Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/60C5E922F83D11F0A63E147B3D6F56BC.roa
File:                     60C5E922F83D11F0A63E147B3D6F56BC.roa (raw, json)
Hash identifier:          mGEqPGiYdYenGfCSqgiuAY4SoE4nZTtdzFJPg0RJReE=
Subject key identifier:   C8:2D:7A:AF:60:37:FC:DC:C3:52:05:7C:A8:F2:23:C3:CF:4B:CB:58
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       05B8
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/60C5E922F83D11F0A63E147B3D6F56BC.roa
Signing time:             Wed 06 May 2026 23:33:26 +0000
ROA not before:           Wed 06 May 2026 23:33:26 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     9304
IP address blocks:        202.155.149.0/24 maxlen: 24
                          202.155.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 01:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1464 (0x5b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: May  6 23:33:26 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69fbcfc6-7ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:13:d3:cd:b5:fb:7f:2c:f4:1c:4d:45:79:6d:
                    c4:7f:c8:1d:79:4c:21:fd:41:9b:38:86:46:1d:95:
                    f6:27:e0:c5:82:27:2f:d6:53:ab:6b:22:db:58:66:
                    ed:06:c9:7a:75:9e:28:3f:9d:ce:1f:81:ce:be:5b:
                    6b:12:3b:dc:8f:b7:05:82:4b:a0:54:99:0e:c9:8d:
                    8d:82:7a:f0:3d:f7:ff:fc:27:22:bc:f3:ef:2a:a7:
                    f1:20:28:5f:cc:66:8a:f3:32:eb:61:41:75:91:c4:
                    ab:32:72:2e:db:6b:8c:75:ee:8e:2c:2a:b7:46:4f:
                    fb:1b:ff:ed:6d:32:cd:1a:2a:fe:43:70:71:1f:9a:
                    8a:a9:8f:c5:cd:ba:aa:de:67:c6:b5:fe:2f:28:a7:
                    01:b8:f9:43:3f:c3:b0:f6:95:a3:e4:ca:25:b4:38:
                    2d:c2:7b:df:2c:54:d3:59:4f:87:79:ca:b1:cd:30:
                    2d:0c:fe:b4:b1:c7:a1:2f:c2:75:03:5b:a4:8d:e1:
                    a9:2d:89:2d:c1:6d:0f:54:09:7f:f8:4a:bf:ca:9c:
                    58:c9:da:71:7d:7e:e5:e0:96:cb:25:05:60:58:63:
                    61:f5:0f:8c:02:11:a3:f0:43:0d:67:18:21:14:3c:
                    4f:4b:ea:39:ed:6e:09:6b:d6:26:01:79:43:1a:1a:
                    29:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2D:7A:AF:60:37:FC:DC:C3:52:05:7C:A8:F2:23:C3:CF:4B:CB:58
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/60C5E922F83D11F0A63E147B3D6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.149.0/24
                  202.155.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:42:60:e5:3a:90:29:dc:d0:9d:12:08:a3:74:d4:af:c0:f5:
         ee:ae:72:64:34:98:10:2c:80:3c:98:ef:a0:70:3f:17:f7:d6:
         94:8d:2f:ed:f0:87:2f:8c:dd:66:81:bd:de:80:e7:c4:19:8a:
         20:59:82:48:54:d6:f0:63:9a:8f:48:e4:11:1e:91:ba:a3:a9:
         aa:b4:5c:b8:bb:8a:12:dd:e3:e6:dc:11:38:ce:03:37:18:04:
         a9:27:21:62:4a:e1:b6:8e:e6:14:d6:cc:de:d3:44:eb:ab:7c:
         41:b4:0a:77:6b:50:14:1b:db:83:f6:eb:83:16:f7:fb:c2:fb:
         f8:e7:7e:ad:da:c0:9f:82:ad:2c:94:ca:cf:aa:12:39:e5:f6:
         39:2d:80:17:50:0a:62:8c:f1:77:85:03:be:68:fb:d3:70:b9:
         bd:0c:90:38:e1:b0:4a:75:14:50:c2:ff:4f:39:6a:4f:eb:a4:
         63:7b:e0:32:41:69:e5:f4:6c:4a:af:24:03:88:5f:f9:6e:3a:
         72:7c:a3:f0:08:53:76:4f:2c:99:0a:90:a0:ed:58:dc:b2:7f:
         45:83:2e:16:16:fa:2d:67:ad:00:a4:e6:0e:f0:8f:bd:b8:87:
         dc:fa:bd:6c:d1:90:2a:6e:2e:24:80:eb:ad:94:29:cf:b0:71:
         64:7b:ed:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:26:25 2026 by rpki-client