Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/3C916EA69A7D11EF8450BB33C4F9AE02.roa
File:                     3C916EA69A7D11EF8450BB33C4F9AE02.roa (raw, json)
Hash identifier:          xceZ1vTKlG5TWyiki18k0yU/v2hchYJ2nUzu0cKrYzs=
Subject key identifier:   A6:04:B4:CB:01:5A:62:BC:17:D0:0D:00:FB:AC:41:AD:2E:5D:67:AE
Certificate issuer:       /CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
Certificate serial:       14CB
Authority key identifier: B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/3C916EA69A7D11EF8450BB33C4F9AE02.roa
Signing time:             Tue 30 Jun 2026 17:21:06 +0000
ROA not before:           Tue 30 Jun 2026 17:21:06 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     395793
IP address blocks:        14.192.49.0/24 maxlen: 24
                          14.192.50.0/24 maxlen: 24
                          14.192.51.0/24 maxlen: 24
                          103.78.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl
                          rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Jul 2026 16:57:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5323 (0x14cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E93F, serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
        Validity
            Not Before: Jun 30 17:21:06 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a43fb02-0109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4a:87:e3:70:0e:4f:6c:38:d2:e7:8d:42:c0:
                    3c:b1:d2:0e:0c:fd:21:3b:11:dc:04:5c:f3:8b:c3:
                    48:bb:e6:c7:c6:d2:3c:62:99:7b:62:dd:8b:f0:ca:
                    72:28:83:57:a2:cb:d1:4c:f0:80:86:10:1d:8e:e6:
                    e0:fc:88:96:47:61:72:98:1a:ed:9a:61:42:d8:69:
                    10:11:ab:1f:57:f0:9d:3e:ba:87:c2:60:89:2b:d6:
                    23:b6:c4:5f:bc:25:e4:42:15:a9:23:a1:d9:79:c9:
                    6c:88:9c:1a:45:04:70:0a:bc:56:41:18:cc:ea:89:
                    18:d1:3a:3e:57:23:7d:9c:fc:5d:56:e1:b1:f5:27:
                    fd:d3:d5:1a:44:3a:dc:c9:66:61:6f:13:9b:ef:11:
                    12:5c:04:55:59:20:fe:43:2e:eb:32:a7:11:67:a7:
                    15:e0:1c:d2:33:dd:2e:7c:71:7b:d6:d5:62:36:c1:
                    43:94:53:b8:b7:6f:e2:dc:e3:bb:26:14:d5:aa:cf:
                    3d:61:91:7c:e9:a3:77:1c:b1:cc:ec:69:8a:0d:36:
                    71:62:c0:59:e6:6f:e5:3e:c8:a6:ab:39:5b:36:77:
                    6e:0f:33:15:aa:64:dd:46:a9:d3:d2:d0:77:21:23:
                    f9:4d:b7:28:86:dc:78:81:7e:e8:29:23:ed:57:d8:
                    e8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:04:B4:CB:01:5A:62:BC:17:D0:0D:00:FB:AC:41:AD:2E:5D:67:AE
            X509v3 Authority Key Identifier:
                keyid:B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/3C916EA69A7D11EF8450BB33C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.49.0-14.192.51.255
                  103.78.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:3d:31:b8:48:f9:ac:06:8c:2c:88:72:8d:3d:af:71:a3:91:
         88:ac:cd:e6:0e:bc:0d:de:e7:ce:3e:3e:2e:f8:0f:e7:9f:34:
         c3:0b:bd:4c:cf:c6:f0:01:d5:93:e6:4a:b1:1d:a7:5d:5a:78:
         df:49:3f:fa:6a:70:ba:0e:55:6b:b4:52:28:69:0a:f9:a8:36:
         c0:3b:94:7c:67:65:85:fb:32:36:ae:1e:52:ca:9a:03:af:d3:
         b3:6d:32:e4:a6:98:32:16:ff:fc:c1:a0:9e:55:66:85:bd:8c:
         66:2b:fc:70:5c:39:ac:dc:a3:9b:23:0b:fc:75:ea:ed:98:a0:
         f9:af:35:e3:06:db:16:66:8d:66:1b:e3:ed:85:59:6a:4b:b1:
         68:fe:cd:f3:81:07:e5:6d:4d:99:f3:8a:61:4a:24:b4:c8:42:
         af:ba:3a:4a:f7:d5:c8:38:a6:de:c0:74:48:73:c2:d0:b1:f6:
         b6:e2:b4:18:24:8f:8f:37:90:54:54:d5:99:6b:48:f2:65:40:
         47:4e:5f:dc:b6:21:57:ac:15:54:a9:bf:b6:e5:77:b9:9b:21:
         27:d5:64:26:1e:2b:4b:99:8b:d2:ce:c0:96:b9:1e:6a:9c:a0:
         0c:a5:89:20:27:33:34:21:0f:b6:f8:33:78:19:0e:b2:d9:e8:
         bd:2f:38:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:18:07 2026 by rpki-client