Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C58950F4CC3A11EF80AC530BC4F9AE02.roa
File:                     C58950F4CC3A11EF80AC530BC4F9AE02.roa (raw, json)
Hash identifier:          QCI+DE/2CpC0INaGqwMHvbC1tZI7Ne94BNQU2P/2cz4=
Subject key identifier:   52:59:8B:04:00:BC:11:52:D3:77:E4:D4:B3:66:18:FC:19:7B:75:55
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       0418
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C58950F4CC3A11EF80AC530BC4F9AE02.roa
Signing time:             Thu 25 Sep 2025 02:21:17 +0000
ROA not before:           Thu 25 Sep 2025 02:21:17 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     214654
IP address blocks:        202.155.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1048 (0x418)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Sep 25 02:21:17 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68d4a71d-3577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f3:85:f2:dd:f1:45:dc:31:8b:5e:ae:5d:c8:
                    4d:ab:f7:dd:ef:9d:58:10:6d:bb:9a:14:06:20:6d:
                    37:fd:98:24:86:9f:38:8f:07:11:a2:c4:55:a2:3f:
                    9b:8d:9a:ab:80:7b:26:97:fc:7a:63:e0:83:ad:33:
                    c2:a2:03:aa:8f:28:a8:3e:c3:2f:ae:a2:b0:31:27:
                    9d:fd:0b:d6:a4:96:08:98:e3:4c:f8:82:67:25:b1:
                    db:4e:e8:d5:48:02:be:54:93:c3:bc:1d:c2:63:d6:
                    1a:85:a3:93:0b:da:60:39:aa:19:3d:23:0d:6f:a2:
                    58:56:da:86:fa:a1:7f:74:11:6d:f3:31:9b:50:ef:
                    60:3d:a3:79:fa:a2:c4:72:8c:a5:0c:ac:03:96:5f:
                    8c:ca:9d:b7:cb:20:48:c9:91:ba:43:1a:70:13:00:
                    d7:8b:30:a0:d1:70:d7:c9:97:c3:30:2c:40:fa:41:
                    8c:fa:5a:11:9a:ea:93:aa:8f:33:11:01:aa:b6:85:
                    a9:f4:06:3d:44:5b:10:f1:a4:6c:21:c2:1c:28:ad:
                    b7:61:c8:1a:89:bb:e5:b5:d1:a4:f2:eb:99:60:7a:
                    ec:19:80:de:82:c9:d6:ff:5e:cf:d2:fb:98:9a:f5:
                    1c:a4:a1:44:c9:89:2f:9d:bf:db:f4:f8:c9:51:cf:
                    f6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:59:8B:04:00:BC:11:52:D3:77:E4:D4:B3:66:18:FC:19:7B:75:55
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C58950F4CC3A11EF80AC530BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         aa:6f:f8:2a:8a:82:ce:2e:58:1a:b2:2f:7b:a4:4f:62:ee:f3:
         56:8b:b7:e1:e8:4d:14:8c:2d:c2:1b:6b:e4:93:09:0c:ef:7e:
         db:11:7a:90:54:09:22:a9:c6:69:0d:a6:61:50:28:93:28:60:
         12:5b:65:d1:66:6d:8b:f4:51:de:1f:01:c3:01:c3:b3:c4:7b:
         4f:f6:4b:ef:a8:07:5b:20:a2:68:67:40:a8:cc:f0:6d:c2:25:
         34:1f:71:1a:9f:65:f0:ed:14:59:91:ed:00:07:f6:84:a6:7f:
         05:e8:35:25:d1:aa:7a:9b:15:52:27:e0:bf:39:f4:68:47:06:
         4d:25:e3:d0:de:8b:ac:ce:e4:12:a1:53:e0:19:2b:30:0c:7b:
         3a:8d:aa:be:61:cd:08:6e:81:f7:29:f4:02:03:4c:66:08:07:
         b9:b4:6b:89:25:d1:6a:73:f2:a4:91:93:d7:17:ca:15:e1:c4:
         03:a3:7c:9c:4c:27:eb:8c:62:91:27:ca:12:39:5d:c3:9b:f5:
         dd:d0:59:1a:9e:68:42:8a:bd:bd:b6:d9:93:ee:3e:c3:ad:2b:
         89:5c:9a:5a:d7:66:55:50:40:ee:8a:30:f8:6c:4d:33:57:e2:
         11:e9:24:00:67:55:2f:ce:e6:12:15:b8:ef:7e:cd:38:49:e3:
         ae:33:c1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:02:59 2025 by rpki-client