Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/820501DE3D3211F09AB6A617C4F9AE02.roa
File:                     820501DE3D3211F09AB6A617C4F9AE02.roa (raw, json)
Hash identifier:          XUZ0Pq1UP04C9uPaf0O/+qNaWsEDb2gL+oaVN0jVos4=
Subject key identifier:   53:63:F2:7D:2E:A6:D7:E5:D1:FD:1D:95:DE:86:49:B5:BF:77:DE:B1
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       0530
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/820501DE3D3211F09AB6A617C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 20:06:14 +0000
ROA not before:           Thu 25 Sep 2025 02:21:04 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     134677
IP address blocks:        202.155.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Mar 2026 01:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1328 (0x530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Sep 25 02:21:04 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a49c35-df90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:05:8c:f4:af:79:96:db:3a:f0:8a:fc:31:00:
                    3d:a6:36:c0:00:eb:74:68:5a:c5:51:b3:3b:0c:25:
                    7f:70:64:9b:f9:ce:0d:2b:10:ad:01:76:8f:fc:64:
                    ca:57:8f:72:35:62:61:2a:bf:69:f5:26:ba:56:7e:
                    ec:dc:b2:2b:5e:53:77:48:94:fd:07:c6:90:0e:42:
                    82:49:33:33:ce:0a:1e:1f:e6:bb:68:4a:8c:06:e3:
                    dc:53:d9:c8:ce:aa:ec:5a:bc:2b:df:b4:cb:52:a5:
                    9e:63:fe:aa:60:83:e9:11:34:c0:15:87:14:fb:3d:
                    32:e9:79:d6:89:00:78:ab:60:b6:ac:f2:2e:d3:36:
                    e4:15:40:fb:6b:2d:6e:6f:13:7c:7e:05:b3:e6:7d:
                    4d:e1:78:39:2f:2f:7f:9d:88:0b:88:f5:b4:cc:31:
                    df:ac:d9:52:7d:69:47:e8:a3:e7:26:09:3f:b6:c2:
                    8b:5b:6f:9c:f1:70:51:63:84:19:d7:e2:2e:71:42:
                    63:51:63:28:de:3c:99:ac:b8:6c:3b:8d:71:5b:a1:
                    b0:5a:cc:69:e2:2d:93:63:67:ff:12:0b:84:da:67:
                    10:8b:57:29:24:e9:f0:20:19:4c:12:90:95:9d:85:
                    76:7c:9c:90:62:f8:51:5b:ba:45:17:39:51:3b:df:
                    a5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:63:F2:7D:2E:A6:D7:E5:D1:FD:1D:95:DE:86:49:B5:BF:77:DE:B1
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/820501DE3D3211F09AB6A617C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:49:2c:b8:3a:ed:28:7c:c9:00:29:77:25:9d:a2:60:ef:56:
         ea:c4:09:fe:af:5e:74:12:20:da:11:53:80:dd:51:f7:a1:d8:
         3c:51:4d:75:2c:19:a5:c3:ef:42:3c:b9:d8:34:7b:f5:41:53:
         b5:09:27:23:09:27:45:9e:74:2d:a2:0a:0d:49:ef:17:ef:64:
         66:41:02:6f:67:17:32:c8:fb:ac:76:50:96:af:f6:07:36:18:
         80:03:64:40:5c:40:4b:12:f3:24:a2:46:d1:6f:c8:38:09:e5:
         4b:db:cf:60:0a:8b:16:98:fb:34:dd:c9:bb:a3:c6:e9:81:8f:
         81:8c:4e:20:af:e6:5f:80:aa:fc:f3:ab:82:a9:d2:8d:c8:97:
         22:c7:dd:68:5d:ae:46:91:ed:3e:0b:70:0c:7f:d4:a2:bb:2d:
         00:79:54:c9:bb:8e:6f:eb:a9:0a:13:00:b4:f2:7d:11:2a:d5:
         ed:74:9e:e7:54:1f:95:8d:38:89:61:3d:dd:3d:0f:2e:d4:52:
         c6:74:6e:d8:19:05:20:c1:74:2f:55:6c:c4:b5:76:46:b3:45:
         8b:ac:78:8c:7c:93:40:bc:f4:98:86:f5:7f:52:b1:4a:5f:65:
         2a:08:66:a1:3d:92:1f:5c:68:7b:0c:84:53:d2:df:3d:d4:57:
         59:fb:92:ba
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD
MDMyOUQxMzgwHhcNMjUwOTI1MDIyMTA0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OWMzNS1kZjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlgWM9K95lts68Ir8MQA9pjbAAOt0aFrFUbM7DCV/cGSb+c4NKxCtAXaP/GTK
V49yNWJhKr9p9Sa6Vn7s3LIrXlN3SJT9B8aQDkKCSTMzzgoeH+a7aEqMBuPcU9nI
zqrsWrwr37TLUqWeY/6qYIPpETTAFYcU+z0y6XnWiQB4q2C2rPIu0zbkFUD7ay1u
bxN8fgWz5n1N4Xg5Ly9/nYgLiPW0zDHfrNlSfWlH6KPnJgk/tsKLW2+c8XBRY4QZ
1+IucUJjUWMo3jyZrLhsO41xW6GwWsxp4i2TY2f/EguE2mcQi1cpJOnwIBlMEpCV
nYV2fJyQYvhRW7pFFzlRO9+l4QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFNj8n0u
ptfl0f0dld6GSbW/d96xMB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE
RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvODIwNTAxREUz
RDMyMTFGMDlBQjZBNjE3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAypuNMA0GCSqGSIb3DQEBCwUAA4IBAQCKSSy4Ou0ofMkAKXclnaJg
71bqxAn+r150EiDaEVOA3VH3odg8UU11LBmlw+9CPLnYNHv1QVO1CScjCSdFnnQt
ogoNSe8X72RmQQJvZxcyyPusdlCWr/YHNhiAA2RAXEBLEvMkokbRb8g4CeVL289g
CosWmPs03cm7o8bpgY+BjE4gr+ZfgKr886uCqdKNyJcix91oXa5Gke0+C3AMf9Si
uy0AeVTJu45v66kKEwC08n0RKtXtdJ7nVB+VjTiJYT3dPQ8u1FLGdG7YGQUgwXQv
VWzEtXZGs0WLrHiMfJNAvPSYhvV/UrFKX2UqCGahPZIfXGh7DIRT0t891FdZ+5K6
-----END CERTIFICATE-----
Generated at Thu Mar 5 19:11:28 2026 by rpki-client