Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/5C3C24DA7C3A11F19502E96961A30FBC.roa
File:                     5C3C24DA7C3A11F19502E96961A30FBC.roa (raw, json)
Hash identifier:          +77vCVU7zK9eDrNIk/k034MQetemZz3M59FaR+fpfgs=
Subject key identifier:   8A:2D:75:7A:FE:CE:57:50:C6:38:9F:E5:0B:D6:5C:BD:2B:B2:E0:2A
Certificate issuer:       /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial:       36A9
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/5C3C24DA7C3A11F19502E96961A30FBC.roa
Signing time:             Wed 30 Sep 2026 16:17:25 +0000
ROA not before:           Wed 30 Sep 2026 16:17:25 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     55847
IP address blocks:        14.139.1.0/24 maxlen: 24
                          14.139.2.0/24 maxlen: 24
                          14.139.7.0/24 maxlen: 24
                          14.139.40.0/24 maxlen: 24
                          14.139.43.0/24 maxlen: 24
                          14.139.45.0/24 maxlen: 24
                          14.139.46.0/24 maxlen: 24
                          14.139.47.0/24 maxlen: 24
                          14.139.128.0/24 maxlen: 24
                          14.139.196.0/24 maxlen: 24
                          180.149.50.0/24 maxlen: 24
                          180.149.53.0/24 maxlen: 24
                          180.149.58.0/24 maxlen: 24
                          2405:8a00:8000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
                          rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 15:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13993 (0x36a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
        Validity
            Not Before: Sep 30 16:17:25 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6abd3614-e1ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6c:d1:5c:55:ca:fb:d1:03:c2:e8:d8:5c:f9:
                    ce:ae:43:3f:70:a4:bc:7f:7d:64:4c:eb:17:2a:20:
                    68:7c:01:8e:5c:02:40:dc:f9:6c:c0:41:9d:09:26:
                    64:78:d0:ed:2f:29:32:90:eb:65:fb:c0:5b:cb:a1:
                    79:2b:4a:2f:82:3a:7e:eb:1a:1c:23:b3:d8:91:a5:
                    d6:82:42:23:50:94:fd:98:64:79:d3:46:e9:a5:04:
                    25:c1:44:fd:b9:e6:9a:4b:5d:06:1c:b8:f9:a5:eb:
                    d9:1f:8e:05:0b:f8:d4:99:24:b8:d7:b2:9a:56:64:
                    c8:70:2f:81:d5:09:3b:81:ed:06:db:a2:d3:0d:21:
                    38:61:70:8e:44:9d:6c:99:c1:e0:e4:3a:ca:e1:40:
                    73:50:be:bf:31:1f:71:e0:39:60:3b:1d:71:81:c2:
                    ed:88:7b:b7:5e:60:ab:0a:50:7a:33:fe:0b:23:69:
                    bc:13:e5:26:5c:69:6a:ad:11:15:41:a6:02:61:a7:
                    b1:2b:67:89:c6:db:00:83:cf:d7:1c:4d:25:ff:a4:
                    b5:df:7a:04:f9:de:46:b6:91:64:36:80:0b:b7:46:
                    0e:0e:ac:71:2b:2d:91:97:2e:01:a8:15:e9:ab:d7:
                    a9:d1:9e:22:ab:f3:83:7e:fc:f5:ce:2d:52:2f:b5:
                    3b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2D:75:7A:FE:CE:57:50:C6:38:9F:E5:0B:D6:5C:BD:2B:B2:E0:2A
            X509v3 Authority Key Identifier:
                keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/5C3C24DA7C3A11F19502E96961A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.139.1.0-14.139.2.255
                  14.139.7.0/24
                  14.139.40.0/24
                  14.139.43.0/24
                  14.139.45.0-14.139.47.255
                  14.139.128.0/24
                  14.139.196.0/24
                  180.149.50.0/24
                  180.149.53.0/24
                  180.149.58.0/24
                IPv6:
                  2405:8a00:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:0d:ff:e9:2c:79:09:a2:e1:1f:b2:c0:f6:40:17:59:75:ba:
         ed:10:f9:ce:6f:91:a7:ea:c4:9a:25:35:c6:17:b4:9e:08:a2:
         a0:b5:3d:e9:10:83:ac:84:ea:f1:18:eb:ee:8c:76:59:1d:98:
         f3:4c:74:2a:6e:5a:07:ec:82:09:6d:7f:fc:81:46:b6:02:dd:
         a4:bb:7e:2a:9c:8b:3b:bf:4b:a3:ea:0f:92:fe:de:93:65:ef:
         b1:55:c3:72:77:fe:3d:00:3f:90:c4:ac:b4:ae:18:54:aa:15:
         3a:ce:5d:8e:07:c6:35:7e:ab:f9:7f:1f:1e:03:cb:77:0d:33:
         ad:c3:f3:8c:41:f2:69:9c:93:eb:44:48:f2:01:cd:1c:a7:a6:
         ec:c4:06:56:1e:ed:66:2b:50:ae:3e:ab:f6:40:c4:ae:99:b4:
         66:cd:6b:d3:94:59:74:ac:7d:7e:77:be:3f:50:08:c7:c4:9e:
         81:6d:f5:7b:91:2e:ef:e4:be:e9:87:5f:4c:86:f0:b4:cf:be:
         d0:63:3e:e4:e1:3d:59:05:f5:c1:3f:c1:78:ff:3d:13:b6:de:
         c6:98:24:e6:c5:e5:59:65:19:a6:3f:50:8f:96:96:0d:fd:42:
         49:33:88:b4:99:20:d4:6d:6a:af:12:d1:78:bd:fe:04:94:5a:
         59:b4:87:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:40:00 2026 by rpki-client