Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/49564F2478D611F18E610B8795A30FBC.roa
File:                     49564F2478D611F18E610B8795A30FBC.roa (raw, json)
Hash identifier:          EZ8nR24GViuQ8TYKm+omM4pSM5pxRF7FwieFPpa5V7w=
Subject key identifier:   A7:74:E1:21:71:58:45:46:A4:52:89:06:58:61:7C:5A:59:42:88:B0
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       05EB
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/49564F2478D611F18E610B8795A30FBC.roa
Signing time:             Tue 07 Jul 2026 08:48:38 +0000
ROA not before:           Tue 07 Jul 2026 08:48:38 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     9304
IP address blocks:        202.155.149.0/24 maxlen: 24
                          202.155.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 01:58:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1515 (0x5eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Jul  7 08:48:38 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a4cbd66-f5cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3b:54:1a:1c:a3:74:7b:1b:c9:73:e9:5e:d4:
                    1e:c1:5c:f9:80:8c:73:4e:ee:bb:82:5a:0f:e5:0b:
                    60:eb:48:8d:7b:0e:17:fb:fd:79:42:08:16:a6:c9:
                    40:4d:25:54:47:25:75:46:ff:b8:f8:fd:ee:0e:66:
                    aa:3d:85:3e:27:88:e1:80:c4:65:61:b1:e6:b3:1a:
                    b5:86:79:ae:c0:dd:4a:0c:0e:e5:d6:53:cb:a5:0b:
                    90:e6:a4:fc:cd:68:90:51:6e:c8:73:d6:d1:5c:f8:
                    e7:03:4c:4f:55:46:94:41:bb:a0:9f:6d:14:85:ba:
                    5a:b9:6a:b4:3a:aa:3d:33:8c:c8:27:22:e6:02:be:
                    03:aa:23:dd:c0:9a:6b:2b:09:a4:29:e3:6b:04:47:
                    e9:de:5e:0a:5a:82:f0:ae:2c:84:97:f0:2d:e4:90:
                    5f:fa:bb:04:c6:c7:fe:db:7b:77:1b:95:77:78:3d:
                    92:3f:d6:98:31:32:b1:08:c6:8a:98:d4:35:d2:e2:
                    4e:4e:7a:2f:df:4b:af:92:b8:c8:0a:8c:98:56:83:
                    4f:cb:3a:b3:33:17:1e:7f:b9:68:56:f1:2e:95:04:
                    e7:13:4e:7f:ac:5f:3c:85:ce:9d:d0:15:28:39:53:
                    1e:f8:c3:8f:ec:d2:1e:03:d0:ad:44:bf:38:ad:6a:
                    dc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:74:E1:21:71:58:45:46:A4:52:89:06:58:61:7C:5A:59:42:88:B0
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/49564F2478D611F18E610B8795A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.149.0/24
                  202.155.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:ff:c3:b0:82:c1:81:40:4d:9b:41:dd:7e:cb:b2:88:b1:5b:
         4b:a5:41:0b:fa:02:3a:66:9e:dc:e0:96:6a:d1:03:50:7d:07:
         3e:3a:23:5e:53:7c:20:5b:a5:b4:dd:d5:3c:ae:cd:4b:e8:94:
         15:8f:68:40:99:c4:93:ec:8b:79:33:97:b5:46:5d:c1:d9:d1:
         5d:d0:cc:49:d4:8a:bc:09:2d:f4:ec:21:50:63:ef:76:d0:90:
         9e:b1:d6:25:ac:42:3e:9a:79:74:15:43:93:60:5a:f9:ee:8c:
         93:b2:61:f8:f1:84:c6:c0:aa:8e:51:24:35:66:51:8f:7f:13:
         3e:05:a3:4b:84:7d:d6:ca:c6:1f:93:e6:91:2e:99:b2:5e:db:
         13:dc:ae:b7:0c:b0:1d:1c:ed:73:a8:9c:87:84:4d:7e:94:c0:
         0c:46:3b:8b:37:75:14:8a:cb:a9:4f:12:49:a9:e2:4a:16:09:
         af:1c:60:26:50:3d:d7:48:c8:b7:fb:dd:8a:01:e8:0a:9a:cb:
         ac:40:93:6d:9e:96:12:29:45:9f:a7:38:53:99:0e:b9:de:9d:
         ea:f6:df:10:31:53:00:dd:5f:e4:40:ba:59:f3:ab:a9:80:b3:
         d9:e9:52:13:b8:df:c2:0d:63:33:f2:fa:ee:52:56:16:49:79:
         0b:36:b8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:52 2026 by rpki-client