Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/25A5300C885B11F09F3C8013C4F9AE02.roa
File:                     25A5300C885B11F09F3C8013C4F9AE02.roa (raw, json)
Hash identifier:          +eCsdKcxivZX4H4wTkV7JWZ+hZ2Q0HdTt/r5TH1ptJM=
Subject key identifier:   90:37:7F:B0:CB:FE:FE:B4:96:1C:C4:87:B7:42:51:75:FE:32:FB:4B
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       03E2
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/25A5300C885B11F09F3C8013C4F9AE02.roa
Signing time:             Wed 03 Sep 2025 00:15:50 +0000
ROA not before:           Wed 03 Sep 2025 00:15:50 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     401783
IP address blocks:        202.155.24.0/24 maxlen: 24
                          202.155.25.0/24 maxlen: 24
                          202.155.26.0/24 maxlen: 24
                          202.155.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 02:14:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 994 (0x3e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Sep  3 00:15:50 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=68b788b6-7b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a8:c4:bd:a4:04:bf:8a:cc:57:2f:37:b1:c8:
                    0f:e7:6c:37:ab:d4:be:3f:34:8b:f5:8f:1b:af:42:
                    84:d1:c0:b4:58:e5:07:62:13:8f:7a:d1:31:84:68:
                    4e:4b:e4:8a:01:bd:1a:e2:9f:25:0b:0d:c7:2f:a2:
                    89:49:d4:4d:df:4f:a3:fe:e3:13:68:7d:bb:bb:01:
                    b2:88:dc:d3:24:e0:f4:36:72:2a:de:39:ad:cf:6e:
                    55:92:1d:af:f5:09:ba:67:b7:7b:d9:b3:7b:99:c7:
                    4b:f5:b1:7d:b0:51:c0:94:e6:b8:62:54:fe:21:4e:
                    38:f0:35:6b:89:1f:cc:c3:d4:8c:8f:02:af:a2:43:
                    34:1f:30:9f:dc:74:fb:b3:9d:4c:a7:06:99:96:c8:
                    05:b6:57:c6:bd:42:87:10:a5:5e:b2:59:f1:fe:cc:
                    26:7f:62:60:39:d7:42:5b:df:8e:31:b6:7b:6c:a1:
                    d4:62:dd:6d:84:42:f0:1b:47:ea:f3:86:aa:be:43:
                    3f:08:a2:47:75:29:38:86:3e:3b:9f:14:74:b6:8d:
                    0a:8c:64:a5:61:29:f6:1d:96:13:6c:df:93:45:52:
                    37:ae:b1:9f:5a:47:87:ef:5f:01:83:4b:99:a7:80:
                    d7:2c:22:57:b0:24:4d:2e:52:40:3a:d7:42:87:88:
                    de:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:37:7F:B0:CB:FE:FE:B4:96:1C:C4:87:B7:42:51:75:FE:32:FB:4B
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/25A5300C885B11F09F3C8013C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d8:7b:cd:94:3c:eb:d1:36:23:a8:e3:44:d0:d0:e1:25:bc:12:
         ad:38:5c:4b:f6:8b:02:2b:e2:fe:56:51:d2:b7:b7:e1:37:cf:
         86:bb:20:85:c6:42:a3:db:ab:ec:c3:6a:33:ee:dc:f8:8f:8b:
         e2:12:eb:22:5f:ee:2d:68:51:af:71:ed:44:ec:fe:c0:80:05:
         5d:cd:4e:2a:cb:5b:31:2c:83:f1:33:a6:ad:ce:cb:1e:8f:ab:
         0a:9f:4b:db:dc:64:b7:4a:31:e1:3d:35:8c:7e:e1:80:c7:e5:
         97:43:85:47:0e:f5:45:14:87:72:8b:6f:6f:c2:47:a2:af:c5:
         ea:63:cc:4e:80:7f:33:ca:44:c7:a9:ea:38:20:32:00:68:35:
         ca:30:fc:c3:fb:80:99:4e:5e:1e:16:fa:e1:4c:0c:80:53:f9:
         e1:2e:8a:4a:04:77:a4:5a:a0:5a:ef:32:cf:c3:00:ce:8a:64:
         56:4a:90:ac:ec:b8:f0:78:fc:83:35:a2:36:25:42:b7:9a:09:
         da:5c:2f:b8:78:94:f1:12:c9:ac:6c:41:b8:f3:02:91:3e:54:
         d4:ca:8e:4e:4a:11:a8:c5:06:d4:8d:51:a3:14:35:9c:81:95:
         93:cc:07:e1:36:40:6e:5f:14:41:dc:b0:dd:51:b5:7b:7e:1a:
         c0:86:93:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 08:53:13 2025 by rpki-client