Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/ECFCBBA4D8D711EF91AD5538C4F9AE02.roa
File:                     ECFCBBA4D8D711EF91AD5538C4F9AE02.roa (raw, json)
Hash identifier:          15HCMu/acw3Q2BNI+sa9WfN9q9j18Hwjhc5KbcVBarI=
Subject key identifier:   6C:79:2D:53:4D:16:4E:97:40:66:30:8B:04:A7:29:02:C1:52:DF:54
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       040C
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/ECFCBBA4D8D711EF91AD5538C4F9AE02.roa
Signing time:             Thu 25 Sep 2025 02:21:06 +0000
ROA not before:           Thu 25 Sep 2025 02:21:06 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138115
IP address blocks:        202.155.132.0/24 maxlen: 24
                          202.155.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1036 (0x40c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Sep 25 02:21:06 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68d4a712-4c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a0:9c:1a:9b:42:07:a9:5b:9b:79:e5:50:54:
                    bb:e9:07:48:7a:28:db:17:93:ab:30:58:39:4a:2e:
                    86:01:b3:1d:53:88:6b:98:5c:c4:75:05:ce:57:58:
                    60:d8:1c:e1:96:da:ba:01:35:99:f8:7e:7b:3a:fd:
                    8e:57:3a:96:b3:d6:61:e5:84:7a:c0:c2:0f:0b:9c:
                    ee:5d:cf:3e:08:8c:0e:ef:4c:40:fc:22:55:81:35:
                    27:cb:9d:fb:e9:82:8d:51:b4:90:31:e6:72:d4:76:
                    3f:e7:20:95:f2:24:21:67:ad:f3:67:dc:87:76:aa:
                    eb:68:a8:a3:31:42:21:f9:55:ef:13:28:d5:5b:ff:
                    8d:0e:fb:b0:89:e8:e5:d9:53:99:f2:dc:ac:bb:df:
                    bb:8f:5f:3b:8f:5a:da:13:2a:43:c5:e6:82:1a:3d:
                    d1:50:60:e6:54:02:ed:ec:40:aa:8d:b4:8b:dc:16:
                    08:b1:f1:dd:05:7c:43:b0:b1:b7:94:be:0a:e9:08:
                    52:ef:e9:8e:24:51:45:43:ac:e9:9a:27:4d:82:a5:
                    36:34:b8:59:f4:89:c6:fb:6f:df:fd:d9:06:bb:df:
                    3f:cb:10:41:6e:9e:81:14:cd:d1:b2:cc:11:0d:83:
                    e1:f9:89:5c:4b:0f:ab:67:0b:ca:af:2b:59:e6:38:
                    cf:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:79:2D:53:4D:16:4E:97:40:66:30:8B:04:A7:29:02:C1:52:DF:54
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/ECFCBBA4D8D711EF91AD5538C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.132.0/24
                  202.155.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:99:ab:aa:c5:71:70:2e:33:a0:86:91:3b:fc:41:62:86:b7:
         6a:b4:44:fc:6b:f3:47:48:30:4e:d1:e4:1c:89:7a:5d:75:41:
         d6:5b:50:23:17:1f:0e:89:28:2e:34:65:81:9a:92:f9:67:37:
         8b:21:3c:2a:89:54:5b:c5:1e:26:80:45:46:e0:c2:eb:cc:ea:
         7c:50:b0:2d:5a:be:a5:64:dd:e5:11:67:3b:3b:72:f2:ac:e0:
         1f:f1:e5:9c:3f:6b:ce:81:c3:67:df:bd:49:d7:69:72:6e:97:
         ac:c8:17:28:13:7d:1a:bb:d4:13:81:1d:07:2d:fa:46:e8:d2:
         ec:62:82:b5:e6:40:cf:1f:34:f6:bb:29:ba:04:a0:8e:d7:08:
         2c:2b:dc:b0:56:e1:69:9b:55:51:68:4d:92:76:5c:87:4e:f2:
         fc:90:4c:df:37:fa:d4:9a:c9:70:3e:e0:b2:92:a9:dd:66:22:
         5f:e0:d0:14:2d:18:b4:24:45:13:59:9c:be:da:e0:6e:78:10:
         98:f7:6b:9f:0c:4e:69:77:ba:87:c9:b1:99:4d:f1:f5:07:c0:
         c7:82:ea:9d:24:99:9c:23:db:5c:eb:f9:14:a2:90:c8:63:22:
         3e:6b:53:4b:65:79:6e:1f:c8:51:cc:50:5d:de:ba:4a:75:88:
         19:6b:bc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:01 2025 by rpki-client