Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/3205C0F8D37F11F1BE4C081A0166CEF9.roa
File:                     3205C0F8D37F11F1BE4C081A0166CEF9.roa (raw, json)
Hash identifier:          Ewur4J8TKTh5tzXNX6xmApdhHUaBRrFE8N/IRIPSVBE=
Subject key identifier:   6E:B2:2E:79:74:AA:01:05:32:28:E8:8E:2D:B8:30:46:20:E8:3E:E1
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       11FC
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/3205C0F8D37F11F1BE4C081A0166CEF9.roa
Signing time:             Thu 29 Oct 2026 09:57:48 +0000
ROA not before:           Thu 29 Oct 2026 09:57:48 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     139879
IP address blocks:        14.192.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Nov 2026 22:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4604 (0x11fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Oct 29 09:57:48 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6ae3189c-c305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:af:f7:c1:0b:32:e0:21:b0:46:4d:c8:33:a5:
                    7a:d7:74:2a:11:86:e9:a1:b5:29:f4:fa:66:39:98:
                    9f:19:77:9c:72:26:cd:3e:91:15:8d:ee:09:2c:59:
                    fd:33:73:b6:db:36:55:88:19:99:d5:98:b9:0b:11:
                    b4:73:81:a5:d9:ee:f8:d4:a5:be:18:89:d6:1d:f0:
                    4a:f0:01:1b:54:36:fd:4e:02:95:69:07:9c:14:7c:
                    aa:b0:5e:cf:d9:38:65:da:79:47:39:46:c9:55:63:
                    f4:2f:f6:79:24:12:f9:2a:80:70:3e:c7:dd:9b:2c:
                    36:59:ec:65:68:43:d6:8a:3d:26:83:77:db:fd:a3:
                    a0:b3:79:a4:db:90:16:86:d1:97:ac:b8:b4:ce:14:
                    76:95:21:a7:0a:2b:02:ab:7f:c5:fc:8f:b4:c6:c2:
                    cd:71:a9:88:a9:1a:81:74:d6:b8:e4:70:20:4f:6d:
                    79:3c:20:d7:85:5b:16:a5:fe:45:3e:e2:a6:6b:d8:
                    e7:d7:47:72:97:be:ad:a7:02:f1:3c:b4:60:f2:43:
                    bc:c8:7c:57:d9:4b:59:dd:3c:23:1f:bf:1c:31:a2:
                    54:50:a6:d9:aa:f8:b4:e1:b6:11:39:b4:f4:82:cd:
                    08:5c:70:cf:eb:12:08:b3:00:0f:82:18:6a:e8:40:
                    8a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B2:2E:79:74:AA:01:05:32:28:E8:8E:2D:B8:30:46:20:E8:3E:E1
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/3205C0F8D37F11F1BE4C081A0166CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:ba:b1:e1:d8:33:29:eb:1b:8c:fc:ee:95:b8:5d:cc:79:21:
         a3:61:c8:f6:dd:4b:ec:18:de:4a:ca:8f:71:e7:68:2f:4f:6d:
         6d:b7:a5:72:e4:9c:48:1c:4f:ca:ae:a2:5c:70:b6:e9:fb:53:
         1d:40:78:8f:90:9b:9d:38:e3:ce:c7:bc:65:41:b4:6a:81:a9:
         42:49:b7:12:6b:c6:03:87:c5:f0:dc:dd:35:65:a0:a2:b5:82:
         d9:6c:00:cf:7b:ba:1d:6a:62:17:ee:87:57:ed:35:74:29:43:
         c9:7a:f0:a8:68:e7:f5:e0:55:6f:44:fa:5c:04:68:23:43:23:
         1c:22:ff:6b:d5:bd:cf:00:97:fc:57:b3:cd:f8:bc:3e:b5:af:
         08:d1:77:da:0e:6e:f1:90:a9:52:d1:06:2c:c5:52:d2:c2:61:
         0c:01:36:9a:f2:d3:4e:3c:0b:b0:a0:35:95:1b:bf:35:8a:ca:
         49:10:05:67:dd:8c:c6:41:92:f6:33:0c:94:7b:0b:90:06:34:
         90:c9:ca:42:5e:a9:41:09:b3:fb:a2:e9:23:25:47:1e:79:c2:
         c5:ff:b1:11:e7:42:67:44:73:51:8b:e1:b3:3a:47:60:d3:80:
         01:8a:5d:3b:f0:7f:51:8a:5b:17:ff:18:c8:df:46:9a:36:bd:
         80:b3:37:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 01:44:34 2026 by rpki-client