Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/8197DA7E0E9711EB9A6C2B3CC4F9AE02.roa
File:                     8197DA7E0E9711EB9A6C2B3CC4F9AE02.roa (raw, json)
Hash identifier:          SLHfHFfxsTJRhuYOBpm2D8SdeHazWSUArKrVh+qD8OQ=
Subject key identifier:   64:93:4D:58:0E:B8:E2:FD:CC:76:E0:71:63:D7:F4:06:6C:C0:68:43
Certificate issuer:       /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Certificate serial:       0885
Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/8197DA7E0E9711EB9A6C2B3CC4F9AE02.roa
Signing time:             Thu 02 Apr 2026 21:27:32 +0000
ROA not before:           Thu 02 Apr 2026 21:27:32 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     132792
IP address blocks:        202.92.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
                          rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:47:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2181 (0x885)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110718, serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
        Validity
            Not Before: Apr  2 21:27:32 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=69cedf44-6d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7d:74:bf:44:1a:a6:05:4b:7a:31:62:57:de:
                    d9:04:a8:0b:60:13:90:97:16:21:b4:67:87:a5:75:
                    ba:0f:75:8d:2c:a7:af:49:47:47:2f:64:7b:99:21:
                    75:63:86:8c:26:15:c6:59:9c:1f:f0:8e:65:be:90:
                    29:4d:6a:7d:d4:48:8c:be:e4:66:09:25:91:2c:53:
                    94:65:46:5d:2c:55:8d:ec:c4:56:12:80:b7:84:b2:
                    77:b7:0a:df:8c:3b:36:db:2f:03:e8:9d:40:4a:e9:
                    42:22:f0:84:5d:55:f1:0c:9a:b2:f9:45:dd:b5:38:
                    32:89:61:62:67:23:14:7d:df:65:ee:c9:b7:a7:78:
                    29:54:f6:93:3d:f3:d1:51:7f:b5:c4:0a:85:c6:47:
                    12:50:7f:50:52:c0:37:01:d1:53:20:d2:85:34:3f:
                    d3:e2:57:d8:c2:3c:02:f9:54:ca:3c:a9:dc:68:39:
                    4d:21:cb:be:89:ba:3c:b1:46:8d:30:cf:7c:13:50:
                    39:88:ff:4e:02:d0:7d:79:7d:ed:96:52:7f:e5:e9:
                    ae:3c:e3:fa:ba:a3:48:ea:00:a1:88:73:6d:cc:fe:
                    fd:66:04:89:9d:11:50:99:6d:6d:d5:f1:84:6c:5f:
                    38:f0:70:1c:c0:ed:c8:3b:49:7d:2e:66:b2:78:07:
                    c8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:93:4D:58:0E:B8:E2:FD:CC:76:E0:71:63:D7:F4:06:6C:C0:68:43
            X509v3 Authority Key Identifier:
                keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/8197DA7E0E9711EB9A6C2B3CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.92.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:cb:00:d4:a7:73:14:ba:38:f0:f8:84:d4:01:be:30:19:3e:
         51:9a:d7:f6:81:68:3e:e8:a4:77:1a:fd:97:da:9a:c3:13:64:
         55:6a:41:e0:54:ce:02:9a:a6:a3:ce:c0:72:c8:78:78:6b:2d:
         2b:24:99:a2:bc:e0:84:f1:8a:b4:a6:cd:29:78:e2:cf:fb:c5:
         a5:4a:3f:df:73:6d:d1:b0:1b:c4:89:d8:bf:33:b0:04:10:29:
         0c:bc:91:be:25:ec:de:82:97:55:d4:44:31:33:84:da:52:76:
         33:ee:dd:2c:72:94:ab:93:21:ef:d7:07:03:2e:39:ad:6c:f8:
         27:a2:b6:85:b4:83:39:c6:11:bb:fe:9c:4b:27:af:9e:94:6e:
         9f:c2:5a:7f:47:cb:b8:d2:30:39:6c:75:c6:fb:c4:10:ab:f0:
         c6:e2:bf:a3:da:11:57:1d:a7:a5:e3:09:26:f0:8a:cc:ed:de:
         b7:9a:a8:52:81:a0:0f:68:cc:73:24:7a:6c:2c:53:92:fb:fd:
         f8:0d:22:2d:ef:92:42:0c:c2:49:f4:8f:1a:4e:94:3f:73:cc:
         0f:eb:eb:2d:b8:e1:27:9b:bc:8c:6b:c8:7e:98:c8:54:da:61:
         44:4a:e7:b6:c2:d4:4a:53:ec:d9:d2:3d:0d:1b:74:02:d3:42:
         99:ba:c0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:28:02 2026 by rpki-client