Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/914E140EBCBC11F1A39EC7326E11F970.roa
File:                     914E140EBCBC11F1A39EC7326E11F970.roa (raw, json)
Hash identifier:          Py3EsLmjgWl1uu8/afo7Hv0xOLsxXQg9g1ukI0fNA1A=
Subject key identifier:   9C:1F:FE:4C:45:F4:0A:63:BB:F3:BF:37:58:A5:EE:22:40:5E:28:3B
Certificate issuer:       /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
Certificate serial:       0EB3
Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/914E140EBCBC11F1A39EC7326E11F970.roa
Signing time:             Wed 30 Sep 2026 10:49:10 +0000
ROA not before:           Wed 30 Sep 2026 10:49:10 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     133854
IP address blocks:        2402:76c0:5020::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl
                          rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 Oct 2026 17:53:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3763 (0xeb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
        Validity
            Not Before: Sep 30 10:49:10 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6abce926-6be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d3:4a:cd:60:91:4e:da:f9:fb:39:40:ba:b5:
                    b4:41:1c:e3:62:ac:21:a4:1a:c0:e4:94:82:dc:fe:
                    6a:3f:4a:30:95:b5:1c:db:d7:97:d5:fa:6a:97:8c:
                    6f:b3:bf:42:a7:c3:24:64:7f:81:17:8d:83:0b:32:
                    3b:3a:73:56:22:b3:a1:0f:3f:a7:c9:a7:e5:ff:7a:
                    96:e1:f3:0a:2a:10:51:01:c4:fe:0a:01:2f:fd:0e:
                    4a:a1:06:59:39:29:ab:58:4f:23:49:9d:2e:12:dd:
                    d1:4c:64:54:88:56:3e:1f:ad:5c:0e:fe:0e:38:8f:
                    30:28:6e:6a:83:a4:68:98:09:85:45:87:a6:24:40:
                    7d:a5:8a:47:bb:60:62:79:45:94:89:68:31:e5:cc:
                    95:c4:e6:2c:0c:ad:06:7d:88:66:9e:38:6b:1a:68:
                    35:52:ae:97:2a:f5:2f:1b:3c:d1:92:2d:79:30:b4:
                    61:84:c4:49:4d:af:2c:ec:06:19:20:96:d5:6e:a9:
                    71:d1:3b:50:32:6c:f0:ce:84:46:da:80:97:37:54:
                    33:41:a7:16:7d:39:a9:b3:c8:6d:2c:4b:26:fa:38:
                    54:71:4d:16:31:0d:ef:4d:9b:f8:ca:e8:43:fa:62:
                    0c:a7:18:94:3a:35:1f:e8:b8:26:a3:d3:2a:40:66:
                    ad:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1F:FE:4C:45:F4:0A:63:BB:F3:BF:37:58:A5:EE:22:40:5E:28:3B
            X509v3 Authority Key Identifier:
                keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/914E140EBCBC11F1A39EC7326E11F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:76c0:5020::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:1a:b1:21:39:cf:8c:a5:c7:0f:d2:41:4a:4d:07:fc:80:1c:
         33:16:dd:f5:c6:b0:56:a2:e7:0a:bd:36:c5:f0:f6:e0:b8:0c:
         8f:ce:3b:72:dd:cd:3f:51:0e:76:56:6c:6f:65:7e:42:c2:f7:
         ac:98:da:de:83:82:b0:fe:29:7e:7f:08:5c:18:f2:dc:86:97:
         49:0d:70:fd:76:9f:fe:75:61:03:ec:99:a9:3f:14:9f:83:b0:
         e7:18:5c:b7:13:66:b5:f5:cb:13:da:5f:55:34:b4:2f:94:ec:
         7d:27:2b:14:96:7a:f2:b7:a5:cd:64:2d:ef:03:17:98:c9:80:
         c7:5e:a5:7c:8a:09:58:49:d1:6a:ab:84:68:5e:11:89:58:01:
         bd:8d:a3:dc:2e:6f:56:a1:2b:69:6e:00:df:2d:6f:98:70:85:
         ed:f1:89:b4:47:36:9b:f4:38:ae:bb:16:39:ff:92:72:40:7e:
         e9:15:91:3c:a6:cc:9e:bf:1b:25:e9:d2:45:44:0d:39:cc:8b:
         b1:89:82:30:28:e4:9f:c7:9c:b3:1d:47:35:74:c1:3f:23:d0:
         a6:3e:54:4e:0a:d9:25:42:42:56:f5:b2:f4:3a:70:22:10:61:
         4b:01:a7:7b:10:37:56:08:3a:cf:44:07:3b:b3:cb:d7:fc:06:
         53:05:4b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:03:25 2026 by rpki-client