Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/4BDC342A9AC311F18DADAD3C4811F970.roa
File:                     4BDC342A9AC311F18DADAD3C4811F970.roa (raw, json)
Hash identifier:          12dCkqSZxspNYF5Rz1CK9R0LC3rkRz7lhC2PWTrfqbY=
Subject key identifier:   8B:FE:56:8F:CA:3A:6F:00:78:C9:F5:43:C0:4B:BC:F6:C0:42:73:54
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       0686
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/4BDC342A9AC311F18DADAD3C4811F970.roa
Signing time:             Fri 09 Oct 2026 05:22:00 +0000
ROA not before:           Fri 09 Oct 2026 05:22:00 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     834
IP address blocks:        202.155.144.0/21 maxlen: 21
                          202.155.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 26 Oct 2026 01:15:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1670 (0x686)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Oct  9 05:22:00 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ac879f7-dbed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7c:b9:52:57:49:0a:fe:dd:9e:5d:a9:ee:bb:
                    0a:05:66:17:86:52:29:4e:e1:28:df:16:03:a5:9a:
                    08:09:ec:15:ed:1e:53:6d:73:14:b9:4a:38:c3:59:
                    8f:ac:ec:e3:33:3d:da:54:aa:07:ff:0e:c3:48:be:
                    82:82:2d:1e:0f:3c:a1:f2:b9:e7:4c:37:16:df:bc:
                    36:4d:5a:af:7f:df:14:d1:cc:ef:d9:21:3a:3b:e7:
                    b6:3e:a9:cc:ed:25:90:36:1a:16:54:f7:82:d1:12:
                    1d:9f:42:1a:4b:44:79:b9:7f:00:8b:98:38:73:f3:
                    1d:75:a3:cd:0d:9d:4a:c9:80:5a:ce:35:69:3b:3f:
                    d9:8f:f4:3e:37:ea:c6:6c:9c:2a:8f:c5:d4:5e:34:
                    ac:ae:dd:94:10:0a:7c:27:e6:2e:5d:81:e4:e1:78:
                    9a:a2:25:63:12:79:c2:e7:e2:ba:b5:13:2c:64:72:
                    2f:65:2a:05:75:ab:b3:5f:df:9b:c6:13:23:05:03:
                    89:94:60:90:b8:a2:60:ef:f9:8f:c5:d8:c8:89:53:
                    73:cd:23:7d:fd:d1:8f:94:ab:dc:ec:eb:87:f8:87:
                    09:a5:da:d9:29:79:5d:dd:fe:8e:75:41:6f:d8:23:
                    79:ef:a7:e7:35:c4:63:81:19:71:c8:29:de:15:ce:
                    43:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FE:56:8F:CA:3A:6F:00:78:C9:F5:43:C0:4B:BC:F6:C0:42:73:54
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/4BDC342A9AC311F18DADAD3C4811F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d7:b5:b5:60:bb:01:89:10:c3:62:18:2e:56:5b:fe:33:52:83:
         5c:d5:6a:c7:89:e0:9f:2a:ea:78:f9:aa:ef:3a:4e:0e:58:e8:
         fc:43:63:db:ef:ed:e2:d7:cf:1a:a2:c7:6d:f3:2e:ab:8a:ab:
         0b:50:1f:c0:a1:b3:c2:58:7d:f7:d5:a6:f1:dc:8d:69:18:53:
         9f:89:12:b0:d8:de:5f:84:21:7c:65:51:9c:8d:61:85:26:db:
         20:81:43:1b:2d:0e:82:60:40:fa:66:b2:7c:02:4a:4a:b0:0c:
         c2:32:ac:03:34:4f:f4:bb:02:b9:e9:46:12:a0:d2:85:5b:be:
         06:ab:93:42:cb:2b:0c:b1:e1:7f:a1:3b:cf:f6:82:16:1c:f1:
         d2:92:8f:ba:f6:17:f3:51:9f:fa:97:8d:02:0b:72:1c:99:7b:
         44:c2:f5:0e:b9:57:3a:af:3c:55:9d:ac:2f:3c:9f:ab:92:2a:
         c1:ae:30:76:1c:39:f2:87:5d:8b:5f:29:5d:e6:4c:2d:c2:ef:
         44:69:5d:26:ec:94:6b:02:1b:5f:ce:01:c4:7a:f2:1a:24:5c:
         f2:be:16:dd:7d:86:03:8d:b4:96:25:5a:db:70:49:88:71:a5:
         35:89:bf:69:51:9c:2a:14:2a:2d:ef:ae:b1:6f:6c:00:e4:c4:
         45:30:ab:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 02:47:54 2026 by rpki-client