Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/58B43D66F81E11F0B862CA6F746F56BC.roa
File:                     58B43D66F81E11F0B862CA6F746F56BC.roa (raw, json)
Hash identifier:          MLy/84BYMcgbX3j8om2zcfbSwbVq9W2tiq9WtSy7wF8=
Subject key identifier:   82:CD:A1:A9:43:88:22:FE:82:E0:BE:43:78:6F:B1:18:C2:13:85:DA
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       0655
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/58B43D66F81E11F0B862CA6F746F56BC.roa
Signing time:             Wed 09 Sep 2026 01:52:02 +0000
ROA not before:           Wed 09 Sep 2026 01:52:02 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     204910
IP address blocks:        202.155.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:57:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1621 (0x655)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Sep  9 01:52:02 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa0bbc2-8e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d4:4b:6c:8f:e9:fa:a7:5c:2a:bf:32:09:bb:
                    13:99:27:61:12:79:5f:bb:e5:42:89:38:ca:97:f5:
                    f2:e9:d3:f8:ac:c9:51:43:f6:23:fb:73:ce:11:cd:
                    e0:c6:75:5a:bc:43:1e:01:e8:26:ba:58:72:d9:9c:
                    f6:e8:eb:c8:7a:96:dc:30:ef:50:a0:6a:d4:2c:16:
                    83:b9:4c:66:e0:4a:fa:e5:c5:5e:b2:e8:fe:ef:be:
                    62:37:25:89:04:b4:97:6c:95:7e:77:d9:23:ed:c8:
                    4d:4a:da:0f:71:8a:49:bb:b9:cd:14:68:69:f4:86:
                    a2:00:5d:34:86:96:e9:80:42:a3:0a:40:94:54:d9:
                    b3:0e:f5:f0:e1:0c:70:85:4e:21:8a:c4:54:ec:d4:
                    61:11:b7:3e:54:be:5a:27:41:34:5c:84:02:84:41:
                    c1:a2:59:ee:e5:51:57:4f:6c:08:7b:00:0a:9f:d9:
                    04:c8:31:22:40:1b:2b:0b:7d:c2:44:da:38:ab:de:
                    69:93:2b:39:a3:d0:fd:18:c2:4d:a5:2d:e8:f1:a1:
                    0a:4b:42:b9:96:c6:e6:52:c6:39:0c:7f:b9:a0:c0:
                    34:c7:cc:c8:df:4a:b7:c3:df:7f:2c:97:ec:b0:e9:
                    d5:4a:ea:d9:e1:37:7e:6a:44:ee:07:cc:9f:ec:b6:
                    7e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CD:A1:A9:43:88:22:FE:82:E0:BE:43:78:6F:B1:18:C2:13:85:DA
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/58B43D66F81E11F0B862CA6F746F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:dd:fa:5e:16:3e:fa:5b:7d:ac:f5:9a:87:47:c3:0b:08:3c:
         66:ce:ff:80:0c:22:c4:2e:43:6f:dd:d2:a2:1d:49:28:66:21:
         15:a1:0b:48:b7:6e:e4:b8:ff:b2:8d:99:2b:52:83:a3:6e:69:
         b6:02:29:c4:85:cf:09:68:d9:ee:3d:71:1e:a1:a9:e5:01:f3:
         3e:e8:a4:46:8f:ae:d0:73:f7:e0:40:93:2e:d9:ef:0a:d1:a0:
         70:16:20:f0:d0:ab:18:53:b2:28:43:7f:e6:69:21:91:8e:1b:
         5b:99:dd:b4:fa:17:a9:df:f5:26:16:8b:16:01:a5:af:48:c1:
         3f:83:1c:fc:04:50:93:57:9a:0a:b4:03:11:02:c5:7b:fd:8b:
         20:16:53:65:54:12:d8:ba:73:e7:ef:64:05:36:87:96:ce:5e:
         d9:f1:bf:53:05:68:12:dc:d2:e5:e6:c1:c0:89:5c:ae:c7:bd:
         e6:f1:eb:d5:2e:d9:ee:85:6c:f5:6e:27:8c:21:41:58:8c:c9:
         38:5f:9d:b5:c4:ed:bf:7a:e3:13:db:9a:8a:b2:fd:b6:c4:ed:
         2e:d8:79:bc:b8:32:67:a0:3f:91:6e:89:e6:ef:3f:6b:d8:24:
         fe:40:07:59:77:08:5c:f6:2b:3f:74:3b:b5:e7:45:d1:c9:7a:
         bc:8c:59:38
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICBlUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD
MDMyOUQxMzgwHhcNMjYwOTA5MDE1MjAyWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWEwYmJjMi04ZTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAj9RLbI/p+qdcKr8yCbsTmSdhEnlfu+VCiTjKl/Xy6dP4rMlRQ/Yj+3POEc3g
xnVavEMeAegmulhy2Zz26OvIepbcMO9QoGrULBaDuUxm4Er65cVesuj+775iNyWJ
BLSXbJV+d9kj7chNStoPcYpJu7nNFGhp9IaiAF00hpbpgEKjCkCUVNmzDvXw4Qxw
hU4hisRU7NRhEbc+VL5aJ0E0XIQChEHBolnu5VFXT2wIewAKn9kEyDEiQBsrC33C
RNo4q95pkys5o9D9GMJNpS3o8aEKS0K5lsbmUsY5DH+5oMA0x8zI30q3w99/LJfs
sOnVSurZ4Td+akTuB8yf7LZ+NQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFILNoalD
iCL+guC+Q3hvsRjCE4XaMB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE
RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvNThCNDNENjZG
ODFFMTFGMEI4NjJDQTZGNzQ2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCypuYMA0GCSqGSIb3DQEBCwUAA4IBAQAZ3fpeFj76W32s9ZqHR8ML
CDxmzv+ADCLELkNv3dKiHUkoZiEVoQtIt27kuP+yjZkrUoOjbmm2AinEhc8JaNnu
PXEeoanlAfM+6KRGj67Qc/fgQJMu2e8K0aBwFiDw0KsYU7IoQ3/maSGRjhtbmd20
+hep3/UmFosWAaWvSME/gxz8BFCTV5oKtAMRAsV7/YsgFlNlVBLYunPn72QFNoeW
zl7Z8b9TBWgS3NLl5sHAiVyux73m8evVLtnuhWz1bieMIUFYjMk4X521xO2/euMT
25qKsv22xO0u2Hm8uDJnoD+Rbonm7z9r2CT+QAdZdwhc9is/dDu150XRyXq8jFk4
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:30:16 2026 by rpki-client