Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/E65649F8FE8A11F09E9077065C6F56BC.roa
File:                     E65649F8FE8A11F09E9077065C6F56BC.roa (raw, json)
Hash identifier:          XXQBF8+nUy3KQeKU9p5CMfIW29WYgalAyOADro4aL/8=
Subject key identifier:   71:CB:36:C7:F3:EF:4A:1D:F2:C2:EB:98:A6:91:60:D0:44:D8:E6:C1
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       0551
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/E65649F8FE8A11F09E9077065C6F56BC.roa
Signing time:             Sun 01 Mar 2026 20:06:42 +0000
ROA not before:           Fri 06 Feb 2026 05:26:07 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     834
IP address blocks:        202.155.13.0/24 maxlen: 24
                          202.155.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:08:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1361 (0x551)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Feb  6 05:26:07 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a49c52-b07c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:f5:80:f2:41:ac:fa:18:63:d4:18:be:de:bf:
                    96:4a:d8:d7:45:b1:5e:5b:a7:8c:38:28:f9:91:b3:
                    bc:07:93:bc:6b:4c:40:83:1a:ac:a8:f9:83:8b:99:
                    ee:78:bf:90:e3:ef:fc:8a:39:ee:d1:8c:38:9f:37:
                    12:4d:3b:04:d7:1a:83:a4:11:64:08:46:c6:0a:a3:
                    4f:df:10:c6:da:7e:ad:38:1b:e9:df:52:b0:c1:4c:
                    d6:c7:11:61:f6:7f:e9:2e:fa:c4:fb:66:0e:ae:8b:
                    7e:14:66:0c:da:52:3a:6c:c8:64:e5:29:9f:56:67:
                    23:7b:ce:8a:11:8f:a9:1a:50:4d:4d:fe:4f:1c:96:
                    c0:a1:e2:09:a2:f2:25:2a:5c:e0:13:2d:cf:e8:85:
                    82:4c:45:31:3b:d6:2f:88:5e:d8:57:72:a2:7d:d7:
                    29:6b:0d:79:37:f6:ad:29:3d:24:f5:31:c2:87:2a:
                    77:3b:73:5a:46:d0:f9:52:2a:be:28:52:47:a1:5e:
                    ed:91:6b:7b:c1:fa:77:14:13:d2:18:fc:02:ec:42:
                    58:5f:d5:54:61:91:d6:a2:3b:56:d1:22:40:f5:6d:
                    6c:a4:27:93:4a:43:d0:5c:79:d2:c4:0b:b1:d5:89:
                    65:ef:ab:e0:c8:1e:80:a9:50:81:a2:e3:f1:91:be:
                    2d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CB:36:C7:F3:EF:4A:1D:F2:C2:EB:98:A6:91:60:D0:44:D8:E6:C1
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/E65649F8FE8A11F09E9077065C6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.13.0/24
                  202.155.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0a:fe:c0:a1:64:0b:96:7b:2e:6a:eb:29:fb:33:f4:41:f4:dd:
         8e:4d:67:8b:0e:39:09:8c:4c:44:82:b2:06:17:52:4a:8a:8f:
         7d:34:fb:d5:f4:4d:ff:57:bc:8f:42:ee:f9:c8:c3:5c:ec:c8:
         d9:96:c5:1d:ab:51:21:e7:b2:e5:30:e2:82:61:cd:d0:d0:92:
         bf:4d:79:02:d0:1f:56:1b:3a:b0:cf:61:58:bb:9c:31:d5:6c:
         cc:15:eb:85:3a:c6:e1:d3:22:a2:2c:fa:81:7b:9a:4e:c9:b5:
         c8:e4:5d:9a:b9:a5:b7:1a:aa:c3:2a:8a:ef:eb:74:cb:fd:62:
         d6:38:82:15:ed:4b:ed:52:13:3a:58:20:e8:7f:9a:a7:1e:cd:
         6a:51:5e:3e:56:73:ce:c0:1a:9a:f5:45:bd:92:81:f5:c4:23:
         85:17:9e:c4:eb:f3:a7:6e:ff:f8:97:04:a4:df:be:e1:fd:8e:
         b6:ef:a9:43:9e:3b:af:0a:8a:96:3a:99:81:41:0f:16:6b:0b:
         d2:f8:c3:89:0c:0d:8e:31:9a:35:9a:95:61:ed:04:c1:14:ac:
         a5:41:e4:bc:b1:3d:cb:37:d1:91:79:7b:74:9b:ca:d7:75:63:
         82:ba:f9:c3:25:c4:da:cf:1a:94:88:28:74:88:ba:f6:13:ee:
         20:38:8b:c4
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICBVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD
MDMyOUQxMzgwHhcNMjYwMjA2MDUyNjA3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OWM1Mi1iMDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9PWA8kGs+hhj1Bi+3r+WStjXRbFeW6eMOCj5kbO8B5O8a0xAgxqsqPmDi5nu
eL+Q4+/8ijnu0Yw4nzcSTTsE1xqDpBFkCEbGCqNP3xDG2n6tOBvp31KwwUzWxxFh
9n/pLvrE+2YOrot+FGYM2lI6bMhk5SmfVmcje86KEY+pGlBNTf5PHJbAoeIJovIl
KlzgEy3P6IWCTEUxO9YviF7YV3Kifdcpaw15N/atKT0k9THChyp3O3NaRtD5Uiq+
KFJHoV7tkWt7wfp3FBPSGPwC7EJYX9VUYZHWojtW0SJA9W1spCeTSkPQXHnSxAux
1Yll76vgyB6AqVCBouPxkb4t0wIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFHHLNsfz
70od8sLrmKaRYNBE2ObBMB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE
RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvRTY1NjQ5RjhG
RThBMTFGMDlFOTA3NzA2NUM2RjU2QkMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQAypsNAwQDypuQMA0GCSqGSIb3DQEBCwUAA4IBAQAK/sChZAuWey5q
6yn7M/RB9N2OTWeLDjkJjExEgrIGF1JKio99NPvV9E3/V7yPQu75yMNc7MjZlsUd
q1Eh57LlMOKCYc3Q0JK/TXkC0B9WGzqwz2FYu5wx1WzMFeuFOsbh0yKiLPqBe5pO
ybXI5F2auaW3GqrDKorv63TL/WLWOIIV7UvtUhM6WCDof5qnHs1qUV4+VnPOwBqa
9UW9koH1xCOFF57E6/Onbv/4lwSk377h/Y6276lDnjuvCoqWOpmBQQ8WawvS+MOJ
DA2OMZo1mpVh7QTBFKylQeS8sT3LN9GReXt0m8rXdWOCuvnDJcTazxqUiCh0iLr2
E+4gOIvE
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:36:25 2026 by rpki-client