Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/3333585431A511F1B43C5E16B4833773.roa
File:                     3333585431A511F1B43C5E16B4833773.roa (raw, json)
Hash identifier:          JtwjTkZP/aXpFJeMY3ERR8ZUwM0WE7DfleEz+Qvr6s8=
Subject key identifier:   E4:B7:8D:9D:F5:4D:B9:DF:17:95:1A:91:6F:B6:95:6B:85:A3:73:D7
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       0592
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/3333585431A511F1B43C5E16B4833773.roa
Signing time:             Mon 06 Apr 2026 10:41:42 +0000
ROA not before:           Mon 06 Apr 2026 10:41:42 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     401776
IP address blocks:        202.155.144.0/24 maxlen: 24
                          202.155.145.0/24 maxlen: 24
                          202.155.146.0/24 maxlen: 24
                          202.155.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:22:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1426 (0x592)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Apr  6 10:41:42 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69d38de6-1389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:96:17:85:b5:0f:c7:11:6f:c6:ac:0d:72:f2:
                    11:b5:13:47:2d:72:3e:67:68:ba:20:77:b9:46:f1:
                    6f:d0:8b:90:e2:19:64:45:23:16:0b:f8:96:32:15:
                    31:e7:02:4b:5e:f7:a5:ef:9a:21:58:35:f2:b4:44:
                    f3:2f:4a:64:b0:04:06:4f:4f:0a:ca:e1:8c:d2:1b:
                    c5:98:28:88:8a:28:21:52:7e:26:75:4c:cc:3b:cc:
                    44:bd:2d:a8:ec:2b:58:27:88:29:15:31:b4:b3:23:
                    b4:61:92:cc:0c:2b:0e:6b:01:f7:c3:9f:9d:21:a1:
                    67:62:39:cb:44:ca:e3:f0:2a:dd:a7:a2:29:80:f0:
                    97:09:1d:ae:72:d3:ba:5e:b0:c5:3c:d8:49:2d:e4:
                    88:88:42:7e:97:8d:40:9a:56:50:d0:96:b2:45:b4:
                    ba:21:3f:fc:c6:97:7c:96:5f:79:e3:05:85:5e:aa:
                    d8:1f:ea:7b:a0:57:fc:f9:40:ce:dd:18:73:0d:7e:
                    3f:2f:1c:71:e1:47:c4:54:75:54:44:4e:b2:47:c2:
                    24:5e:2c:71:4a:5b:6c:b5:0b:50:0a:0a:fd:34:60:
                    3d:9a:b1:ac:7f:f5:75:f7:ac:5b:7e:6a:40:4f:f9:
                    89:3f:d5:d0:ab:b1:ab:12:cc:72:36:7f:db:bb:2d:
                    7b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B7:8D:9D:F5:4D:B9:DF:17:95:1A:91:6F:B6:95:6B:85:A3:73:D7
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/3333585431A511F1B43C5E16B4833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:18:91:21:02:99:32:e6:2d:f5:fa:ca:38:6a:a5:22:b5:5c:
         ed:55:c0:0b:23:fe:a7:af:73:db:02:c0:99:9b:a6:c9:fa:91:
         c0:e1:5b:5c:8c:96:da:db:64:47:f7:45:2e:bd:92:22:7a:66:
         0e:b9:e1:a0:55:a0:9a:90:43:ab:9b:08:8f:ff:fa:8c:80:64:
         ef:97:6e:bc:bd:ca:22:fe:49:b4:65:22:48:30:de:07:de:bf:
         43:1d:1f:8c:5b:2d:de:24:db:3d:8b:84:41:58:20:5e:30:ce:
         09:48:3b:6c:cb:0b:e5:64:ce:3c:f6:01:eb:e4:1f:f9:a2:07:
         aa:a0:ee:7b:31:7e:1a:aa:72:83:27:c7:d7:05:d7:72:3a:a1:
         f0:b6:17:4f:ee:d4:2c:04:b7:6f:3f:d3:d7:cd:70:63:8e:38:
         f5:41:7e:a4:6c:f7:b2:05:ef:4b:a8:ce:32:9c:dd:34:1d:06:
         8a:16:d2:e1:fa:61:1a:1d:70:9b:42:97:df:79:26:3c:0c:39:
         1e:37:d5:a6:54:cd:a7:bc:82:c4:5f:a7:88:4e:6e:ff:1b:75:
         1c:de:d2:42:ed:13:3e:c1:84:12:15:e9:a2:bf:5c:35:1b:ec:
         e3:65:45:c0:05:e6:05:73:da:61:c8:3b:83:39:10:4c:1a:d2:
         08:c6:6a:42
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD
MDMyOUQxMzgwHhcNMjYwNDA2MTA0MTQyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWQzOGRlNi0xMzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwZYXhbUPxxFvxqwNcvIRtRNHLXI+Z2i6IHe5RvFv0IuQ4hlkRSMWC/iWMhUx
5wJLXvel75ohWDXytETzL0pksAQGT08KyuGM0hvFmCiIiighUn4mdUzMO8xEvS2o
7CtYJ4gpFTG0syO0YZLMDCsOawH3w5+dIaFnYjnLRMrj8Crdp6IpgPCXCR2uctO6
XrDFPNhJLeSIiEJ+l41AmlZQ0JayRbS6IT/8xpd8ll954wWFXqrYH+p7oFf8+UDO
3RhzDX4/Lxxx4UfEVHVURE6yR8IkXixxSltstQtQCgr9NGA9mrGsf/V196xbfmpA
T/mJP9XQq7GrEsxyNn/buy17dQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOS3jZ31
TbnfF5UakW+2lWuFo3PXMB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE
RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvMzMzMzU4NTQz
MUE1MTFGMUI0M0M1RTE2QjQ4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCypuQMA0GCSqGSIb3DQEBCwUAA4IBAQAEGJEhApky5i31+so4aqUi
tVztVcALI/6nr3PbAsCZm6bJ+pHA4VtcjJba22RH90UuvZIiemYOueGgVaCakEOr
mwiP//qMgGTvl268vcoi/km0ZSJIMN4H3r9DHR+MWy3eJNs9i4RBWCBeMM4JSDts
ywvlZM489gHr5B/5ogeqoO57MX4aqnKDJ8fXBddyOqHwthdP7tQsBLdvP9PXzXBj
jjj1QX6kbPeyBe9LqM4ynN00HQaKFtLh+mEaHXCbQpffeSY8DDkeN9WmVM2nvILE
X6eITm7/G3Uc3tJC7RM+wYQSFemiv1w1G+zjZUXABeYFc9phyDuDORBMGtIIxmpC
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:36:50 2026 by rpki-client