Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/187B9E4EBEEC11F0A5A7CF26C4F9AE02.roa
File:                     187B9E4EBEEC11F0A5A7CF26C4F9AE02.roa (raw, json)
Hash identifier:          xGVisvhTmf/ESw2gwl6e15uQFQk0EWIiXpFi3z1nqe4=
Subject key identifier:   52:6B:03:8D:A8:6F:AC:21:25:F9:10:FD:F5:AF:44:CB:30:16:2B:CB
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       0547
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/187B9E4EBEEC11F0A5A7CF26C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 20:06:33 +0000
ROA not before:           Tue 11 Nov 2025 10:49:28 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     22427
IP address blocks:        202.155.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1351 (0x547)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Nov 11 10:49:28 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a49c49-a880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f0:4b:88:90:cd:f2:d6:1b:32:b5:a9:f9:d0:
                    9f:12:2b:80:28:af:68:55:0a:e5:6f:e3:22:ab:a3:
                    9e:6f:e6:a2:9c:a7:39:80:13:e3:cf:95:d4:44:38:
                    44:da:e7:44:e5:ee:87:f7:29:b1:98:79:c2:c1:97:
                    4d:05:c1:5d:88:80:09:9b:6e:da:0e:ce:8e:52:09:
                    a6:cc:46:fb:bd:eb:e0:b6:ec:01:dd:41:e4:90:ae:
                    20:4b:ec:6d:f9:f6:cd:c1:b3:61:b8:3b:16:d1:96:
                    c4:c6:ca:e3:50:df:7f:5c:b6:6e:9a:36:71:9d:b2:
                    95:dd:4e:e6:48:2b:81:75:fa:48:2b:16:f3:80:8b:
                    0f:00:16:f2:b3:97:29:88:b3:0c:0a:7e:f1:be:ac:
                    89:f7:f0:ee:d7:78:3a:51:02:9f:64:74:07:28:c0:
                    23:57:5f:1d:f3:e9:11:eb:84:33:ee:5c:d0:64:71:
                    bf:fc:6f:6a:a2:db:5f:da:7f:d8:1b:92:c8:29:a8:
                    f1:2f:b2:46:c0:68:6e:c9:da:8c:08:ce:ed:6b:ac:
                    c4:1c:1e:6d:80:e1:9a:fd:d0:2f:0a:ac:ca:d4:a9:
                    3f:50:6f:2c:9b:1e:7f:65:00:5d:a5:24:42:b6:f9:
                    47:1e:15:a3:1a:a7:eb:19:6e:64:37:5d:ed:8d:52:
                    a3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6B:03:8D:A8:6F:AC:21:25:F9:10:FD:F5:AF:44:CB:30:16:2B:CB
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/187B9E4EBEEC11F0A5A7CF26C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:44:19:4a:bf:16:32:19:39:3d:ba:21:a2:96:c2:41:1e:a0:
         79:1e:54:be:f5:a1:ec:f6:64:9a:2c:92:a4:b7:81:34:34:2d:
         29:50:8a:4f:64:49:ee:b3:5b:98:85:8d:3f:4f:88:80:cd:2d:
         a9:07:08:76:68:1e:bf:f7:8f:3c:dc:18:7e:5f:9f:ea:ec:50:
         a5:f1:3b:f1:46:de:cc:4a:3c:af:fe:08:f2:0f:73:c7:f9:b6:
         26:7f:63:ad:5b:d1:33:34:f0:56:28:04:d8:32:eb:da:db:74:
         8b:07:05:6d:95:13:71:d7:96:51:bc:aa:24:a2:77:87:a7:ae:
         59:10:31:aa:2a:d0:7e:5b:37:4b:34:c0:df:3b:f2:55:1d:ee:
         22:3d:55:b7:be:c9:6c:37:7f:f1:41:3b:88:b9:33:78:64:7d:
         49:fb:2c:25:de:52:9d:77:51:e1:3e:20:5d:15:53:7e:a0:84:
         e0:61:44:76:5b:ae:89:17:14:67:b6:10:bd:69:b1:4f:3d:9a:
         39:88:ce:eb:18:fc:ad:7d:bb:7f:15:47:a1:31:88:46:f8:e6:
         05:16:d1:bb:f5:c9:bf:d9:15:0c:3b:e5:62:82:c4:69:66:ce:
         96:b4:35:58:08:5c:f6:33:c5:bf:17:91:2b:86:59:32:a7:4a:
         86:81:53:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:23 2026 by rpki-client