Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/5C3C24DA7C3A11F19502E96961A30FBC.roa
File:                     5C3C24DA7C3A11F19502E96961A30FBC.roa (raw, json)
Hash identifier:          T7NOwWvyJhEbpJwEubb2URocPtjhrATKrc8a51jyrd8=
Subject key identifier:   F1:73:84:BA:49:7E:63:BB:ED:B8:51:09:E3:9A:87:06:E3:85:91:62
Certificate issuer:       /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial:       365E
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/5C3C24DA7C3A11F19502E96961A30FBC.roa
Signing time:             Fri 10 Jul 2026 08:35:52 +0000
ROA not before:           Fri 10 Jul 2026 08:35:52 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     55847
IP address blocks:        14.139.1.0/24 maxlen: 24
                          14.139.2.0/24 maxlen: 24
                          14.139.7.0/24 maxlen: 24
                          14.139.40.0/24 maxlen: 24
                          14.139.43.0/24 maxlen: 24
                          14.139.45.0/24 maxlen: 24
                          14.139.46.0/24 maxlen: 24
                          14.139.47.0/24 maxlen: 24
                          14.139.128.0/24 maxlen: 24
                          14.139.196.0/24 maxlen: 24
                          180.149.50.0/24 maxlen: 24
                          180.149.53.0/24 maxlen: 24
                          180.149.58.0/24 maxlen: 24
                          2405:8a00:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
                          rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 15:22:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13918 (0x365e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
        Validity
            Not Before: Jul 10 08:35:52 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a50aee8-efdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b2:08:84:db:22:25:98:aa:36:1b:a2:93:a8:
                    67:3d:b3:7f:43:a1:ec:4d:62:7a:ca:6b:f3:19:be:
                    18:b6:d6:0a:0e:a2:82:23:87:6c:31:1b:0f:e7:aa:
                    11:57:ee:7c:60:fd:8c:95:cf:8e:80:c4:8e:54:f4:
                    e0:c2:67:e7:67:6c:c1:62:8f:f2:d7:80:95:1e:17:
                    eb:73:a1:15:4b:b2:e9:c6:81:cc:80:43:be:42:06:
                    0d:b0:a8:7c:64:77:11:fb:e9:99:d8:9e:6e:56:b3:
                    b7:ce:67:93:97:cd:58:07:f4:2b:5d:72:50:20:25:
                    6d:f7:25:29:4d:2b:2b:7c:d7:e1:9d:8f:ac:33:87:
                    60:e2:60:9b:9f:4c:24:eb:32:ea:b4:a1:19:9f:e6:
                    fe:68:51:ad:13:6e:8d:e3:7e:d2:fe:cf:15:35:e0:
                    30:92:85:b3:03:69:f9:40:a5:7f:10:f0:19:30:f8:
                    02:12:3b:aa:cf:6d:a4:24:7c:ad:18:51:27:02:9a:
                    5a:52:04:96:8b:6d:99:50:3f:0a:8c:d7:30:8d:2e:
                    52:8e:52:4f:5e:41:65:78:7c:b5:42:b9:89:07:3c:
                    75:74:ff:43:2d:68:ca:e2:c9:09:af:da:25:08:29:
                    c1:13:f4:2b:b2:04:e3:34:6f:82:15:d3:ac:76:1a:
                    1a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:73:84:BA:49:7E:63:BB:ED:B8:51:09:E3:9A:87:06:E3:85:91:62
            X509v3 Authority Key Identifier:
                keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/5C3C24DA7C3A11F19502E96961A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.139.1.0-14.139.2.255
                  14.139.7.0/24
                  14.139.40.0/24
                  14.139.43.0/24
                  14.139.45.0-14.139.47.255
                  14.139.128.0/24
                  14.139.196.0/24
                  180.149.50.0/24
                  180.149.53.0/24
                  180.149.58.0/24
                IPv6:
                  2405:8a00:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:8a:66:bb:d8:75:f6:0b:86:8c:8a:37:5c:25:57:b4:9d:8c:
         c3:99:e0:dc:ab:b4:39:9e:80:71:ef:5b:e1:43:7e:f4:a0:b6:
         d2:0f:cc:f3:a3:df:ee:f2:6b:de:25:de:3d:e5:3e:f1:e6:3c:
         f0:4c:1e:d0:f5:45:c1:50:bf:cd:10:f2:f6:30:4a:1e:4c:07:
         eb:1d:d4:e3:ae:7c:db:a6:62:96:2f:23:53:5e:20:f2:53:ec:
         cb:97:d0:02:dc:f7:35:39:23:30:04:e8:32:88:22:8b:04:44:
         e9:9f:39:f1:32:6d:f0:62:bc:4c:85:c0:38:8f:80:f8:75:11:
         fe:8c:56:f5:e0:f4:a0:48:e6:5e:45:16:32:40:87:ed:39:23:
         67:ca:b7:29:19:c5:02:a7:3b:21:29:98:50:43:38:0b:3e:f5:
         56:88:50:3f:0e:c0:fd:67:c7:dd:fa:1f:40:f8:77:89:1d:c3:
         87:94:38:1e:08:82:00:c3:c6:69:13:4e:1e:c1:4a:45:f0:de:
         1e:e8:6d:be:4f:c5:c9:1c:05:cd:c8:eb:9c:23:db:3f:ea:bd:
         68:b9:96:5f:e2:fa:58:96:7a:0e:c6:fb:ad:03:44:c5:d4:36:
         45:b9:cb:3e:d2:b2:7a:19:d9:d4:5c:d6:4f:36:28:46:0c:2a:
         d0:b2:ea:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 09:18:30 2026 by rpki-client