Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/5E6AFDFC855A11ECA39EB244C4F9AE02.roa
File:                     5E6AFDFC855A11ECA39EB244C4F9AE02.roa (raw, json)
Hash identifier:          T3sBWx7WsASIvXJipD/8/WgUdUsv5wiiZndfgeUi8xY=
Subject key identifier:   EB:87:12:B1:E4:50:CC:0C:96:BD:F1:F1:98:DB:AA:73:3C:8F:87:93
Certificate issuer:       /CN=A9148B19/serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0
Certificate serial:       047C
Authority key identifier: 70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/5E6AFDFC855A11ECA39EB244C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:30:46 +0000
ROA not before:           Thu 11 Sep 2025 01:08:27 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     396982
IP address blocks:        202.14.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl
                          rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 23:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1148 (0x47c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148B19, serialNumber=70D2D06919957C6AA6771CF55DB96FC7EFE789A0
        Validity
            Not Before: Sep 11 01:08:27 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a477c5-21fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a4:3a:e5:88:3d:1c:59:00:98:b0:53:7c:e2:
                    f1:df:c9:42:f6:ef:ce:70:7a:b2:14:dd:08:6b:ea:
                    96:52:d9:07:f3:ea:86:ea:9f:dd:dd:ef:64:4c:1a:
                    4e:5d:bd:46:08:3a:2f:4c:f0:28:93:50:d1:58:bf:
                    47:f1:6b:00:a0:d9:a3:ab:83:dd:20:d7:0b:23:cf:
                    54:4c:7c:69:6a:77:67:59:de:e2:51:5f:a4:8f:bc:
                    5a:84:1d:22:25:4a:19:a1:4d:1a:61:c7:ef:00:8c:
                    1f:3a:f6:9d:60:5c:28:8d:50:13:80:e0:84:1e:8b:
                    c2:89:c1:f7:b7:a3:69:63:45:ef:e0:9f:4f:a3:9f:
                    ab:bf:ee:39:de:17:57:62:0e:76:55:90:c8:92:1c:
                    0d:2c:27:e6:eb:27:ca:21:3d:09:10:2a:3a:ec:d6:
                    cc:e9:48:9b:f1:21:1f:61:39:5e:6e:37:53:be:08:
                    8a:ce:09:a6:3e:67:f7:ac:ab:67:08:8f:33:8c:e2:
                    3d:a5:20:68:ee:16:c9:b2:42:33:6c:22:65:67:4e:
                    f7:ce:55:0f:76:e8:76:6c:6b:60:2a:b9:b1:70:80:
                    41:29:c1:12:7a:d1:b5:94:2e:50:a4:89:23:c7:28:
                    77:13:87:c7:0d:68:82:03:db:cf:d8:17:be:22:af:
                    eb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:87:12:B1:E4:50:CC:0C:96:BD:F1:F1:98:DB:AA:73:3C:8F:87:93
            X509v3 Authority Key Identifier:
                keyid:70:D2:D0:69:19:95:7C:6A:A6:77:1C:F5:5D:B9:6F:C7:EF:E7:89:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/cNLQaRmVfGqmdxz1Xblvx-_niaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNLQaRmVfGqmdxz1Xblvx-_niaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148B19/11030AF4855611EC9AB82E21C4F9AE02/5E6AFDFC855A11ECA39EB244C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.14.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:fe:c1:02:ca:9b:d4:42:ef:da:89:8b:9b:e6:e9:74:20:a5:
         cb:fc:76:36:0b:c5:5c:eb:6a:bd:d8:a6:d8:45:a3:60:71:d4:
         b3:4a:45:cb:fd:6c:26:20:24:e5:61:46:b9:68:c8:4a:34:38:
         d9:91:13:18:e8:7c:e2:76:fe:e3:2d:12:b1:7d:05:21:bb:74:
         48:ac:32:b9:82:eb:f1:b7:16:35:64:95:87:10:56:d9:77:56:
         fc:c6:d5:32:b0:cc:b4:1a:86:3e:7d:8b:33:91:27:35:0d:41:
         60:1e:65:db:96:29:9e:ee:ad:ab:d0:20:91:e6:66:d4:cb:ee:
         f3:33:da:c1:5b:a8:8b:45:a6:aa:50:56:da:7a:c4:a1:fa:dc:
         93:27:f5:70:e2:a9:5b:ae:db:35:3f:0c:63:17:a4:7d:1d:cf:
         7d:06:65:5a:ae:1e:87:64:bf:49:0a:b6:de:e0:f9:dd:20:1c:
         45:6d:9f:73:69:8e:d6:e0:76:55:98:0a:06:4e:cc:3e:8a:f8:
         7e:73:e9:f6:39:04:2e:17:88:65:76:9a:e5:06:69:bd:46:80:
         72:e1:37:e2:c3:86:59:6f:9f:d1:c3:c6:1f:38:f2:44:37:43:
         37:0a:0f:bb:c3:fd:80:7b:a3:6f:2e:2a:8a:e6:c9:74:35:f9:
         1b:06:35:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 05:11:33 2026 by rpki-client