Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/830314BE0E9711EB9A6C2B3CC4F9AE02.roa
File:                     830314BE0E9711EB9A6C2B3CC4F9AE02.roa (raw, json)
Hash identifier:          u+k1IeAPIhn53gDMSxVaQBYx2nC9q134hvGu7WGdGxg=
Subject key identifier:   BC:75:B6:7A:0C:99:58:CA:28:3C:44:42:55:6A:9F:0B:52:99:70:64
Certificate issuer:       /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Certificate serial:       086A
Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/830314BE0E9711EB9A6C2B3CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:02:55 +0000
ROA not before:           Wed 16 Apr 2025 21:31:46 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     132796
IP address blocks:        202.92.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
                          rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:45:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2154 (0x86a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110718, serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
        Validity
            Not Before: Apr 16 21:31:46 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a47f4f-7d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:34:44:34:61:c1:43:ae:e4:86:6c:4b:6b:79:
                    58:a6:d3:1a:3c:40:98:a5:e4:be:6f:5b:5b:a2:45:
                    a5:66:f2:6a:dc:b6:cb:87:46:b3:51:de:c6:f5:7d:
                    6b:a9:3e:b7:02:75:7f:d4:8b:cc:c7:32:2e:88:ca:
                    bc:a3:d2:b0:9c:9d:40:62:c9:3d:df:31:ef:85:16:
                    2e:61:63:ae:8f:e7:77:6c:53:33:e8:c1:49:85:01:
                    80:af:75:75:6f:fc:50:91:ca:8b:74:c6:5b:b7:a1:
                    3d:e3:b6:3f:35:2f:f6:0e:51:f8:82:f6:d0:2f:da:
                    cb:cf:88:a2:ae:13:57:77:70:95:e0:a7:5a:1d:4d:
                    2d:ea:77:71:6f:ea:48:d9:43:53:5f:07:96:12:2e:
                    13:48:ae:bc:70:13:f3:2a:e2:02:8e:e1:94:73:d9:
                    18:6b:58:d3:74:d4:41:ab:f8:7e:a4:a8:05:9b:d9:
                    e3:90:52:68:86:bb:32:5a:1a:1a:b3:5f:a7:8e:d1:
                    bb:ba:8c:46:79:8a:a4:a8:5b:53:60:fb:ff:af:fe:
                    fa:6e:76:b0:7c:20:76:7c:5a:e5:c6:5b:28:63:9a:
                    e2:69:2c:c9:76:f2:50:ea:95:40:c5:88:99:cd:41:
                    56:cd:f0:e8:5e:1b:43:da:3f:1d:3c:b0:69:91:99:
                    c3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:75:B6:7A:0C:99:58:CA:28:3C:44:42:55:6A:9F:0B:52:99:70:64
            X509v3 Authority Key Identifier:
                keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/830314BE0E9711EB9A6C2B3CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.92.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:63:49:f6:27:34:4c:97:3d:cc:3e:41:e4:aa:98:f4:2f:e5:
         65:4e:93:e5:dd:07:f1:de:82:d0:29:d1:bc:26:70:f0:95:4a:
         96:29:75:27:d0:83:b4:2e:3d:70:f4:87:5c:00:aa:da:c4:0c:
         aa:61:13:6e:89:45:09:7a:52:ce:59:40:25:92:a8:72:14:9d:
         86:32:93:99:b0:26:b4:99:ad:19:83:cc:54:70:c1:7a:90:08:
         e9:1f:c2:2f:37:07:fd:c1:b9:29:b9:1b:e1:1f:44:f6:9e:43:
         97:68:af:87:4c:41:ce:18:59:29:91:f9:1e:c1:03:e6:b8:dd:
         3b:8c:c6:26:23:4a:7c:bb:97:cd:12:c7:15:15:1a:55:8f:46:
         82:73:ab:d7:ea:04:ae:a0:15:51:81:79:a5:47:72:f2:9b:c5:
         25:10:cd:d4:25:c9:03:1f:fc:28:60:ca:07:6d:a4:c7:31:bb:
         a3:99:37:4f:cc:9f:13:47:bd:db:c8:fb:e0:d2:26:f5:e1:36:
         3c:6f:5e:dd:32:da:43:7a:4b:e7:94:73:ba:a8:b7:14:d9:8e:
         8e:de:f2:6a:e0:a4:02:37:22:10:fd:8a:e6:34:15:69:48:e7:
         f3:a5:e7:67:53:34:b1:9b:d9:c2:cf:d0:cb:7a:bc:a7:de:d1:
         03:2e:c9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:27:47 2026 by rpki-client