Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/A88A0ED8FC7511EF92B63B46C4F9AE02.roa
File:                     A88A0ED8FC7511EF92B63B46C4F9AE02.roa (raw, json)
Hash identifier:          FMMBUQOPbaOr80bzTGx1IeCTdui9MHAWWwnmzwDVIUU=
Subject key identifier:   58:52:A3:1E:AE:E1:2D:1B:60:8D:4D:25:26:F5:D9:84:4B:77:80:41
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       053E
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/A88A0ED8FC7511EF92B63B46C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 20:06:26 +0000
ROA not before:           Thu 25 Sep 2025 02:21:25 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     42831
IP address blocks:        202.155.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Mar 2026 01:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1342 (0x53e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Sep 25 02:21:25 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a49c42-bbd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6f:ce:f8:a5:eb:7d:05:9d:a4:17:75:a0:86:
                    7d:d1:02:55:de:80:2f:c2:44:81:be:9d:da:84:5a:
                    f4:fd:29:3a:b5:6d:eb:be:a5:02:ac:ea:f8:9c:14:
                    bd:2a:e3:c4:1e:7f:6f:cb:eb:cf:8a:33:4a:6b:4b:
                    93:c9:23:2b:46:ab:c1:a3:7c:38:05:38:90:5f:88:
                    ca:99:94:39:47:01:e5:e5:e0:a0:87:ce:52:78:83:
                    22:5e:e0:d6:a2:a3:8b:25:19:86:76:65:0b:91:50:
                    36:e7:a9:50:68:ac:c2:de:9b:33:21:e6:42:3a:b7:
                    d2:e4:eb:6e:51:66:d6:55:cb:b5:c7:76:de:7d:d2:
                    08:c2:7a:3f:c7:03:c1:ad:99:35:bd:3f:39:f3:d0:
                    a8:ff:92:b3:95:93:42:93:94:26:a2:f9:f6:0f:3c:
                    9b:7b:9e:f1:6d:ad:e3:32:38:03:31:48:c5:5f:3b:
                    18:27:75:41:ee:e9:66:6b:91:d0:c6:39:d0:93:f9:
                    a4:c2:67:7d:28:e2:66:d0:82:b6:09:a6:c6:83:29:
                    3c:46:41:f6:47:1e:3a:bc:72:4c:cf:c8:70:c1:77:
                    e6:0a:c9:b6:c0:db:d3:8c:31:88:3b:1e:d7:18:41:
                    c0:3d:6d:55:66:0a:93:7b:53:94:c1:76:70:50:a5:
                    c3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:52:A3:1E:AE:E1:2D:1B:60:8D:4D:25:26:F5:D9:84:4B:77:80:41
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/A88A0ED8FC7511EF92B63B46C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:6d:90:21:9d:01:55:6f:f8:ad:3a:c1:db:a6:47:48:f7:52:
         83:8e:30:7f:25:9e:d3:80:8d:fd:ab:4d:9c:8b:dc:3b:a3:24:
         f1:6f:cd:3b:10:71:c4:8c:75:fe:32:cb:b2:82:4e:29:c9:fc:
         9a:6d:08:35:64:8d:11:13:e3:ce:8f:e0:1f:eb:36:6f:a8:34:
         8b:ca:72:a3:fc:19:65:72:8f:d1:55:12:6e:ac:36:59:eb:e2:
         c0:cc:30:8d:8c:df:f8:00:08:92:32:53:7d:e0:e6:42:14:12:
         f8:40:05:0a:bb:31:0a:a9:08:6e:8c:a3:16:ae:ad:e5:80:fd:
         74:f9:d0:f2:35:4e:5d:34:9d:6f:35:b1:51:e9:53:c1:a6:ff:
         ed:1d:53:75:0c:19:bc:50:ac:41:43:cb:75:fa:36:a6:cd:86:
         6d:65:58:6d:11:94:60:01:24:e5:2d:9f:b4:05:27:32:be:58:
         b0:6b:68:61:f2:89:36:61:a5:a9:d8:16:17:df:03:5b:96:2c:
         83:04:2b:82:75:e9:25:43:3c:4a:55:f8:72:e3:86:4f:a6:32:
         48:af:42:fa:9c:87:85:19:d8:6b:94:15:cc:91:12:b9:40:0f:
         e5:c7:c5:90:18:45:14:a2:74:e2:14:27:32:62:86:ad:4a:24:
         2e:c9:c7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 19:11:30 2026 by rpki-client