Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/4F10ED76D3B311EFA7B56234C4F9AE02.roa
File:                     4F10ED76D3B311EFA7B56234C4F9AE02.roa (raw, json)
Hash identifier:          wzm4G98xfiUmmcxO5R1gl7fwZeyQTWJs393ymNovQRU=
Subject key identifier:   63:FC:A5:69:EE:B6:95:7C:0A:92:F3:66:A9:51:0F:81:61:89:44:99
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       0409
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/4F10ED76D3B311EFA7B56234C4F9AE02.roa
Signing time:             Thu 25 Sep 2025 02:21:01 +0000
ROA not before:           Thu 25 Sep 2025 02:21:01 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     133159
IP address blocks:        202.155.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1033 (0x409)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Sep 25 02:21:01 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68d4a70d-14b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:33:c6:03:5f:be:27:4f:85:f3:2e:ff:99:e2:
                    f5:f0:69:72:0f:63:10:a2:a9:a5:45:1e:af:31:47:
                    2f:9a:10:c3:c3:8e:41:d1:eb:c1:73:51:75:9a:a4:
                    25:30:58:f1:75:73:90:22:2c:54:41:0f:3b:e8:48:
                    ed:b8:24:ea:db:31:e3:12:de:52:6d:2f:0a:8a:ad:
                    70:39:b7:6d:a6:97:12:6f:e9:2b:de:d1:ce:35:19:
                    55:4e:e1:b8:e0:87:57:f6:65:31:4a:c4:96:c7:fe:
                    0c:3e:36:5f:cd:d7:8b:25:2c:c1:ee:a3:1c:94:1f:
                    ac:7e:a8:61:4d:4f:7e:a6:43:ba:8f:a6:d3:cf:d8:
                    6d:22:c8:38:1b:55:98:dc:75:ee:f7:07:c8:c4:3f:
                    b4:8b:37:ce:b1:49:1a:34:5e:33:a0:91:ce:35:57:
                    01:55:ae:cf:02:59:43:1c:24:d0:51:1e:92:ea:e4:
                    fe:d7:4b:cf:8c:9b:5f:3f:90:86:57:1b:29:4d:e2:
                    00:62:04:73:ad:61:32:1c:62:2e:0c:48:0c:53:82:
                    88:a1:d7:82:bc:f2:76:0c:18:5a:a6:c1:2e:b0:f8:
                    6a:66:64:2a:a1:0c:bf:24:ee:74:e4:dc:22:f7:be:
                    f6:03:4c:76:63:7a:14:1b:2e:1b:60:e7:39:c1:3d:
                    a4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FC:A5:69:EE:B6:95:7C:0A:92:F3:66:A9:51:0F:81:61:89:44:99
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/4F10ED76D3B311EFA7B56234C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:02:4b:29:f6:50:e8:8e:ba:fb:2a:2d:a6:54:5e:9a:63:ae:
         70:a2:5a:7c:5e:55:f9:77:6f:7e:5a:4e:48:8d:df:0c:46:89:
         04:ab:93:b3:65:47:61:a9:65:47:cf:95:93:9a:61:6d:01:7d:
         5a:fc:1b:02:8e:80:51:42:21:9d:7b:dc:4a:4e:d7:41:6e:30:
         79:09:7c:b8:d4:07:92:52:4c:81:94:f2:47:ed:44:c7:6e:34:
         1d:5f:36:18:df:b4:36:35:4e:07:59:f3:bb:69:e2:5a:c9:33:
         dc:6c:88:a2:d0:1e:65:18:ea:71:50:0b:06:23:1f:8b:8b:03:
         a1:c1:06:2a:f9:ad:ff:b7:f2:49:9e:52:a8:89:26:19:1f:c1:
         b4:26:d7:43:e4:af:50:a8:27:30:ea:db:83:6f:56:c2:75:63:
         cf:23:bd:15:23:91:d7:fb:ab:ee:a2:6c:05:f8:44:8b:10:ef:
         da:28:c1:7e:c0:50:1d:f0:94:76:ed:7f:14:05:c8:35:3e:36:
         32:13:f2:51:19:59:c2:8c:ea:6f:c1:2a:23:02:75:dc:bb:f6:
         d3:b4:a3:f4:7f:b0:17:5d:ac:14:05:29:75:ce:7b:70:97:8a:
         33:d8:3e:3b:9d:ab:e1:a5:d8:a1:c2:9e:33:cb:2f:45:8f:99:
         9d:15:cd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:02:58 2025 by rpki-client