Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/A98668464EEB11EFB3305C85C4F9AE02.roa
File:                     A98668464EEB11EFB3305C85C4F9AE02.roa (raw, json)
Hash identifier:          r5iGlhKJV+5WfOjDf1V/6PfikUM+cRAn9sbM8Z3LXAE=
Subject key identifier:   BB:73:89:8D:C5:49:6D:73:49:1E:FC:D2:DF:3D:23:AF:E5:15:81:22
Certificate issuer:       /CN=A9110718/serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
Certificate serial:       0867
Authority key identifier: 76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/A98668464EEB11EFB3305C85C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:02:52 +0000
ROA not before:           Wed 16 Apr 2025 21:31:43 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     132793
IP address blocks:        202.92.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl
                          rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:51:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2151 (0x867)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110718, serialNumber=76174625E81632D38DF62A83B57B03BA2887E6F5
        Validity
            Not Before: Apr 16 21:31:43 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a47f4c-e747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e9:16:fe:e9:26:88:4c:d5:4c:4b:f3:0a:72:
                    c2:39:32:43:30:a1:ca:81:b1:59:d0:5f:2b:00:d3:
                    e9:d8:bf:25:75:d5:d9:fb:ef:ea:b3:43:dc:44:78:
                    79:2a:9e:b9:97:aa:9d:12:96:ed:86:e6:19:e0:58:
                    b7:47:9a:44:50:b8:c8:e6:05:20:2a:78:98:72:af:
                    15:ec:75:21:4f:81:d5:d3:dd:e4:b2:de:01:96:66:
                    12:d3:f1:68:30:93:44:f9:eb:0a:d8:55:23:68:33:
                    5d:a3:cc:97:87:e1:76:e0:af:47:a5:ca:5c:8a:21:
                    fe:21:93:3d:46:00:fd:d7:05:90:8c:be:03:fa:10:
                    a2:89:f1:f3:c5:dd:ca:1a:3d:81:14:b0:7d:ad:40:
                    71:1a:a7:07:e5:b6:99:22:b6:60:f4:3f:73:32:96:
                    da:07:7a:2a:7f:0e:97:41:6d:5d:e3:ba:da:15:fa:
                    d5:6c:29:3e:18:a8:06:c8:6e:07:7b:60:68:ad:90:
                    b1:27:10:fb:4e:d2:8e:48:e2:d8:ce:6e:87:74:93:
                    84:ed:11:dd:69:55:b6:a0:c3:0b:98:34:85:a6:43:
                    b2:0a:e1:bc:b4:7c:a5:ed:5f:5a:a0:d1:cb:69:ed:
                    1f:30:b1:9f:4f:c2:28:fe:ef:2d:b4:f7:d7:de:a3:
                    fd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:73:89:8D:C5:49:6D:73:49:1E:FC:D2:DF:3D:23:AF:E5:15:81:22
            X509v3 Authority Key Identifier:
                keyid:76:17:46:25:E8:16:32:D3:8D:F6:2A:83:B5:7B:03:BA:28:87:E6:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/dhdGJegWMtON9iqDtXsDuiiH5vU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dhdGJegWMtON9iqDtXsDuiiH5vU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110718/9283EDEE0E9411EB9669E133C4F9AE02/A98668464EEB11EFB3305C85C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.92.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:37:d0:e0:39:c9:83:46:47:51:41:24:05:4a:3b:79:ec:0a:
         0f:7e:d0:61:a6:40:99:07:32:3c:0f:1d:a9:3e:16:d9:9f:10:
         e5:2f:dd:a1:f8:99:db:0e:75:20:c4:70:02:41:6c:f2:8c:ac:
         08:90:ea:82:ed:95:1e:e2:72:c5:dc:25:c4:b8:57:03:28:aa:
         b9:a1:08:dc:cd:01:7b:56:7a:5e:e9:3a:49:d4:82:2c:11:aa:
         43:d2:b0:0d:3e:ca:59:2a:f8:42:72:7d:e0:17:ae:82:6e:e4:
         18:b5:62:16:58:aa:bc:3b:21:bc:31:67:7c:d9:95:7d:42:bd:
         87:4f:93:8d:02:eb:88:69:0d:60:6f:cd:55:a8:68:32:44:e8:
         82:74:5e:2b:90:63:46:ef:5a:a1:a4:c2:e0:0d:41:fc:6f:6b:
         95:a9:b9:3f:f6:8b:40:d8:be:f8:e6:04:44:0d:1a:c1:7e:01:
         69:fc:52:1e:91:ef:d9:83:45:da:c9:6b:b6:04:f6:5a:18:bd:
         d7:16:33:0d:18:2a:d7:e0:42:15:53:62:73:15:b8:cf:8c:f1:
         93:26:78:85:26:24:3b:dd:2d:11:3c:84:97:ab:b0:93:29:5b:
         74:bb:7a:11:db:05:80:c0:4d:43:bf:11:06:70:10:d5:09:d4:
         6e:41:a8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:30 2026 by rpki-client