Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/A5170FD8B18411F190B815716711F970.roa
File:                     A5170FD8B18411F190B815716711F970.roa (raw, json)
Hash identifier:          xxZZvKx4UTTrTff+K5juSvtGB5EmgaCg6knfJ201ZxA=
Subject key identifier:   7B:CD:56:0B:8E:D2:8D:68:52:A2:14:8D:36:7D:27:CE:27:CA:7A:8A
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2F5F
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/A5170FD8B18411F190B815716711F970.roa
Signing time:             Wed 16 Sep 2026 04:12:12 +0000
ROA not before:           Wed 16 Sep 2026 04:12:12 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     9891
IP address blocks:        14.207.141.0/24 maxlen: 24
                          14.207.142.0/24 maxlen: 24
                          14.207.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12127 (0x2f5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Sep 16 04:12:12 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6aaa171b-9b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:1a:2a:91:67:51:03:b6:71:0b:a0:30:3c:
                    c0:f5:6f:16:bf:42:c8:4d:3b:f1:36:03:3d:fc:8c:
                    59:8d:3f:b0:75:78:70:2c:32:5a:d1:21:5e:8b:fd:
                    7e:ba:66:d0:30:46:e9:a6:0a:4e:40:a7:e4:a9:73:
                    56:29:61:c0:a9:67:96:62:1e:0e:ae:66:32:b1:2b:
                    5a:66:b1:c6:4d:e2:f8:0a:cb:c8:0e:15:64:98:87:
                    ec:98:3e:ef:09:62:1f:ff:7b:1b:20:44:10:9c:52:
                    20:f1:94:aa:4b:37:29:72:9b:2d:6a:03:0d:e0:6c:
                    92:0a:a1:6c:1b:2a:81:57:85:40:f4:6c:29:32:0a:
                    f4:dd:f9:72:ab:98:a1:0c:fb:63:85:09:6d:a1:0c:
                    26:d9:ef:4e:cb:21:8f:8a:9c:16:0c:77:be:b3:8e:
                    d7:fa:76:d5:27:46:d5:bc:b1:ca:a4:d3:69:53:c8:
                    f7:15:69:6a:87:57:2c:3b:b9:e6:d9:48:d9:ef:57:
                    d1:90:97:27:37:ca:54:d7:07:6a:71:37:3d:bf:f2:
                    97:11:76:d1:49:70:ad:88:01:0f:fd:23:af:c6:16:
                    db:bb:87:e6:51:b6:7b:2e:22:a5:ba:2a:87:b5:a3:
                    ba:de:05:ac:14:8a:4a:ba:22:10:f8:56:8a:4f:d5:
                    8b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CD:56:0B:8E:D2:8D:68:52:A2:14:8D:36:7D:27:CE:27:CA:7A:8A
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/A5170FD8B18411F190B815716711F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.207.141.0-14.207.143.255

    Signature Algorithm: sha256WithRSAEncryption
         11:ba:23:b5:96:28:18:58:3a:d8:6f:c6:3f:1c:5a:42:b5:4f:
         cc:a6:59:89:77:23:43:3a:c7:78:cf:37:71:bc:25:f5:60:5e:
         1d:80:cd:bf:b2:75:6a:d7:5a:75:24:67:2f:1d:c2:7e:24:00:
         26:06:89:05:d2:98:bc:2f:57:2d:ab:71:be:06:ca:b5:6f:0e:
         21:2e:2b:04:63:9d:cc:b4:57:eb:e9:61:8f:1e:a3:1b:25:d8:
         ae:63:1c:4a:c3:a1:ab:b6:9c:37:61:9e:e4:54:09:98:87:73:
         b5:1e:14:e1:6d:08:26:5f:bb:04:8c:44:9c:42:a2:23:15:77:
         90:de:97:31:92:55:d2:87:aa:61:d3:b7:89:cc:58:61:1b:d5:
         59:82:aa:7f:7f:81:88:07:eb:37:ec:f1:85:c7:82:bd:ab:0a:
         15:b8:97:12:70:34:e3:bf:87:88:18:5e:59:35:4a:bd:ff:60:
         6d:73:ff:ba:aa:dd:46:67:8e:e5:12:04:42:a5:1e:8a:1e:73:
         dd:6d:85:60:ee:85:19:74:e3:0c:58:93:88:53:bc:95:b4:d1:
         ed:c5:ce:b7:f7:25:9b:a4:82:bf:76:3a:81:a4:95:67:b9:30:
         47:db:99:ba:04:64:de:46:95:ac:12:7b:f4:7d:4c:f0:30:4f:
         47:60:2d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 03:25:18 2026 by rpki-client