Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/93532FB2132211F18D96001E1E3D8C67.roa
File:                     93532FB2132211F18D96001E1E3D8C67.roa (raw, json)
Hash identifier:          Jln5K9rCYn+/+TNN/HxVur6/cQrEKKq8dgcpJFrJnY0=
Subject key identifier:   C7:CB:3E:20:D7:53:E7:2B:8D:76:E2:1B:84:EA:90:6E:AC:97:B3:FC
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       0648
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/93532FB2132211F18D96001E1E3D8C67.roa
Signing time:             Wed 09 Sep 2026 01:51:37 +0000
ROA not before:           Wed 09 Sep 2026 01:51:37 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     137910
IP address blocks:        202.155.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 01:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1608 (0x648)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Sep  9 01:51:37 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa0bba9-bc44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:b8:69:e0:c3:69:cc:12:56:09:a5:6c:5e:3f:
                    5f:3f:75:cc:29:b1:ee:b4:c4:df:ac:22:ff:a9:93:
                    70:0b:51:c6:b1:45:8f:5c:7f:4e:34:4e:cc:c9:2b:
                    86:a5:86:b8:79:80:19:4a:be:cf:91:2a:90:76:9b:
                    b5:c4:03:92:0a:98:f7:f4:13:25:a0:d8:eb:d2:4a:
                    99:0e:d9:0b:5a:b2:b3:bc:18:e5:60:50:89:7d:46:
                    9d:a2:ab:6a:51:9d:29:8a:93:54:82:58:69:38:2b:
                    9c:3a:3f:bf:42:06:e3:65:0c:e6:1b:a5:9d:ec:a1:
                    a0:10:fc:fe:89:ed:f6:86:56:67:e2:35:ef:27:fc:
                    09:e8:46:62:48:23:c3:47:a4:af:b5:1e:e3:d9:83:
                    52:74:2d:c2:b3:61:c6:c0:2a:fe:ae:5c:04:0c:ea:
                    43:04:b3:84:ce:d9:6e:37:b9:a7:b9:8c:94:5f:30:
                    9d:ea:b0:97:58:ee:cc:a1:90:38:b7:41:17:b4:da:
                    3e:85:03:dd:30:38:bc:65:8f:3b:03:0b:a7:30:b0:
                    63:14:11:e0:fe:27:12:f8:b3:83:c2:52:68:4d:61:
                    cf:63:74:68:43:02:1a:52:06:0e:cb:8e:e9:43:05:
                    90:29:ff:91:81:dd:72:8d:8c:9f:98:7d:33:15:81:
                    cd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CB:3E:20:D7:53:E7:2B:8D:76:E2:1B:84:EA:90:6E:AC:97:B3:FC
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/93532FB2132211F18D96001E1E3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:6e:b1:0a:3b:c1:9c:dd:c3:e3:41:ab:c8:6b:75:73:5d:93:
         52:fe:cb:b7:0f:3e:33:d1:80:0c:91:4f:5b:36:dd:93:11:ff:
         f0:6f:38:c6:92:99:06:4f:64:0e:18:a3:c4:89:90:06:f3:7a:
         4c:5b:58:cc:17:aa:a5:c1:3a:15:48:d5:b7:a8:16:93:9f:30:
         d9:d3:38:03:d1:18:0e:b3:fd:83:12:0f:83:a9:33:33:97:87:
         4e:bb:68:1d:6b:b0:ed:44:3f:67:8d:63:8a:c8:33:f5:a8:de:
         ca:fd:52:77:67:93:43:57:2c:f1:e7:6a:5d:f3:ca:da:aa:67:
         1b:84:5a:03:56:5b:31:b9:35:d5:52:55:f4:94:71:06:0a:59:
         b6:c1:51:64:e5:21:ed:88:9e:bd:81:27:dc:e1:1a:f9:1a:2e:
         77:8a:98:7a:4f:43:c8:76:28:c4:9e:87:d6:0e:cd:61:09:03:
         9a:32:41:02:80:5c:ee:b4:15:54:25:ec:c0:2a:ca:7a:17:57:
         1a:ad:d2:ee:96:9a:31:88:ed:59:f3:66:4f:a4:39:4d:c7:36:
         1a:05:9f:71:b8:c3:11:2e:45:c4:85:6e:a2:6b:98:d2:73:05:
         f7:a2:2f:15:6a:4a:e9:9d:26:41:de:9d:c0:4a:16:ab:43:0d:
         9a:b9:b6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:29:19 2026 by rpki-client