Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/781AAD02C65F11F0AF552452C4F9AE02.roa
File:                     781AAD02C65F11F0AF552452C4F9AE02.roa (raw, json)
Hash identifier:          dR62sUXCTNQGIjNIpwOTfHGXKHgKvKuFDTMg3f0a4KU=
Subject key identifier:   3D:51:20:CC:9E:C4:49:F4:13:F8:89:16:90:AB:DA:F0:52:11:2A:88
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       066F
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/781AAD02C65F11F0AF552452C4F9AE02.roa
Signing time:             Wed 09 Sep 2026 01:52:54 +0000
ROA not before:           Wed 09 Sep 2026 01:52:54 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     58369
IP address blocks:        218.33.80.0/22 maxlen: 24
                          218.33.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1647 (0x66f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Sep  9 01:52:54 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa0bbf6-67ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9d:42:35:c5:99:c4:ec:ce:f3:3f:eb:6c:60:
                    9e:fe:c5:0a:0b:88:64:92:3a:82:22:48:0b:85:a7:
                    12:86:34:15:83:7a:94:3b:46:81:1c:1e:8b:5c:af:
                    4f:7d:bf:47:e4:23:5d:0a:20:db:25:cf:ea:42:9a:
                    6a:38:af:f4:f6:ec:03:69:33:08:1e:cc:a7:64:b0:
                    91:56:43:f7:a2:97:cf:6c:e7:fd:6b:3b:01:a8:77:
                    23:6e:03:a9:6b:29:19:6b:53:19:71:d4:66:61:3e:
                    84:68:35:cd:ae:dc:3c:27:c7:7a:68:1d:d1:6d:82:
                    4f:a2:5a:21:4a:99:8a:bf:45:35:23:b9:24:7d:b0:
                    53:16:68:ac:45:cb:c6:4b:ec:ee:24:ad:88:38:ce:
                    e1:f5:d9:58:8e:a2:57:e0:22:23:80:e3:9e:8c:71:
                    ec:c8:c6:8b:db:24:6c:0b:84:32:e0:f1:1d:ed:a6:
                    74:2f:db:f4:d4:02:2f:24:91:9e:e5:da:3b:f8:97:
                    f6:52:45:a3:bb:29:44:cd:1c:3b:e4:34:37:fd:c0:
                    d2:1c:99:08:d6:81:cb:7d:60:89:23:c2:f1:6e:aa:
                    16:52:f2:ab:e0:13:9e:a0:f8:c5:d0:c5:1e:8d:14:
                    97:a7:74:4b:64:f7:bc:1f:b4:d7:fc:65:59:18:af:
                    eb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:51:20:CC:9E:C4:49:F4:13:F8:89:16:90:AB:DA:F0:52:11:2A:88
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/781AAD02C65F11F0AF552452C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.33.80.0/22
                  218.33.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5e:9c:9b:53:49:ce:3f:af:fd:69:de:f0:24:86:c3:b5:ee:3f:
         dc:c4:bf:36:5f:d0:60:e4:fd:0a:52:2f:d3:32:df:b1:c7:81:
         01:63:da:84:7b:8d:7d:0c:9e:a5:af:c5:e7:01:aa:0c:a4:05:
         45:fc:ce:60:b8:76:8b:55:bf:4d:6a:dd:22:00:9a:6a:b3:91:
         ae:6f:1b:e6:56:29:08:20:5c:84:8b:4e:be:72:13:e5:9b:0a:
         07:c7:23:0d:b3:78:63:29:a7:e8:ca:14:58:2b:41:f6:e1:4e:
         a0:f3:42:64:72:fa:14:10:ea:80:a6:ff:56:3b:d3:86:75:45:
         0a:84:76:53:63:86:8b:8c:03:00:01:37:e1:6e:dd:19:f1:d0:
         c3:8c:49:13:b3:bb:83:9e:b9:b4:96:da:cf:4f:4d:fe:0d:e8:
         79:10:89:0c:5a:c5:a7:ee:d8:19:ea:f8:e1:be:82:04:97:60:
         cd:d5:f2:f3:cc:45:53:ba:25:b9:d2:ce:de:a6:04:17:fe:f9:
         d4:c5:c3:dd:c8:dc:0e:fa:28:57:59:d0:98:7a:5d:ba:38:43:
         f8:3b:28:81:d2:d7:ba:da:28:ef:fa:21:ce:7f:62:eb:15:ae:
         7b:1b:e3:03:2c:b9:35:40:d3:66:58:7f:84:23:e3:64:ba:00:
         6a:f1:16:ef
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICBm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD
MDMyOUQxMzgwHhcNMjYwOTA5MDE1MjU0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWEwYmJmNi02N2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtp1CNcWZxOzO8z/rbGCe/sUKC4hkkjqCIkgLhacShjQVg3qUO0aBHB6LXK9P
fb9H5CNdCiDbJc/qQppqOK/09uwDaTMIHsynZLCRVkP3opfPbOf9azsBqHcjbgOp
aykZa1MZcdRmYT6EaDXNrtw8J8d6aB3RbYJPolohSpmKv0U1I7kkfbBTFmisRcvG
S+zuJK2IOM7h9dlYjqJX4CIjgOOejHHsyMaL2yRsC4Qy4PEd7aZ0L9v01AIvJJGe
5do7+Jf2UkWjuylEzRw75DQ3/cDSHJkI1oHLfWCJI8LxbqoWUvKr4BOeoPjF0MUe
jRSXp3RLZPe8H7TX/GVZGK/rfwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFD1RIMye
xEn0E/iJFpCr2vBSESqIMB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE
RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTJDMTgvOUE1RUVBOEMzREY0MTFFRDgwNDFGOTMwQzRGOUFFMDIvNzgxQUFEMDJD
NjVGMTFGMEFGNTUyNDUyQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQC2iFQAwQC2iF4MA0GCSqGSIb3DQEBCwUAA4IBAQBenJtTSc4/r/1p
3vAkhsO17j/cxL82X9Bg5P0KUi/TMt+xx4EBY9qEe419DJ6lr8XnAaoMpAVF/M5g
uHaLVb9Nat0iAJpqs5GubxvmVikIIFyEi06+chPlmwoHxyMNs3hjKafoyhRYK0H2
4U6g80JkcvoUEOqApv9WO9OGdUUKhHZTY4aLjAMAATfhbt0Z8dDDjEkTs7uDnrm0
ltrPT03+Deh5EIkMWsWn7tgZ6vjhvoIEl2DN1fLzzEVTuiW50s7epgQX/vnUxcPd
yNwO+ihXWdCYel26OEP4OyiB0te62ijv+iHOf2LrFa57G+MDLLk1QNNmWH+EI+Nk
ugBq8Rbv
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:49:51 2026 by rpki-client