Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/A88A0ED8FC7511EF92B63B46C4F9AE02.roa
File:                     A88A0ED8FC7511EF92B63B46C4F9AE02.roa (raw, json)
Hash identifier:          K5coW6WQjv47W7NRFavoSjuQWRe8GCCu/LnK38ICx+E=
Subject key identifier:   B0:01:0D:72:B8:56:F9:E3:62:CE:AC:C2:DC:65:6C:FA:88:83:98:BC
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       066A
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/A88A0ED8FC7511EF92B63B46C4F9AE02.roa
Signing time:             Wed 09 Sep 2026 01:52:44 +0000
ROA not before:           Wed 09 Sep 2026 01:52:44 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     42831
IP address blocks:        202.155.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:57:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1642 (0x66a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Sep  9 01:52:44 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa0bbec-86f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d2:db:02:04:f3:62:b4:af:f2:6e:8e:c6:43:
                    44:d1:cd:be:a2:ed:19:d8:1d:56:bc:d7:66:b4:29:
                    22:2c:82:4f:3f:44:f5:84:f7:46:47:f7:d1:c6:1c:
                    83:cd:be:cb:54:73:ae:33:c7:a1:83:fb:e5:dd:53:
                    62:b0:d3:61:3f:55:c3:1c:80:52:38:d1:4b:a7:e7:
                    9d:4f:b0:23:06:5d:d7:3b:42:b2:98:a5:4c:7d:a5:
                    0b:38:dc:8b:d7:6a:6e:cd:d3:a9:be:b3:38:ae:79:
                    c7:c5:08:42:2b:c6:a4:db:11:3b:33:6b:96:db:4a:
                    f7:08:e4:b8:6d:29:c3:0f:e7:33:7d:79:c3:42:a0:
                    10:ab:c2:1c:27:73:ac:7d:62:77:9a:df:4b:77:a9:
                    0f:b0:c3:6a:ad:c0:dd:76:04:1f:11:c0:2d:77:7a:
                    f5:55:03:49:18:ff:8f:c5:5f:9b:0c:23:8d:b6:7b:
                    b2:a5:fd:70:69:91:19:bc:6c:9b:51:3e:0d:5b:9c:
                    b1:dc:b1:40:47:3d:54:15:14:9d:36:32:27:0e:6d:
                    f6:b0:81:15:09:d1:3d:2b:24:89:83:0c:ee:4d:2b:
                    a4:2b:55:36:b6:ac:e0:e6:5a:42:04:1b:44:a1:22:
                    87:d1:1a:c2:7c:1c:a4:55:51:39:2e:cd:6c:29:0e:
                    8d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:01:0D:72:B8:56:F9:E3:62:CE:AC:C2:DC:65:6C:FA:88:83:98:BC
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/A88A0ED8FC7511EF92B63B46C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:7c:36:9b:99:37:41:76:dc:a6:d8:17:26:42:4c:6f:26:2d:
         5b:e3:0b:29:ba:fa:fa:9b:a8:95:03:04:c8:92:0d:00:d9:9b:
         fd:cf:80:6a:bf:6d:81:84:36:68:48:fd:37:5c:9a:5d:f4:19:
         23:19:ad:44:e7:4f:b1:5e:ba:b3:ab:d3:d4:fc:eb:e4:de:d8:
         3e:01:4e:b6:97:11:72:97:5e:d5:26:e1:c0:40:cd:0b:a9:0d:
         83:a4:89:03:e3:1e:23:46:56:e7:62:da:08:09:6a:a0:6c:fb:
         27:11:52:ba:f8:12:d9:0a:e8:d8:19:1e:36:92:c9:b6:23:a9:
         fe:7f:90:f2:fc:c4:20:59:b0:8c:74:08:76:4a:7e:18:20:17:
         38:cd:40:33:79:e0:72:15:19:76:30:a3:2a:df:19:64:0e:df:
         ac:86:5c:d8:92:25:45:9f:7c:d8:da:1c:2e:60:90:0f:fa:a5:
         ae:b8:e6:5a:12:9a:c1:d7:ad:de:36:d8:2a:8f:d8:65:57:4f:
         56:24:19:ce:cf:8f:20:e8:d5:97:17:c8:23:28:08:82:fb:2d:
         6a:c2:85:b4:5d:d9:64:50:1f:8a:9b:ba:f9:e8:d0:81:83:f3:
         24:62:9b:be:38:3f:8e:ed:d6:0c:a5:1f:5e:c7:d4:71:0e:25:
         4b:f1:6d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:12:30 2026 by rpki-client