Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/808E8872960D11F1BD720A885B11F970.roa
File:                     808E8872960D11F1BD720A885B11F970.roa (raw, json)
Hash identifier:          v1S1qWWneoi6Z+Ksa9d9NvV3RZIn+FyorFBjUlmR/Sg=
Subject key identifier:   13:CF:7F:1B:8B:B4:54:23:11:96:4D:55:4C:39:7C:6A:55:9D:88:F7
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       0620
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/808E8872960D11F1BD720A885B11F970.roa
Signing time:             Wed 12 Aug 2026 05:20:16 +0000
ROA not before:           Wed 12 Aug 2026 05:20:16 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     834
IP address blocks:        202.155.144.0/21 maxlen: 21
                          202.155.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Aug 2026 00:47:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1568 (0x620)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Aug 12 05:20:16 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a7c0290-5b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:42:8c:ed:e7:08:ee:70:b0:9d:c6:35:a5:c7:
                    ed:63:dc:62:dd:a7:00:3c:e6:2c:f3:16:c0:e2:9a:
                    18:ba:c3:42:42:29:46:19:1f:2d:8f:76:e5:70:d0:
                    7d:67:7f:66:3f:28:cf:d1:ef:61:d7:e5:c9:dd:73:
                    00:83:86:ac:92:0d:78:2f:9b:81:28:6a:dd:8e:1a:
                    26:ba:3b:78:7e:4d:c2:1c:62:04:eb:66:1a:b9:6b:
                    28:99:8c:e9:6a:7f:2d:65:28:2d:63:28:25:6c:84:
                    7a:b1:ab:4d:3b:a3:af:bb:01:18:7d:fc:70:b8:4c:
                    fd:c9:7a:31:27:f9:a1:52:c3:29:1f:8f:eb:f7:4c:
                    23:8d:67:07:55:b8:89:0f:0f:f8:d2:03:42:5d:5f:
                    09:56:50:c3:fa:a8:98:39:5d:48:f1:4e:34:98:ea:
                    50:ab:5a:03:e0:f9:fd:c7:41:b6:5b:ee:d9:8d:48:
                    2e:38:90:17:b3:23:fe:21:e5:df:25:c1:3a:cb:7f:
                    ba:0d:e5:c2:87:37:d1:7c:d3:e1:cf:9f:25:ef:58:
                    f3:8b:67:dc:b0:c2:fd:e8:fb:93:29:95:96:0c:85:
                    ed:14:85:6c:62:66:89:ef:a0:c3:26:32:97:52:cf:
                    f5:de:71:8c:ab:68:c5:53:51:e9:8f:be:68:b1:d7:
                    46:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CF:7F:1B:8B:B4:54:23:11:96:4D:55:4C:39:7C:6A:55:9D:88:F7
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/808E8872960D11F1BD720A885B11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8d:b8:3a:ba:7e:c8:99:45:39:1a:7d:c6:ce:5d:22:21:2b:2d:
         b0:4d:2d:c1:ad:ae:a0:bd:08:63:cd:89:5d:17:6f:d9:bd:91:
         15:4a:ca:3c:88:44:0c:cc:7d:1c:81:cf:88:36:26:e0:66:2b:
         bc:63:a2:9e:16:11:ea:eb:1e:6d:50:ed:0b:00:45:8c:64:94:
         05:aa:a9:b2:28:fd:10:88:cc:3c:e9:f6:f8:eb:8f:1f:73:87:
         ba:95:76:85:c2:35:74:06:bd:58:dd:21:e8:0a:60:00:c8:a3:
         59:6c:1a:df:b3:cf:84:64:7c:34:d2:72:f0:88:b4:90:ff:1a:
         48:42:c9:88:45:71:4f:a6:d8:98:b6:6f:0b:3d:59:20:5e:b7:
         ac:4e:3d:5d:0a:33:ec:4b:a4:87:08:81:3d:0e:eb:d7:e6:ba:
         f5:c0:96:e5:67:01:16:a1:8e:0b:8c:1b:70:3e:58:d2:4e:86:
         e6:7c:ca:68:0d:ce:da:34:da:cc:ba:4d:90:a5:52:63:76:bb:
         55:58:1d:67:56:36:75:20:c2:db:ab:5a:64:bb:3b:01:5b:21:
         72:2c:ac:88:9c:50:51:ab:81:53:ec:5e:15:f3:6e:78:c5:12:
         b9:3a:f1:79:1a:12:1e:99:59:19:dd:f1:34:fb:32:ad:4a:d0:
         92:5d:7f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:05 2026 by rpki-client