Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BD5D1956031B11F192FC7DBE1A3D8C67.roa
File:                     BD5D1956031B11F192FC7DBE1A3D8C67.roa (raw, json)
Hash identifier:          5UOYihu+c2SG12O5Sjtm3ZtU94Pthftu92wea5AD44w=
Subject key identifier:   FD:D7:8F:9D:00:23:A0:5E:A9:51:80:0F:4E:D7:DE:E3:0C:2C:E8:BE
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       065D
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BD5D1956031B11F192FC7DBE1A3D8C67.roa
Signing time:             Wed 09 Sep 2026 01:52:19 +0000
ROA not before:           Wed 09 Sep 2026 01:52:19 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     215304
IP address blocks:        202.155.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 01:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1629 (0x65d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Sep  9 01:52:19 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa0bbd3-f7b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1e:45:30:d3:b4:82:4c:27:f1:e0:78:e2:bc:
                    7a:31:9d:1b:d2:4e:4a:a2:4b:a1:18:1d:f2:96:6c:
                    12:85:a4:6c:61:8b:e2:94:7e:db:12:eb:6b:86:46:
                    2a:cc:d5:35:96:97:ad:b5:65:8a:c0:2b:7c:20:ab:
                    9f:e3:64:10:31:76:3d:a7:ab:b0:de:fe:44:7b:cc:
                    09:d1:ec:f9:42:db:61:4c:41:1b:0b:b8:bf:84:0d:
                    3a:6e:57:fd:23:57:bc:f0:5d:61:bf:57:8b:7e:4d:
                    ed:69:a6:b0:4c:c7:6f:3a:c2:c7:0f:24:e1:e2:f2:
                    8d:ad:47:f9:68:ef:c0:06:fb:99:2f:d2:b7:f3:93:
                    1d:54:03:0a:55:7e:7b:d8:85:c6:8c:c1:da:19:5b:
                    b5:a5:e5:e4:89:8f:89:29:f2:38:02:2c:21:87:78:
                    53:33:08:86:3d:ff:99:31:bb:74:8b:2a:1c:87:5c:
                    42:1e:f9:d6:d7:14:30:78:ed:c8:cc:a9:9d:a6:41:
                    e0:d2:da:39:f7:0b:85:24:f4:71:b3:f1:7c:80:95:
                    dd:9d:59:70:b8:8f:ac:cf:cf:2c:87:c9:a2:be:37:
                    82:98:95:f2:fa:a9:65:17:b3:07:01:e6:e9:d7:3b:
                    28:a3:b1:ad:48:64:d3:90:92:27:5f:e0:63:bc:ba:
                    b1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D7:8F:9D:00:23:A0:5E:A9:51:80:0F:4E:D7:DE:E3:0C:2C:E8:BE
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BD5D1956031B11F192FC7DBE1A3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:7d:6e:6f:e1:e9:61:d3:75:ac:e5:f6:5b:57:7e:24:c6:9f:
         b8:f5:e7:4d:0c:d5:5b:de:3d:69:df:48:9c:af:7d:9a:89:8a:
         08:e4:03:99:a5:68:3f:7a:c3:81:f8:c7:2c:71:62:5c:b2:f8:
         b1:5a:b2:b6:98:d0:ba:bd:6d:cd:af:d7:de:7f:d8:c2:2b:8f:
         91:23:3b:3e:cf:d1:e5:25:93:ee:32:52:91:c0:ed:19:cf:35:
         da:7f:f2:b3:64:2a:9d:35:b0:2e:83:48:6d:14:40:f2:d7:29:
         f9:d4:b9:be:da:34:c6:80:23:01:32:e1:d2:7d:dc:64:46:37:
         68:08:76:b9:92:77:d8:aa:37:63:50:24:3f:b4:58:33:1a:45:
         aa:f2:b4:5a:dd:d9:d2:b4:c0:dd:0b:ad:37:d1:fc:a2:c4:d6:
         71:c5:29:75:0f:13:c9:c7:e7:f8:5e:d6:52:7f:95:20:55:ef:
         af:dc:da:52:3e:76:a3:6c:9d:b8:5e:6d:4b:a4:b4:b9:81:52:
         cc:05:ed:a1:6e:d5:0a:17:27:f8:18:07:fd:53:b5:d6:88:e5:
         69:ce:4c:ec:01:7a:8f:e4:15:2d:61:8d:f2:86:ab:cb:80:46:
         6c:cc:9c:9e:62:fb:f9:e8:63:16:17:64:b4:63:30:fe:c2:d5:
         06:b0:8d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:22:34 2026 by rpki-client