:f5:74:46:f7:0a:93:f3:24:ce:93:ea:19:a2:
                    ae:8e:9a:7b:08:6f:96:ca:a8:ed:ba:b5:71:46:05:
                    59:6f:27:e6:9b:27:28:d4:98:8b:7d:0f:dd:db:b6:
                    08:aa:bf:67:4a:cf:83:8d:a3:96:9a:b9:23:1e:0e:
                    54:1a:13:a8:53:7c:49:c6:fd:1b:9e:d6:9f:ec:d0:
                    2a:bd:b1:b6:d1:f7:e0:0e:77:25:e4:46:ee:f3:9f:
                    e2:38:48:44:ce:2c:d2:27:35:08:1e:dd:7b:87:3f:
                    93:61:53:c7:c3:ef:e0:26:a2:84:82:88:98:11:08:
                    4c:47:ea:46:1d:b4:de:95:77:36:d4:b6:09:15:ad:
                    d6:a1:c8:87:a6:e1:b8:1b:11:57:f6:73:e0:09:63:
                    9d:02:42:02:f1:11:43:01:af:02:3e:8c:60:de:bc:
                    28:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:89:CA:B4:9D:B4:10:D8:29:F1:7D:6C:67:66:F1:08:31:67:F4:3F
            X509v3 Authority Key Identifier:
                keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/8068BF600E9711EB9A6C2B3CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.92.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:4e:74:8a:6b:3f:11:54:ca:2f:ab:6c:f6:a8:d3:25:29:ba:
         d4:99:5b:51:17:ad:49:f2:24:f6:b2:3d:5f:0c:0a:e8:05:61:
         44:cb:83:bc:79:ee:d9:88:55:87:e0:90:2c:b5:09:06:75:69:
         c0:ae:b9:63:b9:09:e6:11:2a:51:17:28:30:b2:f4:51:2c:61:
         3a:c7:d5:bb:e3:0e:bd:33:3c:8e:5f:2a:07:98:fe:f1:b0:1e:
         49:01:75:3b:43:bf:e5:45:be:19:ad:7c:22:8b:7c:36:d0:7a:
         b3:0c:c8:a7:a3:e8:24:f3:04:54:6a:5b:68:c3:91:0e:71:ce:
         1f:8b:ac:b4:f1:ff:40:b3:00:6d:bd:9f:e9:b6:6a:86:9f:b3:
         b1:4f:fc:48:99:45:e9:d7:07:cd:1b:99:38:ae:15:81:24:d6:
         eb:5a:2e:18:c3:a9:b2:20:30:fa:41:49:cd:4e:11:96:bf:8b:
         a3:4c:0a:cf:3c:6c:1b:dd:ea:40:52:4a:b5:09:08:bb:ff:1c:
         44:b3:81:e7:db:66:be:dd:23:36:8c:67:a1:c5:c6:e1:92:6b:
         0b:4d:43:28:06:b3:c5:fb:89:0c:c4:05:62:2a:c4:3d:2e:12:
         20:cd:48:ee:a5:b6:7d:6e:a2:e8:f2:90:ac:4d:c3:f5:db:54:
         e1:b2:ae:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:27:54 2026 by rpki-client