Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/0A8D0EC2A8F711F096E2671BC4F9AE02.roa
File:                     0A8D0EC2A8F711F096E2671BC4F9AE02.roa (raw, json)
Hash identifier:          txgQQnCqabWBdCLCRX89idn82Uc0Vp2JjKumL1+0TAg=
Subject key identifier:   67:9A:A1:1C:E3:9F:40:F5:CB:9D:0D:DE:22:35:A6:8C:5D:93:1A:24
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       0542
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/0A8D0EC2A8F711F096E2671BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 20:06:29 +0000
ROA not before:           Tue 14 Oct 2025 12:12:24 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     204921
IP address blocks:        202.155.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1346 (0x542)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Oct 14 12:12:24 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a49c45-e15e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e1:53:4c:8a:c6:71:8e:ff:17:8e:cd:e8:7d:
                    01:ad:75:a2:1c:ca:98:fc:52:4e:fe:3d:76:31:b6:
                    5d:b4:0e:0c:7c:2d:69:72:1f:29:7a:1f:a8:bd:68:
                    82:5a:a5:67:1d:ad:e4:12:ac:16:19:aa:16:47:a4:
                    89:ab:1b:71:38:fb:36:a0:83:6c:ed:28:d8:7a:8a:
                    56:76:fd:43:78:5c:0a:da:cf:53:4b:c7:f9:91:c8:
                    68:e1:1f:c1:10:b3:30:b6:3e:17:f0:a7:e8:00:b9:
                    66:27:ca:06:16:0f:c6:e9:8f:04:49:ac:7f:f2:cd:
                    ac:e8:25:1b:86:fc:fc:c2:63:c9:bc:de:38:cf:e0:
                    a6:33:d1:aa:97:1d:15:66:fd:4e:6e:56:c5:3c:fb:
                    1d:43:4b:90:6e:16:9c:9a:be:b3:6b:0d:07:fe:fa:
                    ab:a7:94:80:38:8d:4b:23:c2:6a:15:5f:8a:7a:90:
                    ca:3e:30:a9:06:95:7e:a1:33:8f:5a:33:87:66:eb:
                    de:3a:b4:a5:14:2e:e8:3d:e2:07:dc:ec:98:85:fb:
                    97:8d:fa:fc:7c:f5:79:b5:7a:6c:c9:94:6a:0c:ca:
                    86:29:48:f5:f0:b9:0e:ed:bc:e4:40:c3:53:72:eb:
                    db:1e:c8:b1:27:30:31:77:74:e8:ad:e0:60:c9:50:
                    78:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9A:A1:1C:E3:9F:40:F5:CB:9D:0D:DE:22:35:A6:8C:5D:93:1A:24
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/0A8D0EC2A8F711F096E2671BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:e4:80:5c:6f:40:9f:16:37:b5:4d:6a:30:b6:1d:65:21:4c:
         5f:0c:df:f5:74:da:18:8d:d0:16:42:c8:50:4c:59:ff:ed:de:
         3e:de:73:8d:8e:f6:1d:aa:4a:3b:b5:42:73:6b:97:42:7f:db:
         cd:72:0b:e4:fc:bc:04:aa:1a:83:a4:66:01:f2:0f:59:4e:27:
         b0:7c:7a:14:8f:80:04:7f:9b:bf:15:e1:d9:fd:69:0b:39:f4:
         33:10:d2:37:12:df:58:cf:07:53:5a:d4:a5:d6:92:eb:11:36:
         38:65:f2:27:4b:40:67:99:ae:c6:17:89:bb:e7:e1:9a:41:b1:
         db:21:02:ca:40:5e:e0:38:6f:23:3e:67:15:25:4c:64:c9:48:
         7b:6c:35:05:df:47:d3:30:3c:9c:8a:cc:23:f6:77:d0:be:14:
         2d:a6:a7:9d:cc:ad:3c:ef:b5:da:8b:f2:7a:35:59:f6:b9:60:
         0e:69:77:8d:3d:a2:85:0d:b4:f7:50:26:90:b3:3c:c1:00:6e:
         d5:6c:0e:d6:bc:74:1f:5e:c3:c9:09:6b:c4:e1:fb:10:7c:5f:
         d5:8d:5a:bd:4a:3e:27:3b:9d:c0:a4:09:be:b4:bf:52:c0:44:
         eb:8f:08:d6:90:07:5b:f0:43:41:2a:8a:9b:20:31:81:28:41:
         37:5a:dc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:50 2026 by rpki-client