Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/9FFB219A521411F09F307183C4F9AE02.roa
File:                     9FFB219A521411F09F307183C4F9AE02.roa (raw, json)
Hash identifier:          AM+2lN59NZw+wsftuSVKAPBaCjP0/qWiIndXCJXglTA=
Subject key identifier:   EF:5D:CF:4B:32:C6:11:67:A9:C3:76:24:6C:3D:37:CB:3E:56:64:F1
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       0535
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/9FFB219A521411F09F307183C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 20:06:18 +0000
ROA not before:           Thu 25 Sep 2025 02:21:11 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     153371
IP address blocks:        202.155.129.0/24 maxlen: 24
                          202.155.130.0/24 maxlen: 24
                          202.155.140.0/24 maxlen: 24
                          218.33.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 01:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1333 (0x535)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Sep 25 02:21:11 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a49c3a-9355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:91:d6:5a:e4:78:33:cf:6b:a5:98:ea:2e:82:
                    78:f3:6e:bc:9e:6e:c3:d0:76:95:ca:3e:02:02:2a:
                    99:24:57:39:2a:91:9c:6b:d1:a3:b1:cf:f4:df:cb:
                    65:9d:b7:16:2d:c7:d8:69:31:20:04:92:20:0e:18:
                    10:b3:fd:3b:3e:93:5a:a0:41:0a:cf:ce:8c:3b:53:
                    ab:74:6c:51:41:ce:c9:3d:f6:1a:22:80:6c:01:32:
                    91:06:8a:46:a4:24:0b:17:2a:7b:d9:a0:0a:08:b5:
                    7d:12:c9:6b:46:3d:7d:77:be:dd:5f:77:3e:84:60:
                    e3:84:42:69:d2:40:68:4a:54:dd:b6:11:1c:c9:1f:
                    26:e8:81:2e:69:3e:b5:09:4a:ba:bb:69:a7:77:7d:
                    e8:0c:8c:61:cb:2a:d5:aa:30:aa:5c:f3:9c:58:73:
                    a8:75:be:25:34:da:48:bc:47:5b:20:c7:6d:c9:06:
                    96:9c:45:0f:a3:c7:87:7e:61:76:33:09:c1:39:5c:
                    a1:09:f7:10:8f:7e:51:8c:54:c3:c2:35:80:dc:30:
                    86:b4:fa:86:b6:89:cc:a1:b4:d5:10:f0:35:6e:bd:
                    63:9f:e7:7c:03:17:2b:fa:b6:03:a7:1d:f2:59:20:
                    68:5d:a1:f9:7e:68:9d:45:eb:dd:20:0a:85:bf:b8:
                    5d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5D:CF:4B:32:C6:11:67:A9:C3:76:24:6C:3D:37:CB:3E:56:64:F1
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/9FFB219A521411F09F307183C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.129.0-202.155.130.255
                  202.155.140.0/24
                  218.33.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:de:d5:c0:e1:fc:a6:dd:6c:e4:c4:b0:37:58:c4:a4:62:8d:
         cb:31:86:77:2e:7a:75:74:ae:da:17:74:09:59:11:cd:dc:36:
         32:00:96:24:e1:20:41:95:6a:d6:93:1d:3a:43:28:f8:70:37:
         f9:fe:a5:84:4c:50:fe:78:76:38:d0:2c:17:c7:77:9d:68:d9:
         1b:7b:74:aa:9c:0f:b7:ff:4a:5a:9e:b3:57:4f:c4:d0:0d:06:
         2d:de:38:93:47:71:e4:b2:ee:13:48:1f:18:23:a3:11:fb:15:
         7e:6a:49:19:d6:49:9a:1c:af:23:5d:64:2f:34:a7:3c:0c:13:
         c3:68:86:bd:d9:94:2d:23:88:ac:b3:4a:b8:76:41:bd:f6:16:
         65:b4:84:70:80:d7:12:6a:fc:92:19:8b:99:82:6c:b1:7e:5d:
         3c:fe:79:be:e3:89:be:4b:09:c2:80:e2:5c:a1:83:3a:ec:ab:
         7f:b6:fd:89:a1:21:ba:9f:7d:ac:3f:7e:df:88:f4:95:17:80:
         6e:b2:89:30:f6:83:57:84:ee:ac:db:aa:90:c1:ee:79:8e:2c:
         6d:e9:84:41:08:ed:02:9b:b7:28:12:ab:5c:57:05:47:25:40:
         59:57:10:1d:8b:23:a1:27:69:9f:d6:7f:29:18:a4:4b:ec:c8:
         5f:aa:0d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 11:22:19 2026 by rpki-client