Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/BEE74700B0FA11F1B385B2A73911F970.roa
File:                     BEE74700B0FA11F1B385B2A73911F970.roa (raw, json)
Hash identifier:          exxPCaIcb8IuO9dfED1XesxyZje4EiGfyUgK/1S1iAE=
Subject key identifier:   48:40:4A:F6:5C:06:8C:3C:9B:0A:0B:88:DE:2E:A0:08:C8:D6:A1:FA
Certificate issuer:       /CN=A9190818/serialNumber=548430EAB88E4E378FB5005AFAE5CAB9C0007A1A
Certificate serial:       019B
Authority key identifier: 54:84:30:EA:B8:8E:4E:37:8F:B5:00:5A:FA:E5:CA:B9:C0:00:7A:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/BEE74700B0FA11F1B385B2A73911F970.roa
Signing time:             Tue 15 Sep 2026 11:44:02 +0000
ROA not before:           Tue 15 Sep 2026 11:44:02 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     154602
IP address blocks:        2401:ce20:20::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.crl
                          rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 04:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 411 (0x19b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190818, serialNumber=548430EAB88E4E378FB5005AFAE5CAB9C0007A1A
        Validity
            Not Before: Sep 15 11:44:02 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6aa92f81-68a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c9:6e:9b:99:7b:1b:0a:fb:ad:ce:20:3f:09:
                    e4:13:aa:5f:b0:c9:0c:71:f7:a6:e8:76:32:e1:1c:
                    72:67:da:38:b1:42:f6:48:20:40:b0:a4:ab:8c:3c:
                    ed:af:cb:88:68:5e:b6:73:fb:d6:ef:87:3a:29:05:
                    10:ee:14:bd:76:b6:98:aa:54:aa:67:dc:ee:32:3b:
                    24:d4:e1:0f:6e:a6:3a:38:f1:22:72:68:74:c2:c0:
                    ed:9b:d1:b1:5f:08:d7:25:6d:65:37:fc:2f:d9:6e:
                    85:ac:1b:58:6e:c9:08:e1:34:bc:ba:a7:fd:2f:a7:
                    3c:2d:d2:e9:f4:d6:93:4f:ba:3e:6f:92:62:41:42:
                    c1:7b:de:5a:6d:e5:88:a3:19:22:c2:3e:fe:3e:a6:
                    8f:3c:07:5f:0a:b7:c6:a7:14:5d:84:34:58:f7:9a:
                    ab:92:9c:20:a6:77:12:eb:04:a1:91:29:a6:f8:9f:
                    cd:42:9e:a1:4e:ea:62:97:36:49:af:9c:50:55:1e:
                    73:fa:fd:aa:68:d6:38:4b:26:13:95:44:da:52:a9:
                    88:2c:be:81:e6:86:24:cd:d0:25:9c:d9:b1:e8:e7:
                    f9:6d:16:9f:a8:06:a0:90:94:19:82:41:d1:6a:d7:
                    ed:24:65:86:1b:83:2c:9e:ab:82:c4:bb:ea:1c:14:
                    81:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:40:4A:F6:5C:06:8C:3C:9B:0A:0B:88:DE:2E:A0:08:C8:D6:A1:FA
            X509v3 Authority Key Identifier:
                keyid:54:84:30:EA:B8:8E:4E:37:8F:B5:00:5A:FA:E5:CA:B9:C0:00:7A:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/BEE74700B0FA11F1B385B2A73911F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:ce20:20::/45

    Signature Algorithm: sha256WithRSAEncryption
         a4:2c:9c:fb:a6:52:05:f7:37:a1:26:43:f5:35:36:57:0b:da:
         22:6d:cb:2d:69:96:65:fe:00:f8:27:d1:0b:40:40:c2:99:c4:
         d8:77:bb:bf:9f:64:95:8a:45:28:66:49:24:d1:a4:d3:7f:be:
         19:e4:5f:49:55:be:3f:41:e7:2f:23:c9:4a:e1:aa:c9:75:06:
         f9:53:ed:2c:d5:a3:01:79:b3:7c:70:57:5a:1c:85:fa:d8:55:
         31:17:89:27:e3:aa:fa:3c:84:91:c9:84:01:d6:2f:a6:6b:1f:
         8b:46:b8:40:6f:4c:43:fa:a2:45:29:72:5a:b5:36:cc:90:2e:
         ab:ed:6a:9d:7b:e1:68:9a:d9:54:e1:d9:e1:9a:03:3b:d3:81:
         ac:66:d2:5b:46:e8:78:72:7a:e9:5c:9a:f1:32:50:cd:8f:7a:
         57:99:de:2c:6c:60:de:bc:14:be:68:75:47:35:66:78:d2:a1:
         dc:a6:82:ab:d7:a5:f9:38:2e:89:1a:98:0c:12:24:02:eb:54:
         3c:ac:59:2e:ec:f9:28:b3:21:d8:8a:01:16:e4:8b:d0:e5:a7:
         d8:e7:36:c2:eb:e7:eb:ed:7c:da:a8:27:f1:0b:8a:a7:46:1a:
         77:6f:3a:54:98:61:29:73:2f:df:86:7d:a2:18:29:26:8c:f9:
         84:02:38:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:53:35 2026 by rpki-client