Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/AA1486E6B17011F187D9470D5F11F970.roa
File:                     AA1486E6B17011F187D9470D5F11F970.roa (raw, json)
Hash identifier:          5e8wKjkRE78fTTGzlbS+/xfRWgTU1mhTNvuhprIof2U=
Subject key identifier:   5E:B5:E1:23:0B:31:1B:D3:D0:3B:A9:6E:50:64:82:05:89:6A:AD:53
Certificate issuer:       /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial:       2D33
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/AA1486E6B17011F187D9470D5F11F970.roa
Signing time:             Wed 16 Sep 2026 01:48:07 +0000
ROA not before:           Wed 16 Sep 2026 01:48:07 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     138344
IP address blocks:        14.207.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11571 (0x2d33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
        Validity
            Not Before: Sep 16 01:48:07 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6aa9f557-a9f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e6:98:ea:2c:c5:64:c7:52:7d:41:4e:47:ae:
                    33:65:3b:7f:62:74:02:99:da:9a:0a:5c:26:59:a2:
                    d0:50:8e:1e:e8:19:9e:a2:39:60:e4:23:85:b8:66:
                    b5:b3:ed:b9:70:84:28:f3:f0:60:cf:a8:fa:4b:21:
                    0e:38:3b:59:8c:8e:44:f1:e8:4f:53:ab:cc:85:66:
                    54:b3:09:f2:23:59:d2:89:b2:78:2d:45:ed:05:41:
                    7e:8b:12:44:f7:87:e9:fa:5b:98:47:5a:99:06:f4:
                    51:7f:3e:97:6f:08:45:ee:1c:b2:2d:ad:6e:cc:dd:
                    99:eb:d9:47:a3:a2:60:bd:a5:21:72:47:1f:c6:4b:
                    be:0f:4d:e8:24:1c:b9:eb:0e:08:d7:08:8f:7a:1a:
                    86:ee:e6:6a:d9:75:11:61:46:55:87:4a:ef:f0:c7:
                    dd:93:3e:b8:b9:ec:08:95:0a:c8:23:aa:ab:cc:93:
                    12:5d:86:75:c6:c2:21:54:8b:70:b8:11:a7:ef:9e:
                    13:d7:10:81:cf:aa:ec:5a:91:77:6b:76:a9:93:ab:
                    9c:4c:23:a0:12:62:26:70:64:f0:f4:8e:8e:69:01:
                    59:dd:2f:bd:e2:94:81:90:ac:ca:10:b4:a6:dd:8b:
                    b8:36:f4:0b:87:73:d1:fa:33:10:5d:47:df:7c:29:
                    fb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B5:E1:23:0B:31:1B:D3:D0:3B:A9:6E:50:64:82:05:89:6A:AD:53
            X509v3 Authority Key Identifier:
                keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/AA1486E6B17011F187D9470D5F11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.207.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:f4:78:a9:04:c5:e7:55:e7:4a:d7:ef:6c:e0:48:35:67:2c:
         1f:a9:46:e1:40:3d:12:22:e6:5c:36:55:4c:28:35:28:3d:70:
         74:14:cd:ba:98:f3:bc:e2:01:04:3d:9e:18:97:19:90:fd:fc:
         55:7f:d5:47:2c:e9:72:c6:bc:db:74:d3:4a:db:14:0e:9c:62:
         59:dd:00:9a:3f:b6:88:78:6f:7b:d6:1b:2e:54:14:4f:68:e5:
         6c:0d:e0:4f:58:b2:7e:d3:f4:48:23:cc:de:d5:d7:9b:af:34:
         b9:4d:ad:d7:2a:ee:44:c4:60:96:e7:85:e6:a0:4c:b3:a6:39:
         06:4f:91:d4:ff:ac:d6:91:41:62:d3:74:f7:2b:40:d5:a5:c6:
         0b:c9:5b:0f:6f:dd:d7:02:cf:b8:39:92:5d:fe:45:f6:46:d4:
         3d:cc:44:73:bb:b4:52:fe:f5:4a:78:cf:c1:09:bc:ce:a5:ae:
         94:81:97:00:10:51:c2:2f:74:02:a9:b0:e8:b0:0d:ae:47:fa:
         0e:f0:f4:c2:0c:0b:15:80:47:ab:2a:50:93:cf:1f:3c:1b:37:
         aa:99:b7:4c:8b:db:9f:96:70:de:7a:a2:7a:86:21:2b:58:64:
         66:26:60:7d:ee:85:f3:b3:45:a3:d1:b3:ea:4f:b6:98:9a:66:
         15:1a:4c:49
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICLTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJENTQxMTAvBgNVBAUTKEJDRkFGOEQzM0YxOEE4RDM2MDIwMjlFQkNFREUxRTM2
QUYyMDcxNUMwHhcNMjYwOTE2MDE0ODA3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWE5ZjU1Ny1hOWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtuaY6izFZMdSfUFOR64zZTt/YnQCmdqaClwmWaLQUI4e6Bmeojlg5COFuGa1
s+25cIQo8/Bgz6j6SyEOODtZjI5E8ehPU6vMhWZUswnyI1nSibJ4LUXtBUF+ixJE
94fp+luYR1qZBvRRfz6XbwhF7hyyLa1uzN2Z69lHo6JgvaUhckcfxku+D03oJBy5
6w4I1wiPehqG7uZq2XURYUZVh0rv8Mfdkz64uewIlQrII6qrzJMSXYZ1xsIhVItw
uBGn754T1xCBz6rsWpF3a3apk6ucTCOgEmImcGTw9I6OaQFZ3S+94pSBkKzKELSm
3Yu4NvQLh3PR+jMQXUfffCn7PQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFF614SML
MRvT0DupblBkggWJaq1TMB8GA1UdIwQYMBaAFLz6+NM/GKjTYCAp687eHjavIHFc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC8zRTI4MUM5ODAw
NDkxMUU1QjRCNjRGNjNDNEY5QUUwMi92UHI0MHo4WXFOTmdJQ25yenQ0ZU5xOGdj
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZQcjQwejhZcU5OZ0lDbnJ6dDRlTnE4Z2NWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUJENTQvM0UyODFDOTgwMDQ5MTFFNUI0QjY0RjYzQzRGOUFFMDIvQUExNDg2RTZC
MTcwMTFGMTg3RDk0NzBENUYxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQADs+MMA0GCSqGSIb3DQEBCwUAA4IBAQAv9HipBMXnVedK1+9s4Eg1
ZywfqUbhQD0SIuZcNlVMKDUoPXB0FM26mPO84gEEPZ4YlxmQ/fxVf9VHLOlyxrzb
dNNK2xQOnGJZ3QCaP7aIeG971hsuVBRPaOVsDeBPWLJ+0/RII8ze1debrzS5Ta3X
Ku5ExGCW54XmoEyzpjkGT5HU/6zWkUFi03T3K0DVpcYLyVsPb93XAs+4OZJd/kX2
RtQ9zERzu7RS/vVKeM/BCbzOpa6UgZcAEFHCL3QCqbDosA2uR/oO8PTCDAsVgEer
KlCTzx88GzeqmbdMi9uflnDeeqJ6hiErWGRmJmB97oXzs0Wj0bPqT7aYmmYVGkxJ
-----END CERTIFICATE-----
Generated at Sat Sep 19 03:40:45 2026 by rpki-client