Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/24E07816913E11F0AE8FEC66C4F9AE02.roa
File:                     24E07816913E11F0AE8FEC66C4F9AE02.roa (raw, json)
Hash identifier:          V+1kyUYokcH3NnLiL3qAStvXYt+drfTrk4l/L+DZ3PE=
Subject key identifier:   6E:CF:C6:2A:04:E8:A2:3F:1F:A8:C4:71:78:F8:16:3F:E1:4B:06:13
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       041E
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/24E07816913E11F0AE8FEC66C4F9AE02.roa
Signing time:             Thu 25 Sep 2025 02:21:22 +0000
ROA not before:           Thu 25 Sep 2025 02:21:22 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     398256
IP address blocks:        202.155.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1054 (0x41e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Sep 25 02:21:22 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68d4a722-371a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ef:7f:d9:4f:a6:f6:f3:7a:e9:9c:7b:30:f6:
                    70:6c:29:27:85:ac:78:fc:e9:01:bb:bc:84:11:0c:
                    6f:01:b9:3e:cc:da:c5:97:0e:f7:8c:0e:2d:a9:e9:
                    8f:bc:c2:e0:e2:6e:eb:00:a8:21:fc:ce:e1:ff:0b:
                    15:d4:13:ec:2d:87:ae:84:cf:ff:2a:c8:6c:e7:62:
                    54:a3:68:29:93:a4:44:78:cd:26:0c:bd:cf:b4:27:
                    72:37:66:41:89:b1:48:f8:1a:f9:41:bd:3f:e0:60:
                    0e:85:eb:68:0d:b0:6f:4c:6c:83:fd:f9:75:31:5a:
                    92:18:bd:23:d0:03:3c:dd:04:2a:ea:15:0d:51:5e:
                    75:da:2c:9f:7b:f9:e4:13:e6:04:5b:66:f3:b5:19:
                    20:c2:9d:05:28:6a:61:d6:14:f2:e1:ef:78:10:0d:
                    cd:5e:d5:c9:4a:e8:d4:c9:e9:b3:fd:a7:e0:d1:86:
                    2e:d9:7c:a3:70:7b:af:1c:cb:13:07:cd:e4:fd:dd:
                    5e:fb:51:5c:2d:03:c8:2b:dc:92:9f:e7:06:be:0f:
                    cb:2f:31:9d:b9:b4:dc:68:a7:60:95:17:74:17:a5:
                    b4:12:70:d9:d5:42:27:c4:23:33:73:03:fe:2e:8d:
                    79:b9:c8:15:e6:4e:a6:40:9a:3e:24:80:dc:87:28:
                    88:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:CF:C6:2A:04:E8:A2:3F:1F:A8:C4:71:78:F8:16:3F:E1:4B:06:13
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/24E07816913E11F0AE8FEC66C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:5a:3d:12:52:87:0b:cc:26:1d:b6:7d:ec:1e:d3:a0:14:ab:
         cf:cf:ba:c1:6e:d4:aa:09:b7:fe:f7:14:ee:17:a3:b2:7c:43:
         9e:a2:b6:24:02:14:34:89:b0:4b:7b:35:d1:8b:1d:ce:c8:ec:
         e8:5c:d4:ee:d6:1e:35:40:8c:3e:16:9e:cd:31:ae:08:5c:06:
         e9:d6:4a:33:2a:03:5f:ae:17:6a:e5:20:61:f2:7d:e3:6e:91:
         92:0c:e9:a3:41:17:cd:e6:e3:85:d0:5c:fa:b4:66:78:16:fe:
         4c:38:1d:3f:ca:f3:95:f6:1f:66:c9:0e:ba:bf:5f:3d:bf:32:
         26:23:d1:79:4d:8c:97:9b:2e:fa:31:5b:8c:ad:bd:52:7b:87:
         a7:ae:a9:79:2b:3b:8d:c8:a9:57:b2:b3:19:23:a5:1d:9d:ad:
         f9:fc:eb:82:a4:7f:9c:60:8a:3c:bb:57:44:2b:26:43:09:81:
         fa:8b:5a:f1:84:b1:c6:03:63:09:b1:4f:41:b0:77:55:1d:7e:
         48:d0:9a:3e:95:ba:19:5d:07:ce:93:e5:a4:ff:dd:6e:b3:b8:
         3b:14:fd:42:bf:f8:62:fa:92:d2:1e:f3:5e:59:e8:9c:46:54:
         7e:6e:a6:43:17:7e:54:cc:78:86:43:b2:08:2c:e3:c8:d2:f5:
         74:16:97:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:51:25 2025 by rpki-client