Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/8B92BEBE5F6411EFA6B37A52C4F9AE02.roa
File:                     8B92BEBE5F6411EFA6B37A52C4F9AE02.roa (raw, json)
Hash identifier:          vhbGmjHPdOQaH+bh64NTaxDM6fa2DZigRG71btxol5I=
Subject key identifier:   78:28:A0:AE:DC:8F:A9:B8:A8:EF:19:D1:41:D1:60:07:DE:FD:0A:DF
Certificate issuer:       /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Certificate serial:       FC
Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/8B92BEBE5F6411EFA6B37A52C4F9AE02.roa
Signing time:             Thu 09 Oct 2025 06:34:34 +0000
ROA not before:           Thu 09 Oct 2025 06:34:34 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        192.206.153.0/24 maxlen: 24
                          192.206.156.0/24 maxlen: 24
                          192.206.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
                          rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:35:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179672, serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
        Validity
            Not Before: Oct  9 06:34:34 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68e75779-f156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:13:40:13:13:d2:84:e8:46:13:0e:d0:4c:6a:
                    8d:cd:3a:86:33:d8:78:21:59:0c:19:d1:e6:4e:de:
                    f5:ac:67:45:62:4b:ad:29:d9:5b:19:ad:9f:49:d8:
                    92:74:c1:6d:a1:3a:09:37:5c:8c:e4:76:a6:05:28:
                    56:7e:00:35:12:e5:34:a8:ae:15:45:d2:2b:3b:c1:
                    c0:00:e0:21:01:93:59:bc:7a:96:e2:76:75:f2:6c:
                    6b:7d:0d:ad:db:36:c5:4a:07:61:65:8a:d4:14:6d:
                    4c:b1:88:b2:06:3f:1e:7f:32:4d:c6:39:eb:8f:e3:
                    f4:9e:72:e9:e7:86:32:05:04:18:17:60:92:d7:6c:
                    8c:45:6e:75:81:31:58:bb:7b:7f:04:b9:fc:37:f0:
                    de:cf:3b:b7:25:d0:70:66:a9:9a:50:27:1c:d5:14:
                    7b:cf:79:54:26:75:7b:1e:55:f0:d5:5e:49:e0:5d:
                    32:3b:84:f4:1e:a9:d2:ba:7b:f6:0b:f4:f5:2f:f9:
                    00:94:86:e7:91:bc:5f:a6:52:80:d8:91:c8:42:dd:
                    5c:a5:21:c5:21:7a:55:3a:a3:e1:d8:b1:14:ed:12:
                    3e:1b:8e:d4:62:b0:91:22:18:f7:e0:c2:4a:55:0a:
                    b4:2a:97:a4:d0:88:44:0c:74:f3:42:98:2e:12:af:
                    ba:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:28:A0:AE:DC:8F:A9:B8:A8:EF:19:D1:41:D1:60:07:DE:FD:0A:DF
            X509v3 Authority Key Identifier:
                keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/8B92BEBE5F6411EFA6B37A52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.153.0/24
                  192.206.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:f6:c9:9d:63:77:be:4d:ba:d1:a0:54:a2:70:d8:d8:3f:be:
         9a:9f:3e:8c:0a:ba:46:15:ce:aa:c8:b4:0c:86:a1:8b:04:a2:
         1b:b5:3c:ff:11:3d:80:2d:9b:27:d0:63:1f:98:a7:8e:a0:99:
         9e:95:8c:6c:b4:66:61:69:00:e6:aa:ae:97:19:f5:42:24:97:
         a6:6a:ec:ed:0a:1e:46:4a:bb:e8:4b:c1:d6:53:36:4e:c8:69:
         8c:cc:72:42:13:3d:05:ca:c7:e6:83:69:b8:01:ba:6c:f5:1f:
         34:ad:92:42:d8:ef:b2:6a:a2:22:22:ab:b0:3b:8e:a6:52:69:
         9b:eb:bd:4e:8c:7a:a8:87:55:ef:bc:76:f3:b5:cc:cb:44:19:
         cd:15:80:95:69:14:05:51:6d:e0:e0:cb:bd:8e:a6:6b:89:e9:
         06:dd:3b:2d:85:15:d1:7d:8d:28:bc:c2:f7:a9:19:8f:ef:92:
         63:93:98:7b:9f:c0:d9:9e:d1:f6:b9:0e:f7:88:30:4d:3a:80:
         f4:6d:c8:57:7b:a8:be:97:33:5d:a9:34:b3:ed:55:e2:a2:64:
         49:81:1e:91:da:81:1a:0a:56:dc:68:f4:de:0f:be:b9:13:26:
         2f:41:df:16:9e:8f:a9:2e:11:89:91:2d:88:e6:96:60:0f:f5:
         46:20:be:fa
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzk2NzIxMTAvBgNVBAUTKDkxQUE3NzgzRkIwMjc4MTk4MzhDNEE5MUM5MUM2MEQ0
MUZCM0VFQUIwHhcNMjUxMDA5MDYzNDM0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGU3NTc3OS1mMTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6BNAExPShOhGEw7QTGqNzTqGM9h4IVkMGdHmTt71rGdFYkutKdlbGa2fSdiS
dMFtoToJN1yM5HamBShWfgA1EuU0qK4VRdIrO8HAAOAhAZNZvHqW4nZ18mxrfQ2t
2zbFSgdhZYrUFG1MsYiyBj8efzJNxjnrj+P0nnLp54YyBQQYF2CS12yMRW51gTFY
u3t/BLn8N/Dezzu3JdBwZqmaUCcc1RR7z3lUJnV7HlXw1V5J4F0yO4T0HqnSunv2
C/T1L/kAlIbnkbxfplKA2JHIQt1cpSHFIXpVOqPh2LEU7RI+G47UYrCRIhj34MJK
VQq0Kpek0IhEDHTzQpguEq+6uQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHgooK7c
j6m4qO8Z0UHRYAfe/QrfMB8GA1UdIwQYMBaAFJGqd4P7AngZg4xKkckcYNQfs+6r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTY3Mi9FNUY0NUFEMDVG
NTQxMUVGOEQxOEJFMjNDNEY5QUUwMi9rYXAzZ19zQ2VCbURqRXFSeVJ4ZzFCLXo3
cXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2thcDNnX3NDZUJtRGpFcVJ5UnhnMUItejdxcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Nzk2NzIvRTVGNDVBRDA1RjU0MTFFRjhEMThCRTIzQzRGOUFFMDIvOEI5MkJFQkU1
RjY0MTFFRkE2QjM3QTUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBADAzpkDBAHAzpwwDQYJKoZIhvcNAQELBQADggEBAMH2yZ1j
d75NutGgVKJw2Ng/vpqfPowKukYVzqrItAyGoYsEohu1PP8RPYAtmyfQYx+Yp46g
mZ6VjGy0ZmFpAOaqrpcZ9UIkl6Zq7O0KHkZKu+hLwdZTNk7IaYzMckITPQXKx+aD
abgBumz1HzStkkLY77JqoiIiq7A7jqZSaZvrvU6MeqiHVe+8dvO1zMtEGc0VgJVp
FAVRbeDgy72OpmuJ6QbdOy2FFdF9jSi8wvepGY/vkmOTmHufwNme0fa5DveIME06
gPRtyFd7qL6XM12pNLPtVeKiZEmBHpHagRoKVtxo9N4PvrkTJi9B3xaej6kuEYmR
LYjmlmAP9UYgvvo=
-----END CERTIFICATE-----
Generated at Mon Oct 20 16:35:28 2025 by rpki-client