Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C68EA896D18011EFA738B84AC4F9AE02.roa
File:                     C68EA896D18011EFA738B84AC4F9AE02.roa (raw, json)
Hash identifier:          Ei4OQatIUZk/6HLsZAw7psHDglNB9wf4zzt2OcQnNKY=
Subject key identifier:   6C:6D:BA:6B:39:EB:5E:44:10:19:B1:4E:E6:9A:4D:BE:B2:A6:D4:0C
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       02E3
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C68EA896D18011EFA738B84AC4F9AE02.roa
Signing time:             Thu 27 Mar 2025 12:56:44 +0000
ROA not before:           Thu 27 Mar 2025 12:56:44 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     23679
IP address blocks:        202.155.138.0/24 maxlen: 24
                          202.155.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 02:37:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 739 (0x2e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18
        Validity
            Not Before: Mar 27 12:56:44 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=67e54b0c-6ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:2a:c4:09:60:22:88:df:96:4d:fe:37:20:87:
                    0e:86:8b:dc:80:05:f8:8b:99:84:dd:d4:c4:ef:6b:
                    d8:87:c2:ac:71:ea:3a:8b:20:57:0a:00:1a:df:da:
                    0d:44:56:c7:16:18:e2:6f:b7:6f:76:88:3f:89:e9:
                    1f:ad:2f:45:16:4e:96:af:e1:31:2a:82:d1:28:08:
                    d1:19:41:61:76:c4:c8:b2:4c:5e:6b:18:0c:c2:40:
                    1a:35:0d:5b:67:0d:f4:ce:6a:b9:73:fe:f2:88:e1:
                    b9:89:79:c1:50:1d:84:3f:22:e8:dd:5b:d1:c8:0d:
                    a9:94:af:8b:81:92:c3:95:65:d7:ad:c3:56:b4:88:
                    30:f1:f8:07:05:a2:ed:6a:00:b3:6b:93:b5:e4:92:
                    6c:e4:f8:f6:15:bb:1e:a0:63:84:82:53:2f:e1:de:
                    d7:5f:1c:03:e2:c5:e0:ff:57:12:d4:06:84:61:fe:
                    28:e9:67:52:17:10:3d:9c:88:20:6d:0b:97:2e:be:
                    1e:2b:90:f9:8d:e2:b3:c6:bc:08:fd:ae:31:fb:64:
                    70:d8:aa:24:28:e4:16:09:e3:04:b7:06:2e:53:59:
                    c8:f2:c6:a8:b3:11:0b:c7:aa:90:47:85:08:c8:f7:
                    98:25:4e:f9:9b:7e:5f:e2:09:5d:e6:82:c8:8e:fb:
                    75:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6D:BA:6B:39:EB:5E:44:10:19:B1:4E:E6:9A:4D:BE:B2:A6:D4:0C
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C68EA896D18011EFA738B84AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:68:82:e1:41:dc:c9:07:2c:aa:24:bc:47:93:be:78:0d:86:
         98:64:fe:10:48:7e:04:62:86:92:38:f9:ff:25:ad:83:4e:6e:
         8a:44:29:65:39:ef:85:53:10:85:6c:8d:d2:50:28:3c:8a:34:
         99:a4:e3:3a:20:10:eb:e5:4c:dd:71:1e:d9:4c:6c:59:9f:3b:
         b5:b6:81:20:af:73:1d:d5:92:c1:e9:a6:b6:93:08:a5:e2:5f:
         8f:c7:38:ee:55:69:35:5f:73:0b:cf:8f:ee:26:9e:b0:fe:8b:
         3b:47:f5:fd:2d:c6:40:bc:43:58:86:6b:fa:8b:39:8c:e7:c7:
         4a:a0:3d:73:61:7a:f0:e1:10:30:97:ac:69:3c:2c:50:fe:f4:
         e4:af:09:2d:7f:26:c1:2b:37:16:5b:6d:f5:a3:7b:f2:6c:76:
         cb:3e:16:78:49:b0:5b:7c:fe:e5:a6:d0:d9:7c:46:b6:6d:98:
         ef:5b:89:48:3d:45:83:e8:26:70:52:79:16:a3:11:93:40:c9:
         af:f2:33:e9:0e:23:38:3b:38:f4:60:04:8b:8a:75:ed:88:42:
         cb:32:10:7b:1d:fa:e6:82:4d:17:a7:b5:12:29:7f:94:0b:1b:
         06:ca:44:41:e2:a3:0e:6f:c5:06:82:be:08:54:ff:02:56:18:
         66:1a:b0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:07:22 2025 by rpki-client