Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/56C4FAF42D4511EAB70F247AC4F9AE02.roa
File:                     56C4FAF42D4511EAB70F247AC4F9AE02.roa (raw, json)
Hash identifier:          eE89PGe/2iXoWPgaTFIDnebqRit5cWEOVZbQe/DuWbY=
Subject key identifier:   64:4F:54:B9:40:2E:41:9C:4E:21:94:A7:F2:F2:FC:AE:BE:E7:BD:4C
Certificate issuer:       /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial:       36A6
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/56C4FAF42D4511EAB70F247AC4F9AE02.roa
Signing time:             Wed 30 Sep 2026 16:17:17 +0000
ROA not before:           Wed 30 Sep 2026 16:17:17 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     4758
IP address blocks:        14.139.15.0/24 maxlen: 24
                          2405:8a00:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
                          rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 Oct 2026 15:18:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13990 (0x36a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
        Validity
            Not Before: Sep 30 16:17:17 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abd360d-f102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bb:13:2a:18:9d:b2:f3:91:3f:d4:e0:43:37:
                    a5:70:a9:8d:61:2f:a0:dc:f2:ae:94:5d:83:84:c5:
                    ca:d5:06:91:d1:08:41:00:19:56:34:9d:eb:3e:01:
                    a9:78:f6:d8:9f:3e:c7:96:e2:ec:21:94:28:63:42:
                    eb:ba:dc:e2:13:07:d2:3a:e2:ee:0e:ff:01:16:5d:
                    89:53:3e:d5:5c:91:f8:7b:66:05:2e:0d:16:09:81:
                    15:c8:b5:cd:cc:df:ff:61:6c:80:a9:13:48:3b:87:
                    ad:4f:24:3e:92:ba:ea:9a:10:aa:e6:c2:ea:ca:74:
                    ad:1a:d6:01:28:19:ce:51:65:aa:78:15:f9:f7:18:
                    bb:db:1d:39:1b:16:6a:d9:fa:eb:6a:ae:fd:d5:de:
                    0e:01:d3:d0:22:61:08:c7:07:43:36:47:aa:b5:78:
                    f0:b0:1f:bb:03:24:a5:d9:d7:f6:fe:b1:c8:01:ce:
                    09:a6:2f:d4:e3:48:f6:85:72:00:52:ad:ad:db:43:
                    6e:37:ab:e4:62:b8:aa:62:12:c8:97:de:57:a2:3f:
                    f2:1c:de:32:a5:e8:fb:6f:df:b7:cd:cc:81:91:db:
                    1f:4d:49:5a:8d:65:5d:6f:c1:bf:f8:e5:23:a4:ba:
                    ae:d3:a7:68:50:72:85:55:b6:8e:1e:c5:19:c8:c5:
                    13:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4F:54:B9:40:2E:41:9C:4E:21:94:A7:F2:F2:FC:AE:BE:E7:BD:4C
            X509v3 Authority Key Identifier:
                keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/56C4FAF42D4511EAB70F247AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.139.15.0/24
                IPv6:
                  2405:8a00:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:75:f6:1a:06:87:52:69:ac:4b:a6:d1:3c:e7:df:43:c7:a2:
         f7:f4:db:86:24:88:61:a8:6c:db:09:96:7b:f4:f5:ca:7b:40:
         df:dd:6d:b4:70:51:01:40:68:cd:3d:88:24:38:96:d7:69:e1:
         ed:ff:3a:a6:af:89:c3:5f:9a:30:d5:8c:24:13:52:e5:6e:4e:
         b6:bb:d1:6b:66:03:c0:fd:6c:7e:4f:36:40:23:59:5d:5a:29:
         8b:2d:69:e7:72:bf:f7:6a:99:38:f7:5e:a0:99:52:da:6d:18:
         66:b6:65:da:ec:42:fa:40:2e:36:b2:ae:30:65:71:c3:8c:60:
         4f:48:bd:37:c9:95:ca:5b:56:a7:71:52:69:27:20:a0:39:d6:
         d6:9e:fa:43:22:7a:df:a1:a1:59:69:88:26:01:b9:5b:4e:d5:
         7a:01:64:70:c8:a4:e4:5e:a8:5d:ff:81:74:5e:24:62:ab:d8:
         a1:5c:32:fc:50:4c:24:97:67:81:ca:66:9c:57:c1:32:cd:d0:
         42:be:3f:f5:28:df:0b:c8:73:86:54:77:75:9a:78:1b:d3:ae:
         22:3e:06:8e:6a:3b:7c:18:5d:e0:22:5d:d1:23:f9:76:2f:f3:
         59:e8:1f:a3:b6:9b:62:1b:46:1b:b1:3d:63:9b:55:9a:a4:c7:
         a3:60:6a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 15:16:54 2026 by rpki-client