Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/1B740C443DF811ED8EA29234C4F9AE02.roa
File:                     1B740C443DF811ED8EA29234C4F9AE02.roa (raw, json)
Hash identifier:          ciVd17g+4mHQDyiRvx0WHI7bUCfYe7YV/e/BA41wmHI=
Subject key identifier:   46:C0:41:7B:24:2B:28:00:DF:56:52:C0:C9:78:E4:7E:1D:8A:06:71
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       0413
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/1B740C443DF811ED8EA29234C4F9AE02.roa
Signing time:             Thu 25 Sep 2025 02:21:13 +0000
ROA not before:           Thu 25 Sep 2025 02:21:13 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        218.33.0.0/18 maxlen: 24
                          218.33.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1043 (0x413)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Sep 25 02:21:13 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68d4a718-025d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:b7:39:e3:08:58:16:21:1c:71:ec:8a:5f:
                    39:34:fa:87:43:e1:e9:d7:d8:d0:f6:83:8c:df:77:
                    b2:32:17:05:cb:4a:68:3f:70:66:e6:91:ac:d5:53:
                    b3:20:c1:ea:df:f3:19:15:33:09:e9:84:d4:ca:85:
                    0b:1b:22:4c:fa:31:8a:f1:f1:df:4f:35:1c:69:bf:
                    c8:c9:fc:b8:c8:a5:00:ea:50:2b:b7:ab:8f:5c:16:
                    84:c8:e6:8d:80:6a:6c:ff:ff:40:c9:18:e0:bf:22:
                    f9:b1:ac:47:31:4b:d8:0e:34:f3:19:86:62:38:75:
                    de:fd:89:32:19:a3:ad:30:d6:37:4c:5c:26:71:21:
                    66:fe:62:6b:d1:c9:50:95:25:f6:ce:ef:a9:cc:96:
                    17:ec:47:98:ac:3a:76:e9:aa:9f:90:85:f4:72:d2:
                    4b:24:02:df:33:a6:e1:32:65:2e:d3:ef:1a:52:50:
                    8d:6d:91:24:4b:a6:4e:33:1d:3d:65:a0:f3:07:7f:
                    d2:24:bb:a3:22:f2:f1:51:1b:5c:9c:6a:ec:bf:75:
                    5b:8f:ba:0e:0e:62:36:48:2c:6f:ec:ec:c6:d9:b6:
                    91:9b:e9:d2:8d:27:d5:cf:8c:15:a7:c0:33:97:f5:
                    70:c6:d8:61:b4:62:3b:85:89:47:28:08:aa:56:ce:
                    81:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C0:41:7B:24:2B:28:00:DF:56:52:C0:C9:78:E4:7E:1D:8A:06:71
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/1B740C443DF811ED8EA29234C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.33.0.0/18
                  218.33.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:95:9e:ae:48:11:94:b3:c5:3c:2d:fa:9b:91:65:eb:15:6a:
         2e:ea:05:d4:29:77:66:25:e7:6a:4c:4c:a0:d7:19:c2:58:b9:
         5b:d9:e2:2e:29:b6:45:24:aa:1d:83:22:c0:33:34:72:0a:14:
         85:a1:14:18:b6:69:7e:fd:4c:8a:7a:b9:a6:f9:61:dc:aa:43:
         95:d6:94:7b:1d:cd:28:f7:df:e6:20:e5:9e:81:5a:51:ad:df:
         2d:fb:d3:9e:4a:7e:ac:d8:3d:b9:1a:8d:fe:c8:4f:3d:36:e3:
         f1:8e:f4:ea:e0:c1:ad:33:12:d0:8f:dd:bd:07:6a:a2:50:9a:
         de:e3:8c:25:e3:0b:c0:94:13:17:11:aa:b9:83:8e:eb:a4:7a:
         4b:fa:a0:41:c9:29:4f:e2:a9:8c:ef:8f:88:5c:8d:8a:da:20:
         7b:5e:62:67:cd:5e:8d:aa:93:e6:db:05:3f:8e:a0:0d:51:fb:
         23:2c:7e:70:a4:42:93:de:ce:38:f3:42:99:6a:c6:da:3c:a5:
         e4:2b:b9:1d:ee:63:5c:91:05:43:1a:c2:f6:42:2c:30:f0:ec:
         32:35:b3:ed:5c:11:74:04:37:1d:84:b6:77:67:56:d1:a9:40:
         70:82:7a:d9:7a:0e:1b:15:e3:10:5a:19:00:b8:ed:d9:ad:8e:
         e8:10:03:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:02:56 2025 by rpki-client