Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/FC09C7E49AB011F18D4F543F4211F970.roa
File:                     FC09C7E49AB011F18D4F543F4211F970.roa (raw, json)
Hash identifier:          4Iinnzwkz7OEiGAzy+rjkkEsmpQ0Ng3RDk5gK6EiHHY=
Subject key identifier:   60:4F:CE:06:0F:15:8A:CB:20:57:D7:25:8C:6B:27:A0:DE:9A:1D:FB
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       0663
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/FC09C7E49AB011F18D4F543F4211F970.roa
Signing time:             Wed 09 Sep 2026 01:52:30 +0000
ROA not before:           Wed 09 Sep 2026 01:52:30 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     36530
IP address blocks:        202.155.147.0/24 maxlen: 24
                          202.155.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1635 (0x663)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Sep  9 01:52:30 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa0bbde-f9bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6c:a1:a0:73:c4:b2:b1:df:86:0b:a0:fb:0d:
                    b5:65:b3:79:c2:51:38:06:dd:be:c8:a8:20:c3:55:
                    98:a0:b2:8f:f3:2b:30:18:1d:68:28:bd:ca:dc:f6:
                    d7:49:67:af:4c:a3:58:58:15:3a:14:df:bd:cf:a8:
                    f7:b6:c6:54:66:24:a3:76:c5:76:c6:b4:3f:32:54:
                    e0:27:76:ab:d8:45:0a:7c:01:2e:cd:38:08:96:fc:
                    2e:9c:13:fe:40:05:d3:d1:8e:d0:5d:7b:b2:d7:2e:
                    63:2f:d2:0b:3f:cc:96:78:76:bf:1f:69:1f:2e:39:
                    e3:cb:38:7a:c1:05:e5:8d:3d:66:bf:8e:45:7f:8e:
                    52:db:ba:6f:61:de:6d:a9:78:d8:d6:0a:05:f5:b7:
                    92:4f:b8:5f:dc:5d:b8:b7:4d:fb:9f:96:f6:eb:0f:
                    e2:ba:bb:f0:4f:81:f0:e2:f9:5f:32:54:b9:27:3e:
                    a8:e6:92:01:9a:4a:8b:ba:d9:68:86:46:51:ed:92:
                    5b:d3:da:6e:d6:84:01:4b:b8:7e:45:0d:cb:58:04:
                    49:62:4e:ed:dc:15:52:82:e9:92:29:35:85:c1:1f:
                    74:05:6a:91:f8:51:bd:d9:0e:a8:ab:fa:5f:30:67:
                    c0:26:11:3a:1c:4b:2e:9e:9b:3d:75:87:b3:e1:b6:
                    a2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4F:CE:06:0F:15:8A:CB:20:57:D7:25:8C:6B:27:A0:DE:9A:1D:FB
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/FC09C7E49AB011F18D4F543F4211F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.147.0/24
                  202.155.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:33:ca:39:34:3d:69:2c:c4:74:1f:31:c2:4d:bd:12:b5:07:
         d1:46:75:32:99:48:95:ac:f4:28:88:8d:18:d6:82:54:e8:60:
         69:7f:7b:f3:82:cc:94:83:cb:b5:1c:ed:ac:02:91:9f:b6:28:
         c3:12:d8:3e:48:6b:1b:d0:8e:2b:ea:1b:11:12:67:f1:d2:0f:
         75:9f:2c:f9:bb:3d:f5:82:97:75:9c:88:78:45:4e:76:02:bb:
         40:e5:bf:1f:2c:e3:e2:76:7a:f7:0b:82:c1:5b:e8:d8:3d:1f:
         bd:b4:19:56:90:5b:a1:4c:d2:9f:7f:92:f7:21:37:8e:45:c4:
         a6:c3:e2:35:72:d8:31:17:14:0a:20:f4:7b:aa:be:e3:90:21:
         ea:c8:43:96:25:22:ed:c5:c9:ca:b1:f5:a8:ed:7f:7b:bc:ff:
         a3:04:0c:85:2d:6d:6b:48:5a:4d:99:3c:c4:a1:98:0c:43:c9:
         03:55:fe:c7:52:bb:c2:cb:bf:37:ea:ce:a6:9b:0b:ce:3b:a7:
         93:5c:53:d2:af:ba:9b:1e:04:71:af:fe:4f:c7:e2:6d:6b:86:
         7b:09:0a:49:79:2a:75:01:ed:a2:23:09:67:e8:96:84:14:76:
         7f:78:7a:1a:1a:06:5e:9d:64:5a:ee:f2:42:34:68:8b:33:48:
         54:a2:f7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:20:42 2026 by rpki-client