Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/820501DE3D3211F09AB6A617C4F9AE02.roa
File:                     820501DE3D3211F09AB6A617C4F9AE02.roa (raw, json)
Hash identifier:          jht3HdodOgoncNFwncwkNlHoLA2wX0Zsnfp0O9NyG+8=
Subject key identifier:   5A:F8:3F:61:68:BD:08:12:C2:00:D7:05:EC:BA:74:C5:DE:59:D5:67
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       0368
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/820501DE3D3211F09AB6A617C4F9AE02.roa
Signing time:             Fri 30 May 2025 08:45:59 +0000
ROA not before:           Fri 30 May 2025 08:45:59 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     134677
IP address blocks:        202.155.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 16:38:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 872 (0x368)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: May 30 08:45:59 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=68397046-51b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9a:60:63:d7:e2:ee:a4:7e:68:62:de:04:87:
                    be:2a:1b:64:9a:39:1b:11:f9:d7:c6:47:5d:d4:27:
                    55:96:68:6f:1e:17:84:11:b0:3f:76:4b:55:7b:65:
                    55:7e:66:3b:0f:5c:38:87:92:e8:89:cf:56:e8:b4:
                    38:b2:6e:31:20:8c:f4:bb:c6:88:c5:27:f2:a8:04:
                    fc:43:1b:c9:5f:e9:e7:b6:3d:a0:b8:da:78:5d:a4:
                    27:52:cc:2e:1c:71:90:fc:c9:73:b1:16:e5:3e:1f:
                    4e:ec:f4:9a:ee:d9:5d:e4:42:81:12:7d:c2:8d:6c:
                    dc:7d:d9:31:5c:5a:df:bf:d8:d5:dd:94:20:ae:57:
                    83:59:1d:fd:24:4e:21:b8:2e:b5:30:7f:d1:b9:be:
                    0c:f8:f3:a8:d6:99:75:ed:57:d2:bf:6b:4d:49:ea:
                    3d:b1:d4:b0:cc:5a:ec:b0:a0:a8:54:f0:e9:61:b8:
                    f8:18:aa:83:c7:6e:ba:2f:36:a4:ba:fb:57:9f:a6:
                    e3:53:86:29:03:43:cb:57:40:e7:0c:9b:4c:b0:5f:
                    3d:1b:9e:93:36:1a:87:c9:ce:c6:45:f9:37:67:25:
                    6a:c0:15:5e:35:c3:94:47:39:a6:b1:3b:2b:a7:4c:
                    d8:de:58:21:83:71:e2:b2:fe:66:8a:89:44:91:f6:
                    85:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F8:3F:61:68:BD:08:12:C2:00:D7:05:EC:BA:74:C5:DE:59:D5:67
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/820501DE3D3211F09AB6A617C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d6:04:a5:3b:21:9d:8c:4b:2c:77:21:55:ae:49:11:81:04:70:
         a7:92:22:a6:e0:6f:e6:3e:bc:17:6a:2c:c6:48:35:3a:72:2a:
         69:2c:ba:16:73:a8:81:b7:82:79:db:bb:48:9e:bc:50:d8:5b:
         89:31:fd:5e:04:c1:70:45:8a:65:21:b2:64:85:ef:fe:64:e9:
         f3:58:c5:19:09:0c:44:38:8d:79:07:c1:bd:6f:5a:d2:05:36:
         b0:db:92:8d:43:01:4f:f2:ed:3b:c9:b5:32:c0:17:53:3e:26:
         8d:e0:22:22:91:c7:bf:e7:66:30:cb:d8:fe:2e:1c:21:99:66:
         f0:c2:9e:9d:5b:3d:12:bf:63:e0:38:53:51:5e:1e:d9:0a:9b:
         37:e1:52:83:45:a5:85:7c:f8:61:51:cd:f6:57:40:79:6f:65:
         67:99:6c:12:08:a8:f1:83:00:9d:7a:b4:9d:ae:c4:11:f3:ba:
         50:33:73:87:d9:f8:a3:d2:70:ad:e2:20:aa:fa:10:76:51:47:
         d6:4c:c8:3f:c6:73:cf:cf:fd:2b:6a:0d:4b:6f:01:97:0e:44:
         63:a8:71:8a:75:dd:c5:d6:30:fc:b6:a9:16:2f:24:df:84:5f:
         22:ee:7f:ac:64:9e:25:30:5a:71:1c:4c:9e:a5:eb:49:b3:72:
         ec:a1:27:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:50:44 2025 by rpki-client