Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/24E07816913E11F0AE8FEC66C4F9AE02.roa
File:                     24E07816913E11F0AE8FEC66C4F9AE02.roa (raw, json)
Hash identifier:          KQx7gKxW6OwgIiPewHTfMHqu1VRlLeCK2rdxVJb0/Dc=
Subject key identifier:   E4:17:9E:5F:E7:03:94:99:07:FF:B2:CA:8D:B7:E0:D0:03:91:A8:7A
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       03EF
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/24E07816913E11F0AE8FEC66C4F9AE02.roa
Signing time:             Sun 14 Sep 2025 07:40:54 +0000
ROA not before:           Sun 14 Sep 2025 07:40:54 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     398256
IP address blocks:        202.155.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 02:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1007 (0x3ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Sep 14 07:40:54 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=68c67186-2653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:78:b3:36:88:49:70:11:65:0a:c8:35:66:b7:
                    44:23:ce:b0:8c:d9:a0:7e:ba:e0:42:eb:af:14:ca:
                    63:52:e8:f2:4f:d5:85:ff:54:fc:a8:04:cb:6f:02:
                    d5:14:31:ee:f5:49:20:8f:26:2a:2a:be:78:a8:dd:
                    2f:c6:3f:e7:7e:c7:a0:1a:b2:58:6e:46:3e:92:ea:
                    86:b9:a9:11:d0:c8:58:61:af:67:5c:47:43:5e:9d:
                    df:25:9f:9a:6b:10:8f:48:89:31:9e:dc:0b:a5:10:
                    1c:e5:e1:a5:fa:7f:1f:cf:51:46:dc:fd:ba:97:bf:
                    44:90:ef:dc:b5:cb:48:b8:db:48:09:ee:ef:df:d5:
                    33:e4:f2:70:34:04:38:c4:8f:aa:be:c0:56:7a:93:
                    c5:fa:74:b0:d7:ba:b5:e6:63:53:31:07:c1:05:33:
                    b3:96:f1:78:12:12:bc:c0:c0:a7:5b:ec:39:27:1c:
                    9e:19:f8:61:27:9d:17:92:50:33:14:c1:45:fa:5a:
                    f8:92:12:b7:90:33:71:35:2a:8a:4f:a3:37:97:b7:
                    ee:98:2a:dc:78:d3:3d:a3:7d:67:c5:46:a4:31:1c:
                    c7:73:26:7e:23:e3:11:59:2c:33:96:e8:2f:76:ba:
                    1a:65:1b:f0:69:70:6b:a6:3b:36:46:40:d1:19:44:
                    26:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:17:9E:5F:E7:03:94:99:07:FF:B2:CA:8D:B7:E0:D0:03:91:A8:7A
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/24E07816913E11F0AE8FEC66C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:41:d4:46:46:77:ba:32:4f:2d:fd:96:ca:6e:9f:27:a0:22:
         a5:dc:03:8f:72:16:b6:e4:42:63:4b:6b:9c:bf:f0:9e:f5:b6:
         6e:4a:5e:7f:68:4e:20:c8:84:31:e8:3c:2f:a4:47:26:3c:09:
         0b:ca:22:2b:ba:41:db:f5:66:27:e7:34:4c:f4:70:c0:a6:3f:
         e1:99:5d:dc:3e:d4:da:c4:51:3f:f3:01:6e:27:b5:76:27:8a:
         4b:79:87:d6:b7:38:20:05:e0:04:ec:07:95:8a:60:9d:0b:96:
         f2:6e:74:aa:00:fa:ff:6e:dc:f9:04:25:4c:57:eb:8d:48:35:
         2e:7f:e1:2a:c4:36:83:2b:a7:d9:21:25:1f:91:68:76:e4:65:
         74:4c:d7:dc:4d:96:83:8a:91:8d:b7:01:a9:b3:b5:4d:f1:67:
         b0:dd:1d:03:cf:c9:36:28:9d:35:18:cd:60:b2:f4:ad:51:0d:
         a4:ed:ac:9d:ca:60:d1:53:0d:5c:91:1a:75:2b:e1:15:14:a4:
         9c:d9:f3:54:17:a7:21:38:64:ce:2f:68:b8:ef:f3:c8:3e:05:
         3f:f7:ea:26:c2:eb:16:57:a4:c0:ae:e2:23:ba:07:07:38:fd:
         61:69:75:64:57:11:2e:a8:56:ed:a6:b0:54:13:85:ed:04:5c:
         af:29:cc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 10:44:58 2025 by rpki-client