Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/74F68796303711EFB68DF613C4F9AE02.roa
File:                     74F68796303711EFB68DF613C4F9AE02.roa (raw, json)
Hash identifier:          Fqtx5Wn9Ey7iYD7VUT49xNCnyMvkXXJdBXNNoMBCIyk=
Subject key identifier:   70:D8:61:47:B1:D7:1C:B4:CB:59:39:81:E1:7C:48:F7:B3:43:7D:B8
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       0645
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/74F68796303711EFB68DF613C4F9AE02.roa
Signing time:             Wed 09 Sep 2026 01:51:32 +0000
ROA not before:           Wed 09 Sep 2026 01:51:32 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     134143
IP address blocks:        218.33.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1605 (0x645)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Sep  9 01:51:32 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aa0bba3-886b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:91:17:b8:ef:b5:a6:11:f8:d7:a9:73:8e:f2:
                    e8:94:69:7f:3c:9d:c6:dc:09:d9:bd:6b:c5:ee:3c:
                    c1:89:fa:d7:cb:c5:eb:88:0c:36:a3:98:3d:7f:04:
                    83:ed:41:01:dc:ec:e6:6c:81:42:04:a3:f3:6c:8c:
                    a4:90:15:49:69:8f:a6:9d:30:72:6d:10:60:17:2a:
                    de:ab:cf:77:cc:b5:4d:9d:a6:50:3f:a0:d3:80:40:
                    c6:5c:1f:7a:4c:3a:6e:41:92:f8:d3:54:ff:a6:a3:
                    5a:97:3b:3a:b0:68:d6:c2:49:89:dd:0d:e9:9b:ff:
                    81:03:ba:d0:65:21:50:4e:9a:cc:37:38:b1:62:fb:
                    ad:02:fd:62:08:71:2a:bf:8d:95:e1:ce:7c:d6:16:
                    52:8e:ad:b6:dd:90:9d:58:3e:a2:92:04:17:f3:37:
                    1f:99:31:66:b4:b4:89:3e:ae:52:1f:a6:1b:2f:28:
                    50:5a:f6:c4:da:fd:fb:5d:bf:56:cf:0e:7a:49:69:
                    2f:a2:c4:d7:2f:80:7e:9a:cd:c0:ba:70:b9:05:b8:
                    5f:1f:07:ea:f8:1b:59:4d:41:98:b8:62:69:6c:26:
                    b9:6b:9b:51:31:63:e1:69:e6:c0:17:6f:cb:2c:e4:
                    14:1c:88:78:f8:19:b1:d0:87:a5:ae:b3:89:92:93:
                    f3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D8:61:47:B1:D7:1C:B4:CB:59:39:81:E1:7C:48:F7:B3:43:7D:B8
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/74F68796303711EFB68DF613C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.33.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2c:be:12:b4:ae:e9:33:62:e4:68:46:1d:c1:7a:44:91:62:76:
         ff:4b:f5:f7:c6:7b:71:01:bd:09:1d:aa:96:ca:87:4e:36:0f:
         ce:50:74:22:65:50:05:07:c1:12:95:c8:b6:54:e2:7f:98:90:
         24:aa:d4:97:0d:93:6b:ab:ff:81:34:42:03:93:54:ae:70:f7:
         40:3c:20:f8:45:28:56:55:89:06:2e:6d:ca:51:89:99:c2:c9:
         2d:50:72:a2:9a:af:66:73:81:27:c0:b2:c5:04:8a:fb:1f:8b:
         3a:dc:2e:45:15:98:38:44:f0:a9:8d:78:7a:5e:74:6c:cb:af:
         23:b7:d1:9e:27:22:63:28:82:fc:d7:51:ff:c8:d2:b3:49:10:
         8e:31:43:50:f7:0d:09:d6:01:c3:1c:53:4b:35:11:66:c9:e5:
         6b:df:60:5b:dd:17:de:b9:6a:06:69:e9:77:c8:6b:b6:b9:21:
         2e:cc:e6:58:3a:9e:a8:22:ce:85:9c:c8:56:ac:c7:44:17:aa:
         e5:70:90:7f:c0:5f:ef:38:56:a0:1a:63:7a:0b:8b:87:5d:cd:
         d6:42:68:fb:54:1d:93:cc:b6:c5:50:8a:90:f4:44:5f:aa:53:
         9e:dc:fd:9a:71:59:fb:0f:fa:8a:2a:4a:dc:83:bd:22:3a:0b:
         6e:0f:b3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:22:50 2026 by rpki-client