Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BD5D1956031B11F192FC7DBE1A3D8C67.roa
File:                     BD5D1956031B11F192FC7DBE1A3D8C67.roa (raw, json)
Hash identifier:          cZhTsq4k8LsewrNsGBBXO6N4jDMgq79S5zKL/gIf1X4=
Subject key identifier:   E7:EC:68:C3:CE:6C:78:60:40:9B:26:1C:3A:71:56:41:30:28:47:A2
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       04D3
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BD5D1956031B11F192FC7DBE1A3D8C67.roa
Signing time:             Fri 06 Feb 2026 05:21:50 +0000
ROA not before:           Fri 06 Feb 2026 05:21:50 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     215304
IP address blocks:        202.155.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 02:24:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1235 (0x4d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Feb  6 05:21:50 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69857a6e-13e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d7:12:e2:4d:9f:9e:f1:c2:74:2a:18:ab:6f:
                    83:85:8c:de:6d:b4:20:10:1c:a6:9a:eb:78:12:7a:
                    99:0b:6a:02:43:fa:4a:32:fe:86:60:39:c8:41:f6:
                    cc:33:05:8c:89:e4:87:c8:ef:1d:d8:3d:f1:40:3e:
                    79:a7:8d:95:6d:08:b9:a9:3c:e9:05:48:56:d4:cd:
                    c0:6a:fd:1f:18:d7:8e:4f:9e:ee:cf:a2:41:2d:1a:
                    3d:cc:7c:24:57:0b:bd:56:bf:d6:1b:04:b1:36:3c:
                    fd:63:17:94:01:29:ce:2c:ae:57:5c:a1:3f:99:50:
                    31:e7:49:fb:33:27:bc:06:a4:b6:6f:ef:1d:3a:59:
                    93:6d:ff:c3:65:2d:fa:b5:93:84:e0:10:f0:f2:4a:
                    b6:83:23:5d:cc:1f:a3:96:7f:f1:99:60:27:45:b7:
                    7e:72:c1:33:83:8f:ba:d3:f8:eb:f7:f8:dd:e9:af:
                    2a:e1:a2:81:c9:a3:d3:14:8c:b8:09:fa:9f:df:c8:
                    00:44:6b:88:22:28:70:62:a1:53:25:22:dc:eb:ef:
                    98:3b:b7:60:83:37:be:db:20:10:28:ce:05:19:da:
                    77:8d:e0:b2:c2:6c:e9:4f:a2:21:7a:5b:d1:b7:79:
                    dd:50:3a:e7:45:01:c2:0c:d4:53:b0:82:97:e1:bb:
                    7d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EC:68:C3:CE:6C:78:60:40:9B:26:1C:3A:71:56:41:30:28:47:A2
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/BD5D1956031B11F192FC7DBE1A3D8C67.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:b6:0b:06:9f:6b:27:12:a6:84:fd:d7:a6:cf:83:35:4c:d6:
         84:60:ed:a4:56:b2:41:ea:80:35:e2:a7:2e:34:49:fc:be:47:
         a3:7f:c4:e7:ef:05:71:ce:e5:24:e5:c8:f3:6c:a8:02:a6:78:
         be:b4:a4:91:6f:87:31:9c:1f:11:b3:71:01:c7:0c:43:c1:c5:
         8c:fd:b5:38:b3:d0:5d:53:b1:43:95:d0:3e:ea:97:18:18:ae:
         85:93:40:67:6e:60:74:40:d6:02:53:35:6b:22:f6:f9:f7:a0:
         7e:b1:97:9f:dc:ff:08:b1:b4:ae:8c:48:52:0e:97:3e:bd:ce:
         2c:3a:81:75:96:d2:83:41:7f:61:f2:62:c6:f9:12:37:5b:df:
         a4:ff:06:f9:f2:ef:41:a4:b9:48:30:07:74:65:bb:ee:cf:7d:
         7b:2e:7e:59:55:a1:62:61:36:fc:bb:a7:75:5a:82:7b:56:11:
         12:a9:47:9f:33:aa:2d:b9:fd:b2:61:c9:66:22:72:4a:b8:ca:
         9d:c5:51:25:8f:ec:2e:f1:15:fe:14:4f:25:4c:bc:f1:40:5b:
         44:81:35:f3:94:21:4a:55:f7:a1:25:09:25:29:be:0f:1e:61:
         0c:60:02:58:13:8c:1f:d9:a3:92:ab:18:8a:82:82:12:d6:18:
         8a:28:fa:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:02:55 2026 by rpki-client