Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/4B810700778B11F0B1F4D629C4F9AE02.roa
File:                     4B810700778B11F0B1F4D629C4F9AE02.roa (raw, json)
Hash identifier:          yUBcyvU5NfW7XUx7rBFtK5t1BbDlNTDdVgqyknqUVTk=
Subject key identifier:   9F:F9:C9:54:B0:15:96:32:FE:E1:D2:D9:EC:91:63:F7:42:0E:8D:FA
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       03C8
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/4B810700778B11F0B1F4D629C4F9AE02.roa
Signing time:             Tue 12 Aug 2025 14:47:40 +0000
ROA not before:           Tue 12 Aug 2025 14:47:40 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     205634
IP address blocks:        218.33.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 968 (0x3c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Aug 12 14:47:40 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=689b540c-69ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:49:9d:71:1e:bb:e3:80:d0:78:a3:db:1e:d1:
                    bd:e9:9b:dc:7b:ba:92:ec:b4:36:98:66:03:b9:2c:
                    6b:bb:7c:d4:dc:d3:fa:d8:87:55:fb:9b:35:29:2a:
                    e6:6f:93:3d:da:88:92:37:78:e2:36:3c:a5:f0:06:
                    70:43:6d:7f:65:4e:4e:f8:19:2c:de:31:85:b1:5f:
                    7e:07:89:73:b7:84:55:ca:c8:f6:7a:67:57:71:16:
                    fa:27:6f:09:dd:6a:fe:8a:b1:24:a5:e7:fd:dd:5b:
                    5f:2d:d5:26:c0:34:73:c7:9b:c6:0c:2d:f7:4a:38:
                    7d:eb:21:25:cf:18:cc:e7:fc:0a:38:7c:40:70:3f:
                    50:98:92:3d:da:63:26:dc:98:16:29:69:2e:35:16:
                    50:5e:6c:47:2c:e5:ff:06:ae:47:34:7a:4f:52:a6:
                    d6:1f:15:10:9b:8d:9a:af:45:bb:9a:2b:c2:6d:1c:
                    bf:4a:3f:13:99:e3:0d:6a:08:2a:c5:e0:52:01:7f:
                    17:4c:80:ab:e5:af:55:9d:32:48:1f:0f:23:db:4a:
                    62:30:2e:0c:63:4f:37:54:42:1a:c3:80:cf:dc:3d:
                    a7:c4:e1:fe:30:19:8d:ea:8f:7a:56:46:bc:c7:91:
                    47:b5:de:40:4d:15:40:9b:1b:bc:b7:9c:ef:6f:65:
                    dd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F9:C9:54:B0:15:96:32:FE:E1:D2:D9:EC:91:63:F7:42:0E:8D:FA
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/4B810700778B11F0B1F4D629C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.33.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d6:73:23:b9:d0:94:1b:a4:57:ea:0f:15:05:ba:41:6d:69:ff:
         74:3e:85:7c:e3:de:cb:68:f4:31:e0:37:c6:33:e4:f8:50:52:
         51:83:e0:36:ec:31:33:a5:35:37:cd:af:42:be:0f:84:48:45:
         6a:7a:a5:e7:d6:fb:28:e8:e1:12:8a:ba:dd:d4:f6:ab:ff:8d:
         62:02:ae:7b:b2:13:97:25:fd:4f:b2:23:83:41:45:7c:45:5b:
         d2:d5:a5:e0:69:db:ac:34:9c:a7:e0:e8:c5:b5:cb:76:b5:ed:
         01:4f:44:20:2c:df:d1:d5:8a:40:07:d2:f7:11:cd:cb:ca:b8:
         c1:38:80:84:b5:76:fb:1f:dc:07:00:47:69:75:c6:b0:86:bf:
         d2:0f:d9:2b:ab:d5:1e:ea:8d:f6:7a:e5:a4:ac:7b:3c:51:50:
         9e:96:3c:bb:76:20:1a:84:ed:dd:d3:c4:39:ce:39:b7:28:77:
         53:17:75:7e:69:ee:ae:78:0d:45:a7:94:45:ee:e1:4a:09:ac:
         78:8b:c2:21:cf:d5:65:95:89:7b:bf:f5:39:59:db:e0:22:13:
         1a:12:c7:c0:7d:23:36:fa:64:c9:d0:97:84:49:46:40:aa:3e:
         c2:93:c4:e4:7c:f6:7d:bc:3b:ac:f1:a1:70:ea:0d:82:0b:66:
         a2:6c:62:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:31:55 2025 by rpki-client