Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/90B05B70D31511EF9F94561DC4F9AE02.roa
File:                     90B05B70D31511EF9F94561DC4F9AE02.roa (raw, json)
Hash identifier:          uUqUSJ5tSHFeZ1Dp9DMLRyvS2e57Pp0yfr6YxCv7BVc=
Subject key identifier:   87:43:FE:81:D9:42:14:A1:0C:1F:50:42:10:2F:58:CA:E3:66:C9:B2
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       0422
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/90B05B70D31511EF9F94561DC4F9AE02.roa
Signing time:             Thu 25 Sep 2025 02:21:26 +0000
ROA not before:           Thu 25 Sep 2025 02:21:26 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     4764
IP address blocks:        202.155.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1058 (0x422)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Sep 25 02:21:26 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68d4a725-dcb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:54:f6:08:6e:f6:d0:1a:27:12:a4:ba:37:62:
                    c1:e3:1f:16:e5:c8:93:09:f0:a5:55:71:f6:41:f8:
                    a5:65:8a:17:8d:b7:dc:9f:ad:ef:7c:01:dc:52:1e:
                    cf:13:0a:bd:c3:c0:2d:e0:e8:0a:59:ae:a3:b4:fc:
                    de:47:5d:e9:d8:74:fc:f4:a4:32:92:85:bb:5f:ae:
                    6a:db:8f:44:21:9a:0d:e5:55:3b:50:b1:bc:a7:b6:
                    48:7f:bb:9f:91:ec:1d:58:8e:43:10:b4:bc:2f:27:
                    fa:7b:d5:1e:29:7a:fd:54:c6:bc:44:84:59:a4:bf:
                    2b:b7:9d:b1:ef:10:7c:72:40:d9:11:f0:b4:67:a5:
                    a0:d4:66:bd:30:09:15:91:f5:8e:0c:d8:0c:63:bf:
                    0e:f6:42:3e:71:b4:19:94:29:9c:e8:84:ac:2f:49:
                    21:1a:1a:35:ff:cf:45:fc:2c:11:63:81:18:44:ac:
                    06:fd:02:36:9e:6a:48:96:02:5c:bb:46:f1:50:8e:
                    1f:b0:41:63:16:a8:6d:58:47:3e:67:1c:e3:83:e6:
                    e8:49:9f:43:c4:f7:38:1e:d6:bc:7f:7e:d9:0a:eb:
                    31:85:6f:0f:8d:49:44:fa:35:20:b1:e0:7d:c1:c7:
                    dc:eb:71:a1:2b:34:c7:fc:5c:ef:a6:60:e0:81:1e:
                    01:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:43:FE:81:D9:42:14:A1:0C:1F:50:42:10:2F:58:CA:E3:66:C9:B2
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/90B05B70D31511EF9F94561DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:77:e7:51:b0:7b:ba:8c:47:fa:d3:cc:10:67:10:d6:95:e4:
         06:76:ae:ae:3b:4f:0d:30:b6:e8:43:b1:fa:c1:32:aa:bd:87:
         88:e5:b3:b1:ee:c5:9a:51:16:7c:d4:55:0c:01:c7:3f:b9:75:
         f2:70:b7:b2:a4:04:97:4c:cb:0e:91:27:c3:32:db:68:f5:a7:
         6c:06:f8:35:92:4a:f3:89:bd:6c:3f:5b:e9:9f:f4:f1:60:29:
         b1:36:4a:36:aa:eb:6a:43:97:c5:9d:d8:38:0f:51:ad:07:11:
         2b:fc:f2:af:0c:33:f6:55:ba:92:5d:6d:4c:11:8e:06:d8:3b:
         de:6b:ac:7c:29:a1:71:ad:c3:21:47:0e:31:8e:a6:56:4e:42:
         26:5a:d0:5b:28:2d:92:54:e4:23:ce:dd:38:be:80:0a:ab:82:
         f1:4d:83:02:01:4c:e2:c1:78:3c:e5:3a:25:4d:77:25:3d:30:
         6a:43:16:46:3e:08:84:b4:f2:d8:8c:85:60:30:e0:fe:04:a8:
         df:e3:a7:d9:8a:1e:8b:fb:47:ff:29:38:c3:df:cb:c2:9a:54:
         34:14:8a:f2:f4:f1:ed:50:02:48:70:9a:45:89:16:9d:5b:2f:
         10:3e:a4:f9:1a:b2:03:ec:93:38:31:cb:c4:21:ec:ce:e6:4d:
         08:4b:de:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:01 2025 by rpki-client