Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/4F892B3E79E211F186F7A31866A30FBC.roa
File:                     4F892B3E79E211F186F7A31866A30FBC.roa (raw, json)
Hash identifier:          Grkkrl99VNi5MICWLKTFyVceKxzaNnh3d7iazSAthD0=
Subject key identifier:   A3:E0:EB:33:2B:9E:31:A4:AD:D9:B2:90:60:46:B4:9D:AE:AF:49:C2
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       1107
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/4F892B3E79E211F186F7A31866A30FBC.roa
Signing time:             Fri 28 Aug 2026 19:39:41 +0000
ROA not before:           Fri 28 Aug 2026 19:39:41 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     139879
IP address blocks:        14.192.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 19:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4359 (0x1107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Aug 28 19:39:41 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a91e3fd-2faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:96:dc:ff:50:1a:81:7b:8d:5b:0f:c5:f4:9a:
                    37:d2:b8:ea:33:ef:80:b7:92:73:f9:81:99:6e:c5:
                    f0:6b:f8:d6:72:7f:e3:9f:df:2c:1e:5c:74:15:97:
                    81:a4:5d:80:00:bd:2c:9a:43:61:8c:09:87:eb:26:
                    80:20:40:87:2b:01:48:c1:1b:c8:ad:a0:4d:86:df:
                    c9:c1:c7:69:dd:67:94:01:b7:87:bc:d8:41:a5:b1:
                    2f:50:45:c7:94:c5:04:05:fc:14:43:5c:53:53:14:
                    e4:b3:aa:a5:46:56:66:8d:e6:59:50:69:51:df:d3:
                    db:71:1b:42:61:8c:f9:e1:9a:a4:ba:d2:23:9e:f7:
                    57:3e:3d:ee:b8:fc:ab:66:4d:96:a8:37:4e:e3:df:
                    15:ce:6b:3c:85:64:d6:e3:6e:71:0a:de:93:ea:11:
                    6c:90:be:73:37:46:4f:2c:02:f9:b3:e6:36:b5:e8:
                    c8:62:26:0d:e2:ba:93:f7:8e:bb:3f:2f:50:4c:85:
                    f1:be:05:2e:71:07:11:f7:ce:f8:7d:d4:78:b9:8f:
                    61:0f:6b:9d:d5:a4:39:0d:5c:7d:16:72:93:02:0f:
                    1b:f7:22:59:22:ab:ca:a2:62:86:f6:13:0b:d6:c2:
                    84:56:5f:ef:f6:10:f0:2b:24:9a:4c:5a:d9:4e:3f:
                    30:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E0:EB:33:2B:9E:31:A4:AD:D9:B2:90:60:46:B4:9D:AE:AF:49:C2
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/4F892B3E79E211F186F7A31866A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:6b:f8:bf:c3:91:d6:64:a9:39:62:59:4d:40:ac:b4:a9:9c:
         c5:26:b6:3c:22:2e:7a:0d:4d:96:1c:0e:be:33:b1:57:fd:3a:
         16:a2:02:69:75:f7:56:bb:2f:c5:c6:96:64:33:94:c4:1e:38:
         d7:5a:30:98:a5:26:69:1f:0f:dc:5a:fe:2e:39:e9:ea:2d:a6:
         b8:af:e1:48:d0:98:37:88:e2:cf:ff:7e:80:01:a4:a6:f1:f6:
         a8:e0:fa:69:73:a2:f7:0a:71:2d:2d:de:42:05:68:5e:99:89:
         1e:e2:9b:e7:f1:4e:0e:08:77:7d:9c:2e:2b:8c:5c:71:23:9a:
         7a:ff:25:1c:f4:fc:29:45:82:f8:9d:7b:1d:f7:a0:4e:82:4f:
         35:26:50:f5:7a:6c:3b:20:8a:14:63:e7:6f:40:ea:de:72:44:
         b1:4d:5b:2d:27:03:57:ca:b7:73:b9:d1:e1:b5:5c:6c:85:c4:
         c9:c8:6f:07:e4:85:ae:20:b5:17:03:e1:6b:ba:30:4b:ce:d2:
         80:e2:26:47:75:d5:3f:f8:23:05:3d:d1:17:70:35:b9:90:5f:
         5c:65:45:89:09:45:88:b6:d3:08:9b:75:36:a7:35:64:a6:c1:
         27:77:5c:1c:3f:a3:bc:fe:f6:69:3d:c0:65:16:3b:92:a5:01:
         6c:22:de:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 07:04:03 2026 by rpki-client