Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/413AD9F852E411EC9E19AA2FC4F9AE02.roa
File:                     413AD9F852E411EC9E19AA2FC4F9AE02.roa (raw, json)
Hash identifier:          3Nz0u0qKawbNn//HDkZr80q3+/OhbNMzbbOUzKEulCE=
Subject key identifier:   74:8A:1F:79:AA:5C:90:42:C7:AC:CC:79:6F:D7:DB:AD:70:A1:FC:43
Certificate issuer:       /CN=A916CCFF/serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED
Certificate serial:       052B
Authority key identifier: 08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/413AD9F852E411EC9E19AA2FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:07:57 +0000
ROA not before:           Sat 19 Jul 2025 00:37:23 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        202.92.192.0/24 maxlen: 24
                          202.92.193.0/24 maxlen: 24
                          202.92.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl
                          rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1323 (0x52b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CCFF, serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED
        Validity
            Not Before: Jul 19 00:37:23 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a4645d-6157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:90:79:db:57:83:db:05:87:8f:4a:91:cb:b1:
                    41:97:23:37:bd:46:e6:ab:4d:33:00:56:bc:65:66:
                    c5:3c:5f:ce:1a:31:64:fe:b4:3c:6a:66:54:51:0a:
                    47:f0:e4:60:b7:df:34:9d:f7:64:73:86:9d:84:58:
                    81:ce:73:dc:57:79:2c:95:51:28:4e:af:b6:c2:ad:
                    b0:f5:3c:43:fe:76:7e:4f:ff:41:18:f4:73:7c:ec:
                    ba:1e:bd:07:f2:2b:9b:97:83:2d:39:22:92:ce:0f:
                    29:33:8f:15:e2:6a:0c:44:30:27:b3:f6:bf:0b:57:
                    ae:c7:05:68:37:9e:9c:2e:b3:df:db:19:d6:0b:0d:
                    7c:88:e0:63:12:06:0c:ff:63:10:0a:7e:a6:9f:58:
                    fa:ae:03:85:98:15:5e:72:bf:2b:bd:81:8b:67:81:
                    1e:dc:0a:ee:90:d5:aa:bb:4e:8a:6c:8d:83:ce:76:
                    ee:2b:9a:ae:e3:78:60:a1:5a:78:05:74:6d:04:55:
                    eb:cf:3e:7d:88:f4:0e:9e:a9:9c:15:c2:b1:c3:47:
                    52:75:38:22:9f:06:0e:4d:0d:1b:5b:d7:1a:79:48:
                    d4:97:82:2f:ee:c1:c0:11:8f:ec:19:30:30:9b:6e:
                    e7:cf:71:f3:de:13:63:bd:0b:33:20:84:76:af:bc:
                    96:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8A:1F:79:AA:5C:90:42:C7:AC:CC:79:6F:D7:DB:AD:70:A1:FC:43
            X509v3 Authority Key Identifier:
                keyid:08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/413AD9F852E411EC9E19AA2FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.92.192.0/23
                  202.92.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:25:dc:e7:e0:28:49:05:27:34:9a:da:32:b9:21:e5:c4:a1:
         90:0f:99:9b:05:e3:71:92:ce:bb:4f:86:e0:c9:e2:ca:1f:08:
         8b:f8:c9:c0:76:86:c8:c5:99:b8:f1:e0:56:58:e5:f9:24:6b:
         ae:70:f5:96:56:ba:7e:fe:d9:a0:aa:5f:eb:a6:1b:2f:ff:92:
         cd:6d:a5:99:96:8c:f6:3a:d3:0e:0e:67:78:ed:9a:01:4f:5d:
         3b:6f:de:71:15:a2:6a:5e:cc:0d:08:b6:73:76:a2:eb:f5:7c:
         64:98:4a:01:f7:8b:63:aa:5c:92:28:5c:94:30:45:f1:a5:1c:
         11:fe:b4:27:57:78:7f:65:e0:d1:34:1e:bd:de:f6:a7:02:20:
         d4:87:80:3f:bd:76:ae:59:91:4c:b3:0f:48:c8:9e:40:97:ce:
         69:9b:03:69:12:00:27:04:a0:bb:e0:a7:91:62:60:63:3b:25:
         b9:e5:1a:3d:4e:8a:60:bf:57:5e:5c:66:67:d8:2c:58:a7:4b:
         bc:d5:60:0d:b5:05:fc:a9:19:f2:83:8d:c3:d2:8e:4d:85:eb:
         6b:dd:28:b5:70:eb:2a:85:3d:17:6a:9e:6f:56:2b:3f:85:5f:
         95:b7:ae:92:39:cb:26:0b:1d:9e:21:07:20:aa:5b:15:d7:b5:
         94:2a:c7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:59:02 2026 by rpki-client