Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/FF723320FE8A11F090FCEB075C6F56BC.roa
File:                     FF723320FE8A11F090FCEB075C6F56BC.roa (raw, json)
Hash identifier:          7vJt3F5MSw5iajpKGNwJbQRpmdoe/mgYFWi1yJnBnm0=
Subject key identifier:   2C:79:23:B1:87:39:4C:AB:C0:EF:CC:AE:EF:E8:FC:34:8F:98:D9:BC
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       054E
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/FF723320FE8A11F090FCEB075C6F56BC.roa
Signing time:             Sun 01 Mar 2026 20:06:40 +0000
ROA not before:           Sat 31 Jan 2026 09:55:39 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     9457
IP address blocks:        202.155.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1358 (0x54e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Jan 31 09:55:39 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a49c50-6070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ca:9e:23:14:ea:e8:44:a0:d1:7e:35:dd:83:
                    49:12:03:19:44:50:b9:59:7c:bd:53:29:3c:36:24:
                    f4:2c:9b:79:da:b8:71:52:13:0c:41:ff:95:20:ab:
                    e1:bb:e5:49:80:1c:39:7e:fd:37:0f:24:9e:49:47:
                    e7:5c:57:46:8f:bc:7f:0d:98:d6:67:7d:c6:99:db:
                    e3:27:92:ba:8f:c4:ca:bf:67:45:2d:eb:7d:12:91:
                    26:ae:e3:32:a3:31:ec:ee:05:73:33:0e:68:d4:e2:
                    75:e6:82:63:53:48:c6:07:5e:37:14:55:5c:d6:68:
                    ac:ca:77:ad:e4:0b:6f:87:0d:2c:20:64:23:02:8d:
                    e5:5c:3b:72:74:e2:70:2f:55:84:6b:60:e9:9e:cd:
                    8d:a9:64:b8:3f:15:44:fd:e3:25:62:be:f4:8d:4a:
                    81:65:53:c1:2a:f4:57:6e:f6:e1:11:b5:1d:c9:93:
                    68:2f:c9:15:78:01:0e:71:4e:54:df:d3:15:8e:c4:
                    c4:35:01:ca:82:aa:af:c6:bc:8a:81:d5:f3:cc:17:
                    ce:b1:62:11:c3:64:5e:56:f8:80:62:55:5d:fb:0f:
                    c0:f6:bb:ff:1d:1d:b3:9d:b8:9d:13:76:9a:ed:0a:
                    a5:8b:94:74:ac:c1:b0:57:f7:55:f4:69:87:11:be:
                    bc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:79:23:B1:87:39:4C:AB:C0:EF:CC:AE:EF:E8:FC:34:8F:98:D9:BC
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/FF723320FE8A11F090FCEB075C6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:83:19:a4:52:39:6f:4e:73:35:61:be:e4:bb:d9:a9:01:dc:
         7e:c8:27:a3:2c:f3:a7:ad:be:d6:0a:a6:d8:cd:d5:d7:b3:56:
         5f:c4:4a:e4:a1:5d:98:f7:68:64:8c:5e:2f:e8:05:c5:0b:8d:
         dc:6f:bb:dc:e1:73:bc:7a:a8:f1:55:7d:5f:b8:15:e1:a2:5c:
         3a:55:7f:7a:d4:7a:47:29:bb:0d:fe:3c:a6:4d:89:c4:f8:42:
         22:d3:99:24:b4:37:6e:73:2d:da:8d:03:45:41:65:02:5d:b6:
         00:4f:6e:9f:66:46:3a:96:a2:b7:62:60:cc:fe:4e:0e:12:22:
         f6:9b:10:bf:13:4a:3c:9a:91:bd:70:68:5a:4c:40:97:0d:e6:
         34:19:d1:13:ff:2a:72:4a:d4:66:0b:1d:55:3f:ed:c7:05:ad:
         1e:b3:a8:f4:7f:b8:4c:54:c8:d2:aa:74:d0:96:06:52:5a:6c:
         12:75:85:30:3f:5a:4e:01:22:0c:3f:51:dd:ab:bf:ce:86:4a:
         db:e0:21:a7:1a:ad:2d:29:77:f2:3e:33:29:0e:f1:15:27:da:
         88:b5:41:8a:f9:5c:5b:4e:f3:dc:eb:93:1a:3b:2f:01:52:bc:
         3e:d9:89:d6:b9:9b:31:a5:d7:d1:ea:e5:85:81:cc:05:dc:d8:
         15:bd:28:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:23:59 2026 by rpki-client