Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/92F68C4E549211EFB6D69465C4F9AE02.roa
File:                     92F68C4E549211EFB6D69465C4F9AE02.roa (raw, json)
Hash identifier:          B6+cUUkQlPaj9J4kFZO9C4R2/ipX521sHO4j6bzzqNE=
Subject key identifier:   FA:3A:CA:15:9E:6C:4B:7B:F3:48:23:2A:3B:0E:AD:95:DB:9C:EA:22
Certificate issuer:       /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0
Certificate serial:       04F5
Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/92F68C4E549211EFB6D69465C4F9AE02.roa
Signing time:             Thu 24 Sep 2026 23:48:27 +0000
ROA not before:           Thu 24 Sep 2026 23:48:27 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     4826
IP address blocks:        202.36.13.0/24 maxlen: 24
                          202.36.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl
                          rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 29 Oct 2026 23:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1269 (0x4f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0
        Validity
            Not Before: Sep 24 23:48:27 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab5b6cb-002b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:07:ca:9f:e2:2a:18:a1:91:e8:73:c2:12:50:
                    a6:3d:1d:c3:9e:fa:4c:23:cf:d9:d8:87:a8:ed:1f:
                    4a:59:b3:5d:a1:da:a6:67:00:47:b9:9e:eb:8a:ac:
                    c8:01:e9:77:f2:5a:4b:b2:5e:d0:3e:79:9d:c9:bf:
                    de:58:dc:62:f4:58:07:f4:25:ec:49:5c:08:2c:db:
                    08:d7:d9:7a:f1:a9:5d:36:59:a3:0d:80:cf:d8:87:
                    06:6c:3d:46:91:b9:7e:ea:79:58:e5:a0:13:93:5b:
                    66:6e:88:c8:23:2d:51:ef:c2:e1:69:66:6d:f6:b6:
                    6f:20:9f:76:79:e2:d1:e9:82:0d:2c:e6:9f:6f:cf:
                    3c:66:43:e6:2b:2d:0e:ef:f0:57:f2:31:13:b7:4e:
                    6f:8f:cf:e1:82:03:94:5a:67:e4:14:34:2c:0d:d1:
                    3f:27:89:84:37:c0:30:fa:a3:be:7f:47:ad:fb:00:
                    00:a2:2d:ba:27:75:b6:22:b1:66:ac:23:ca:3c:e9:
                    40:54:29:9c:fd:25:12:e2:c9:e2:9b:20:6a:6c:f0:
                    b7:9a:8f:53:e4:b3:8d:8b:41:69:e5:cd:68:37:0c:
                    7e:93:0b:17:c1:27:7f:24:53:eb:e9:d9:2b:c6:f7:
                    cf:e2:76:40:e1:75:9a:11:3b:e4:de:ca:7e:09:c2:
                    ce:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3A:CA:15:9E:6C:4B:7B:F3:48:23:2A:3B:0E:AD:95:DB:9C:EA:22
            X509v3 Authority Key Identifier:
                keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/92F68C4E549211EFB6D69465C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.36.13.0/24
                  202.36.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:90:bc:66:cf:ae:1d:1a:c5:34:6a:6a:ab:d3:1a:c6:82:81:
         0c:81:c5:29:ff:32:88:8b:a6:3f:9a:e1:bc:0a:be:ac:ef:46:
         46:f9:23:09:b7:f8:b2:b2:55:85:6e:0a:07:1f:26:09:36:67:
         1e:be:b2:ac:c6:c1:5d:eb:60:e7:57:5d:7d:5d:81:03:22:17:
         53:bf:39:bf:5c:18:56:19:8e:c4:be:0c:3e:54:8e:d3:fc:4d:
         fc:d5:1e:db:ee:55:d6:92:dd:c1:0c:e1:dc:4e:51:b0:24:81:
         95:19:8e:35:b7:4e:39:3d:5c:1e:35:6e:0a:3b:61:6f:74:e7:
         67:14:52:a5:74:c7:46:6d:08:2e:ed:ff:4b:d7:35:87:2b:9d:
         43:ae:f0:34:ac:0d:48:50:19:dc:1a:cf:65:58:40:fa:05:26:
         cd:9d:bb:b9:84:6d:7b:1e:aa:1b:00:30:a3:8c:4d:ea:fe:61:
         a9:3c:4b:53:4e:09:a9:58:88:8a:fd:19:db:2c:95:0b:8c:ca:
         10:36:56:46:63:f4:0b:5e:fe:9f:75:4a:d1:c0:fe:70:73:59:
         79:f2:f0:22:f5:38:57:0e:d0:22:25:b6:ee:cf:18:de:29:38:
         5c:90:2d:cc:30:49:8b:3c:10:c1:61:2d:75:c2:d2:fb:b5:57:
         ca:bb:52:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 11:15:03 2026 by rpki-client