Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/015EFF96888511F08E124148C4F9AE02.roa
File:                     015EFF96888511F08E124148C4F9AE02.roa (raw, json)
Hash identifier:          fK7MJ/VDgyfkqXgKjAuoZJgp9ZpewpoJ+8cZZEoDSDY=
Subject key identifier:   06:E2:66:12:17:6C:B0:98:CD:32:DE:92:CF:1E:CA:14:74:C8:45:5E
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       03E5
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/015EFF96888511F08E124148C4F9AE02.roa
Signing time:             Wed 03 Sep 2025 05:15:28 +0000
ROA not before:           Wed 03 Sep 2025 05:15:28 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     214143
IP address blocks:        202.155.24.0/24 maxlen: 24
                          202.155.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 02:17:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 997 (0x3e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Sep  3 05:15:28 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=68b7cef0-9bbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:85:b8:55:33:c5:b8:ac:c8:c4:15:d6:28:c6:
                    15:a6:aa:e7:59:ca:42:7e:23:16:26:b5:ca:25:7a:
                    9c:0c:99:8c:ee:7f:d3:05:50:c9:c2:68:bd:ff:9a:
                    f6:fd:39:b1:b3:13:b1:5c:4c:ae:af:86:b1:8f:2d:
                    28:63:1b:60:3b:f9:92:32:1c:61:40:95:7f:c0:3a:
                    9c:49:38:88:ce:82:88:1b:e3:98:01:c8:c8:68:32:
                    23:ef:3d:f6:36:92:91:af:46:5d:07:18:c3:4e:56:
                    4e:40:78:5e:d5:79:cf:dd:0e:c1:7d:df:f4:ec:97:
                    bf:82:5f:ae:c2:00:1f:55:71:73:00:1e:0b:1f:6a:
                    be:74:3b:98:6b:61:d5:49:5e:84:d0:2e:6a:df:24:
                    8f:91:47:a1:c9:35:ad:81:a9:f7:cd:44:27:00:18:
                    e0:d6:d8:4c:c0:1a:b8:c0:4e:aa:77:4a:0f:97:d8:
                    01:50:70:9a:ed:09:a0:a3:2b:6e:46:72:42:15:b3:
                    77:28:fb:ec:ce:51:4e:12:97:e9:e7:10:94:a6:9d:
                    b0:2e:5e:98:57:6f:ea:b9:9a:26:0a:84:9e:cc:46:
                    2b:17:d7:08:7a:35:ae:02:36:1d:ab:94:76:67:cc:
                    0c:7d:82:95:92:c3:f7:b8:d6:3c:b6:cb:5b:6c:05:
                    cd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E2:66:12:17:6C:B0:98:CD:32:DE:92:CF:1E:CA:14:74:C8:45:5E
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/015EFF96888511F08E124148C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.24.0/24
                  202.155.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:7c:2c:c9:b3:ff:25:bf:22:9c:ac:b4:27:d8:e9:d6:25:80:
         2a:4e:25:ab:0c:f6:ec:d5:56:49:ca:f6:71:ba:54:dc:26:63:
         6c:d5:fb:b7:8d:2f:8a:44:27:c4:10:20:ac:5b:c5:b8:19:56:
         81:85:29:52:66:15:74:3e:e2:b1:c1:96:b5:ab:69:22:67:f3:
         f8:4a:af:6d:a5:ab:80:49:55:71:c4:0c:b5:28:2a:da:00:d0:
         ce:2a:ed:91:84:09:95:f4:45:7b:45:5f:54:40:09:0e:a7:71:
         7f:b1:4e:2a:70:e4:4a:7c:81:e7:87:64:ea:4d:26:be:d8:87:
         63:6a:5a:bf:7e:fd:06:44:8a:bb:03:b3:69:aa:49:e3:f0:e8:
         e5:c7:7c:0d:41:f1:b0:c7:b2:46:56:aa:ca:e7:9f:8c:74:20:
         4c:63:9d:55:ee:f1:09:30:57:f2:6e:75:e6:e1:97:90:f9:a0:
         89:6c:62:71:f2:1e:bd:16:f8:c1:64:45:06:10:3a:19:6e:37:
         11:31:18:b8:b8:f7:79:74:64:5f:60:75:92:cb:d2:41:19:04:
         30:01:1c:46:d5:ff:eb:4e:d9:c5:7a:a6:08:74:a4:6f:91:62:
         50:1f:4c:f4:c4:b4:fd:ee:eb:dc:f5:ba:b6:6e:22:6d:1e:95:
         21:79:89:e1
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICA+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD
MDMyOUQxMzgwHhcNMjUwOTAzMDUxNTI4WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGI3Y2VmMC05YmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAr4W4VTPFuKzIxBXWKMYVpqrnWcpCfiMWJrXKJXqcDJmM7n/TBVDJwmi9/5r2
/TmxsxOxXEyur4axjy0oYxtgO/mSMhxhQJV/wDqcSTiIzoKIG+OYAcjIaDIj7z32
NpKRr0ZdBxjDTlZOQHhe1XnP3Q7Bfd/07Je/gl+uwgAfVXFzAB4LH2q+dDuYa2HV
SV6E0C5q3ySPkUehyTWtgan3zUQnABjg1thMwBq4wE6qd0oPl9gBUHCa7Qmgoytu
RnJCFbN3KPvszlFOEpfp5xCUpp2wLl6YV2/quZomCoSezEYrF9cIejWuAjYdq5R2
Z8wMfYKVksP3uNY8tstbbAXNiQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFAbiZhIX
bLCYzTLeks8eyhR0yEVeMB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE
RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvMDE1RUZGOTY4
ODg1MTFGMDhFMTI0MTQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBADKmxgDBADKmxswDQYJKoZIhvcNAQELBQADggEBAK18LMmz
/yW/IpystCfY6dYlgCpOJasM9uzVVknK9nG6VNwmY2zV+7eNL4pEJ8QQIKxbxbgZ
VoGFKVJmFXQ+4rHBlrWraSJn8/hKr22lq4BJVXHEDLUoKtoA0M4q7ZGECZX0RXtF
X1RACQ6ncX+xTipw5Ep8geeHZOpNJr7Yh2NqWr9+/QZEirsDs2mqSePw6OXHfA1B
8bDHskZWqsrnn4x0IExjnVXu8QkwV/Judebhl5D5oIlsYnHyHr0W+MFkRQYQOhlu
NxExGLi493l0ZF9gdZLL0kEZBDABHEbV/+tO2cV6pgh0pG+RYlAfTPTEtP3u69z1
urZuIm0elSF5ieE=
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:44:02 2025 by rpki-client