Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/EB7DEC72068411F1BC24B18C403D8C67.roa
File:                     EB7DEC72068411F1BC24B18C403D8C67.roa (raw, json)
Hash identifier:          HDRl3VxNh/FevQtH04r/t22d7Hu2w7IDQEKoc9zv31Q=
Subject key identifier:   58:FE:CD:37:76:0A:0A:E1:8B:32:C1:BC:54:8B:35:44:DC:90:9F:48
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       0664
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/EB7DEC72068411F1BC24B18C403D8C67.roa
Signing time:             Wed 09 Sep 2026 01:52:32 +0000
ROA not before:           Wed 09 Sep 2026 01:52:32 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     395047
IP address blocks:        202.155.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 00:57:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1636 (0x664)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Sep  9 01:52:32 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa0bbe0-6c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:69:6a:18:5b:d5:61:a3:25:dc:db:41:73:34:
                    32:e7:a8:e7:87:f9:b7:9e:4c:d9:b4:f8:3d:38:c4:
                    7f:fc:6d:01:08:c2:0d:4c:7b:32:20:1d:d9:0b:b3:
                    ce:22:85:32:2d:b1:ad:c5:eb:2e:1b:ea:95:46:fa:
                    82:6c:29:02:e1:5b:ce:b7:c4:ac:b7:0c:0d:e1:48:
                    35:13:12:a4:d1:24:29:08:64:3b:e5:6e:26:eb:f5:
                    2c:6d:73:50:51:b6:82:01:96:58:4c:08:86:ec:58:
                    66:01:0c:07:0d:61:2c:30:66:0f:09:1e:1e:f4:f0:
                    b8:74:45:3e:e4:9e:0b:2f:4f:c1:fa:d0:64:98:bc:
                    52:17:e6:68:f1:d4:94:a6:b4:d7:3a:10:bf:54:cd:
                    ad:8d:57:6e:59:6b:a8:7d:e3:30:5d:8f:70:1d:69:
                    a7:1c:d2:f5:bc:6c:4d:13:d9:39:0e:3d:db:fb:21:
                    b0:1f:81:55:cf:a9:82:d6:e0:0c:c2:34:88:8a:93:
                    80:51:30:66:03:93:31:2f:5b:c9:7b:79:50:5c:61:
                    40:c7:94:56:44:b3:87:4f:c3:6e:16:c5:62:3d:4b:
                    c5:8f:02:65:44:53:ef:e7:ed:af:60:9b:98:42:b9:
                    c6:d0:b1:b3:e8:83:f1:42:09:06:98:12:99:78:34:
                    63:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FE:CD:37:76:0A:0A:E1:8B:32:C1:BC:54:8B:35:44:DC:90:9F:48
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/EB7DEC72068411F1BC24B18C403D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:71:fe:f6:74:76:f1:fc:22:19:bd:1d:de:c3:2f:ed:65:0b:
         3c:e8:8c:51:3c:75:10:e7:5a:b3:76:38:60:a0:84:52:c1:3e:
         6b:fd:28:3e:25:90:c6:69:0d:06:6a:7a:48:72:4d:57:98:06:
         5b:67:7a:46:82:a8:5c:15:c7:fb:6b:d6:ea:7b:23:26:54:7c:
         0f:e8:2c:12:a4:a6:58:35:38:a7:0f:57:00:a9:8d:25:43:71:
         48:9c:82:5f:11:16:ba:7e:2e:a0:65:19:1a:4f:80:99:c5:b8:
         e5:a6:fa:9e:72:e1:a7:a7:c7:23:40:ab:c4:5e:d5:93:cb:a7:
         d4:d8:a4:84:95:c6:de:7a:5e:5c:42:04:50:8f:d6:eb:3a:84:
         72:80:7c:3e:d5:fd:23:74:6c:67:da:74:cc:09:b3:0a:37:82:
         1f:46:2c:de:53:a1:93:8d:6d:11:5c:80:1d:0a:58:5c:de:20:
         1c:59:fb:b5:97:18:51:6d:4a:36:31:6d:7f:16:b6:3f:fb:19:
         a3:cf:ae:9c:25:9d:82:86:79:a8:da:95:02:ad:74:b4:c7:c1:
         4b:15:b5:c5:3c:69:2f:a6:b3:2d:ef:3d:9b:ac:35:24:71:14:
         2e:9e:fa:23:87:44:f3:f4:8d:08:f9:f4:05:9a:08:45:19:08:
         3f:c6:30:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:02:06 2026 by rpki-client