Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BE0FB33A828D11F1ABF5751765A30FBC.roa
File:                     BE0FB33A828D11F1ABF5751765A30FBC.roa (raw, json)
Hash identifier:          e01wWQtNL8jKXzhDVK5GoRO1lqUlZkkbPHGxHX5CPVo=
Subject key identifier:   C5:5C:05:8A:B5:E9:4E:AB:8C:EE:54:B1:E9:84:B3:F3:A3:F3:91:37
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       05F8
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BE0FB33A828D11F1ABF5751765A30FBC.roa
Signing time:             Sat 18 Jul 2026 09:47:52 +0000
ROA not before:           Sat 18 Jul 2026 09:47:52 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     834
IP address blocks:        202.155.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Jul 2026 12:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1528 (0x5f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Jul 18 09:47:52 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a5b4bc7-a11a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:99:de:d6:5a:f1:c0:da:50:f3:aa:64:37:0a:
                    ce:72:5c:32:2e:7d:54:bd:2d:3d:fd:37:08:35:1b:
                    15:f5:0c:cc:a7:ab:80:b9:9f:96:49:ea:f4:46:b8:
                    b0:ad:19:7f:1a:67:d8:89:01:3f:a5:38:63:b3:79:
                    9b:eb:98:2f:d8:6e:85:2c:bb:0b:81:a6:68:0c:65:
                    88:bf:13:dc:e7:ee:a4:29:bd:d8:e8:66:86:30:ae:
                    4e:b6:79:e4:aa:42:c1:9d:88:f6:91:e3:78:07:dc:
                    2d:e1:0c:fb:93:fb:48:d4:5a:5c:e9:c3:c9:af:4a:
                    6c:5e:3e:cd:97:39:65:03:43:33:ab:b0:7b:86:82:
                    a3:65:cf:de:a5:9a:27:0d:e3:ed:54:52:31:0b:af:
                    d2:f8:a9:d2:48:41:d6:32:20:f1:de:14:ce:20:61:
                    b8:73:42:59:73:2e:ac:b5:f8:a4:5b:12:64:e2:1e:
                    85:ac:1e:d7:b3:57:78:61:65:4e:e1:0b:31:f0:c2:
                    0a:a5:7a:e1:2f:99:c1:ce:a7:c2:d3:d3:f4:4d:7c:
                    86:e3:95:6c:55:24:36:ac:eb:d5:23:a7:2b:4d:24:
                    e8:45:3d:4d:9f:16:fd:91:c8:f6:b4:2c:bb:b0:6b:
                    f1:5f:8e:df:94:6b:1c:27:af:5c:87:0e:4c:5e:47:
                    41:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5C:05:8A:B5:E9:4E:AB:8C:EE:54:B1:E9:84:B3:F3:A3:F3:91:37
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BE0FB33A828D11F1ABF5751765A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a8:fd:4f:24:d2:f2:78:a7:35:70:9f:60:62:5d:5b:bc:62:f5:
         76:63:96:72:5e:73:70:3b:35:2e:9a:3d:53:68:5d:5a:23:25:
         07:e9:7b:b9:31:f6:e5:13:d5:de:8e:1f:1c:00:0d:a4:1f:b2:
         92:cc:cb:4e:bf:2d:e8:77:5c:04:ee:b7:ac:d1:9e:93:f5:d2:
         e7:9c:46:f5:85:e8:30:e5:d2:d6:bf:4c:cf:85:d8:9c:cc:00:
         fc:8b:82:64:22:81:7a:be:e3:ec:cc:45:3e:2e:5d:33:ea:d0:
         76:6c:c5:37:d8:33:ca:a0:a5:8f:d6:86:aa:4b:1c:95:ac:b7:
         1f:3b:f4:fc:60:0e:17:83:f2:c1:a9:10:7f:64:ee:b3:ed:04:
         b6:f4:5c:18:0e:56:e2:fc:21:8e:73:b8:4c:51:86:d0:32:9c:
         cc:db:e6:da:cb:d6:58:7b:04:d2:2e:47:56:fd:fd:30:a9:43:
         c8:d9:14:34:49:4c:d2:df:63:01:20:1b:bf:c9:84:dd:49:da:
         15:74:ab:e6:3a:d5:e4:66:4c:ed:15:44:93:a1:c1:be:9e:07:
         69:91:71:51:12:bc:ff:97:43:ed:5e:da:d3:fd:0d:63:7e:c6:
         99:7e:99:57:66:80:69:35:77:65:ae:41:55:96:e7:fa:52:a3:
         2c:ab:95:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 19:31:48 2026 by rpki-client