Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BA7491AAE0FE11EF9196F463C4F9AE02.roa
File:                     BA7491AAE0FE11EF9196F463C4F9AE02.roa (raw, json)
Hash identifier:          GxjIC/dRCQuJIUTBPE/mwK6JhE0IKNRA6yKGhdkLnAU=
Subject key identifier:   AC:1F:0B:83:CD:FA:5E:6D:81:E8:27:F0:92:51:58:6B:7B:58:58:F7
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       0654
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BA7491AAE0FE11EF9196F463C4F9AE02.roa
Signing time:             Wed 09 Sep 2026 01:52:00 +0000
ROA not before:           Wed 09 Sep 2026 01:52:00 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     20473
IP address blocks:        202.155.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1620 (0x654)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Sep  9 01:52:00 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa0bbc0-6e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:22:a0:92:52:85:71:72:63:9c:1d:c9:78:73:
                    ab:ce:be:a9:af:7a:ff:57:98:79:0c:72:55:0f:50:
                    61:78:8f:ea:38:ad:ea:7b:1c:4e:ab:be:0a:c2:33:
                    a1:d2:4a:09:61:7f:0a:df:3e:a7:a7:26:a4:a6:bc:
                    97:f1:d3:62:1b:92:57:fa:d8:46:6d:62:01:1a:c0:
                    9a:f1:24:9d:55:db:f7:86:6a:62:a8:a8:62:e4:1d:
                    25:42:c8:53:01:b9:c6:06:87:af:ee:18:41:f4:eb:
                    56:0b:2f:bd:0b:7a:f4:9a:ac:0a:2c:3c:ed:4c:ef:
                    06:81:f8:10:8c:54:45:38:16:49:50:ab:34:72:3a:
                    36:cc:6e:16:5c:88:9e:9b:89:83:a3:98:23:7c:4f:
                    b9:c9:4d:31:38:9e:15:62:dd:eb:8c:34:81:c6:d3:
                    6b:e7:72:2b:46:af:1a:85:c8:fe:a2:53:78:0b:e9:
                    79:e9:c0:b9:41:2e:36:30:b6:6f:02:ed:a3:fa:70:
                    8b:52:eb:72:ec:f4:25:23:0c:98:b8:a5:69:9b:1e:
                    59:9e:28:25:f6:fa:4e:06:54:64:7d:38:20:66:8e:
                    a3:03:49:9f:c7:b6:7a:a5:e0:6c:70:6a:8b:1c:30:
                    8e:49:ff:ce:b8:05:8b:03:80:96:09:c8:56:40:a0:
                    b6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:1F:0B:83:CD:FA:5E:6D:81:E8:27:F0:92:51:58:6B:7B:58:58:F7
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BA7491AAE0FE11EF9196F463C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:53:97:cd:94:19:7a:56:b1:9a:22:dd:f6:1f:72:35:79:25:
         44:ca:d0:d4:b5:64:2c:db:a6:89:50:f5:e9:47:81:7f:0c:71:
         b5:b6:43:2c:99:4e:b4:ce:52:98:fe:c4:02:00:d7:9d:44:4f:
         96:fa:b9:e3:e7:10:f4:84:79:45:29:27:98:09:7b:6e:79:b8:
         ef:87:5d:d6:1b:d4:63:16:57:04:b1:4d:ce:7d:fd:0d:d4:19:
         c0:81:08:96:48:90:b7:d7:27:8b:f8:e9:88:7a:88:c7:e0:f2:
         8c:de:d8:c9:be:74:5d:ac:c7:60:93:e5:0a:12:c1:69:23:26:
         68:5b:72:5e:f8:b2:e8:d4:41:0c:10:5c:b5:0d:84:ec:b3:66:
         33:46:1a:eb:bc:80:8d:0b:8a:8d:17:a0:0f:34:c9:c2:80:f8:
         d4:4f:c5:cb:c6:c3:9b:91:87:7a:63:08:fd:2f:45:f7:73:95:
         64:a6:17:5a:2d:56:25:17:0a:a3:4e:b5:a9:5a:8b:e9:d9:89:
         b3:4a:16:ac:8b:c8:25:d4:1d:d9:3a:cf:4b:00:27:67:a5:6c:
         25:7c:d9:2d:cd:63:da:77:6a:6c:e2:9a:92:21:17:a7:0e:c7:
         d2:f5:4a:9b:77:af:cd:eb:a4:be:96:41:56:43:2d:fd:b5:47:
         98:b3:55:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:23:08 2026 by rpki-client