Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/820501DE3D3211F09AB6A617C4F9AE02.roa
File:                     820501DE3D3211F09AB6A617C4F9AE02.roa (raw, json)
Hash identifier:          6/m9rDXoa8IIkQkJoQ23+1wKjd2PKMR0HfmCCcG0qck=
Subject key identifier:   0C:AD:E3:7C:0B:49:C1:ED:85:E2:06:3A:45:A2:04:EC:4F:E7:DE:64
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       040B
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/820501DE3D3211F09AB6A617C4F9AE02.roa
Signing time:             Thu 25 Sep 2025 02:21:04 +0000
ROA not before:           Thu 25 Sep 2025 02:21:04 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     134677
IP address blocks:        202.155.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1035 (0x40b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Sep 25 02:21:04 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68d4a710-4925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5b:84:78:40:09:04:8a:cd:f4:62:8d:21:8f:
                    25:b3:d0:6b:9d:6c:a3:27:9b:36:3c:06:17:e7:38:
                    27:6d:7b:bd:bc:57:9a:14:93:09:3c:ad:78:46:da:
                    e5:3a:f3:42:78:2a:2e:14:a6:2d:32:40:87:62:bc:
                    56:65:b7:7d:0f:1d:98:92:14:ba:91:15:9c:58:c6:
                    13:72:14:b5:62:1a:b1:a0:54:80:da:c8:90:d9:b0:
                    69:b8:1f:fd:9d:ec:60:2f:15:67:3f:15:ea:1c:db:
                    dc:c8:d0:a9:9f:8d:22:a6:18:93:6a:89:d6:52:93:
                    f1:4c:8f:3a:0b:bc:c2:d2:53:3b:b9:56:9b:62:16:
                    9d:ee:cd:10:30:4b:92:cf:84:65:19:da:c7:c2:f5:
                    7c:5a:f3:aa:bf:b6:9d:15:f3:cb:d6:23:5f:b0:4c:
                    b9:de:82:9c:6c:97:7a:22:08:ff:c1:31:07:e3:8c:
                    e9:fa:79:d4:42:f4:1b:b2:a2:48:67:64:ac:7d:e1:
                    4c:4d:7d:bc:fa:7b:7b:b1:41:31:97:f2:eb:3c:87:
                    7e:60:a9:e2:1d:51:a8:c5:48:e6:b4:4f:4e:dd:1f:
                    bb:39:8e:ae:62:be:b5:f5:57:f0:65:ee:18:6d:03:
                    8f:d4:14:6b:56:7c:05:c0:cc:10:8a:b3:f1:76:d0:
                    b8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AD:E3:7C:0B:49:C1:ED:85:E2:06:3A:45:A2:04:EC:4F:E7:DE:64
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/820501DE3D3211F09AB6A617C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:44:92:d0:86:d9:86:e0:cf:82:89:09:89:87:7f:c3:7c:66:
         89:04:60:37:33:86:b6:c7:59:75:d9:48:c9:51:5b:74:6f:4d:
         c9:39:7c:ce:af:82:65:ce:71:30:45:cb:4c:62:83:2c:1e:a0:
         b7:27:72:2d:f4:81:de:f7:20:b9:89:36:53:f5:8e:51:d2:64:
         ab:91:20:fc:4a:be:e7:72:a9:03:2d:46:a6:00:67:0b:e5:70:
         f0:d4:9e:79:29:d7:fa:05:00:86:e1:b5:76:eb:4c:3d:07:d0:
         eb:9e:60:19:78:54:6d:d3:05:64:8a:51:25:80:07:da:b9:e2:
         85:15:4d:36:31:9b:45:62:a4:91:6b:1c:78:4e:5d:dd:d7:c2:
         c6:79:b5:62:8b:5d:2c:f8:20:78:57:12:0c:e8:46:bc:c2:cb:
         61:ad:e3:20:7e:3e:2c:12:fe:1b:ec:4c:f8:f6:5b:9a:d3:b0:
         17:ae:30:70:08:71:46:a2:c6:71:01:c5:fd:0b:86:cd:1f:cb:
         29:bc:be:11:55:c6:1d:29:c0:39:ef:fa:da:35:85:89:10:50:
         38:aa:10:4a:68:1d:54:a0:39:29:57:e6:4e:24:bb:b3:13:f9:
         38:44:bf:9a:f8:82:a8:66:aa:50:40:8a:69:f1:a1:4d:47:d0:
         97:e1:3c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:02:55 2025 by rpki-client