Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8E90E2C4477211F1802B434C93833773.roa
File:                     8E90E2C4477211F1802B434C93833773.roa (raw, json)
Hash identifier:          gyTCOwsElAggHGIysr84KOhzJR9wqsFgt5zxrYrSZlI=
Subject key identifier:   AB:FD:69:95:78:B5:D5:4A:0C:F6:97:D6:61:AB:FF:F6:BE:1A:B9:F4
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       05BE
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8E90E2C4477211F1802B434C93833773.roa
Signing time:             Sat 09 May 2026 02:30:33 +0000
ROA not before:           Sat 09 May 2026 02:30:33 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     13335
IP address blocks:        218.33.92.0/22 maxlen: 22
                          218.33.92.0/24 maxlen: 24
                          218.33.93.0/24 maxlen: 24
                          218.33.94.0/24 maxlen: 24
                          218.33.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 01:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1470 (0x5be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: May  9 02:30:33 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69fe9c49-f455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:3c:c3:23:d0:d7:e2:4f:4d:62:a6:ef:ef:32:
                    a2:de:f7:1a:38:a4:7c:a7:70:c9:8a:ac:0d:84:b8:
                    6a:45:01:73:d0:c5:2b:c1:a1:b2:9c:9c:3d:ae:9b:
                    08:06:db:3c:ac:74:8b:d2:31:1a:ab:65:39:1b:77:
                    41:27:01:79:7e:75:70:bf:80:11:ac:fa:47:fd:ae:
                    8b:c6:e9:ce:51:07:8f:91:cb:4e:51:33:d7:8a:38:
                    ba:64:2a:18:a9:2f:88:99:53:69:22:e4:e3:50:79:
                    64:69:b9:58:bb:65:1b:cf:c0:de:12:58:51:57:81:
                    55:ed:dc:82:15:d9:58:9b:3c:9a:90:10:ad:57:2a:
                    3f:e8:7f:3e:35:f5:b8:c1:cf:ab:4a:e8:62:54:fc:
                    92:c5:fd:2a:17:16:9e:68:90:35:5c:ae:2a:c4:27:
                    52:0e:1c:2c:c5:20:e8:42:77:e5:c7:3f:ce:47:ea:
                    10:9b:8f:4c:74:c8:ad:b6:a0:a5:94:38:bc:54:e0:
                    ce:15:d1:84:21:8f:39:71:cd:47:2d:aa:e0:7f:16:
                    78:67:dc:29:94:be:43:33:61:fe:d0:92:1e:49:8b:
                    8e:19:77:a6:5b:e2:e5:6b:13:ac:8a:60:05:a9:90:
                    6e:5d:03:3c:17:0e:12:26:28:5d:40:14:40:78:5b:
                    0d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:FD:69:95:78:B5:D5:4A:0C:F6:97:D6:61:AB:FF:F6:BE:1A:B9:F4
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8E90E2C4477211F1802B434C93833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.33.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d5:5d:6f:01:a9:6e:59:2d:02:f0:83:0a:70:4b:55:b7:91:11:
         a2:b1:4a:76:e6:b1:90:75:d1:17:57:15:8b:ed:f1:0c:80:10:
         ca:da:44:59:2a:78:2e:a5:4c:5c:c8:50:49:97:ca:99:73:6b:
         dd:6b:f6:85:df:da:1b:d7:cf:df:23:85:cb:ee:5e:ae:2c:fe:
         09:25:fa:09:60:98:71:d9:39:55:f5:5b:72:ab:dd:2c:be:6e:
         95:dd:5e:fb:4d:70:d4:09:08:64:61:49:cc:bf:5d:a1:7d:c2:
         55:9e:2e:cf:f7:64:f7:1e:fb:3c:d9:54:f7:d3:12:97:e5:70:
         0b:a8:82:fc:4e:bf:e5:ee:76:36:30:21:d5:cb:ad:d5:9e:b5:
         39:2e:b1:a3:01:89:76:f1:ee:c2:2d:a0:ed:f5:bd:fb:b3:cf:
         f1:20:fb:8c:21:65:0e:5e:2b:a4:a0:dd:80:50:21:bf:6a:3c:
         98:74:70:2b:ae:fe:ea:3a:bb:91:8a:33:c7:2f:cd:49:51:fd:
         d7:c4:42:c7:51:d8:ae:38:e8:b5:17:00:4b:70:39:cc:32:ca:
         13:a0:70:fb:0b:cb:59:e1:d0:2c:ca:1d:0e:fa:d8:74:9f:eb:
         57:d0:e6:4d:2a:e3:4b:dd:3a:ef:41:8f:62:e1:cf:84:12:de:
         fd:bf:08:76
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD
MDMyOUQxMzgwHhcNMjYwNTA5MDIzMDMzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWZlOWM0OS1mNDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlTzDI9DX4k9NYqbv7zKi3vcaOKR8p3DJiqwNhLhqRQFz0MUrwaGynJw9rpsI
Bts8rHSL0jEaq2U5G3dBJwF5fnVwv4ARrPpH/a6LxunOUQePkctOUTPXiji6ZCoY
qS+ImVNpIuTjUHlkablYu2Ubz8DeElhRV4FV7dyCFdlYmzyakBCtVyo/6H8+NfW4
wc+rSuhiVPySxf0qFxaeaJA1XK4qxCdSDhwsxSDoQnflxz/OR+oQm49MdMittqCl
lDi8VODOFdGEIY85cc1HLargfxZ4Z9wplL5DM2H+0JIeSYuOGXemW+LlaxOsimAF
qZBuXQM8Fw4SJihdQBRAeFsNyQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKv9aZV4
tdVKDPaX1mGr//a+Grn0MB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE
RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvOEU5MEUyQzQ0
NzcyMTFGMTgwMkI0MzRDOTM4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQC2iFcMA0GCSqGSIb3DQEBCwUAA4IBAQDVXW8BqW5ZLQLwgwpwS1W3
kRGisUp25rGQddEXVxWL7fEMgBDK2kRZKngupUxcyFBJl8qZc2vda/aF39ob18/f
I4XL7l6uLP4JJfoJYJhx2TlV9Vtyq90svm6V3V77TXDUCQhkYUnMv12hfcJVni7P
92T3Hvs82VT30xKX5XALqIL8Tr/l7nY2MCHVy63VnrU5LrGjAYl28e7CLaDt9b37
s8/xIPuMIWUOXiukoN2AUCG/ajyYdHArrv7qOruRijPHL81JUf3XxELHUdiuOOi1
FwBLcDnMMsoToHD7C8tZ4dAsyh0O+th0n+tX0OZNKuNL3TrvQY9i4c+EEt79vwh2
-----END CERTIFICATE-----
Generated at Wed May 13 02:25:37 2026 by rpki-client