Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/ECC070D01A0A11F0AEC42962C4F9AE02.roa
File:                     ECC070D01A0A11F0AEC42962C4F9AE02.roa (raw, json)
Hash identifier:          DPdkhkUsxpDY/+HHq/rxykHDUL8BpBI7c/3zBZPGSZo=
Subject key identifier:   81:FA:C4:AA:86:B4:39:B2:4D:33:A6:90:88:D9:25:E0:F5:00:D2:33
Certificate issuer:       /CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
Certificate serial:       147E
Authority key identifier: B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/ECC070D01A0A11F0AEC42962C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:56:09 +0000
ROA not before:           Tue 10 Jun 2025 17:18:38 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     152700
IP address blocks:        14.192.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl
                          rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:59:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5246 (0x147e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E93F, serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
        Validity
            Not Before: Jun 10 17:18:38 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a46198-57ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:64:2f:63:b4:68:fb:56:45:18:11:36:ce:ea:
                    1b:8c:1c:12:8b:76:3e:5b:d6:ee:db:1d:24:09:a0:
                    58:91:bc:10:a3:56:9b:9e:97:82:2a:2b:3a:f9:bd:
                    51:43:09:12:ca:0a:58:d8:7d:14:74:56:6a:8b:ed:
                    bd:b1:7d:87:b1:13:67:63:86:b8:a1:9d:44:cb:44:
                    0e:9d:28:67:a7:71:1c:79:39:07:ba:c6:a0:fa:4b:
                    77:0e:d9:ae:30:56:16:bf:92:75:35:71:26:7d:30:
                    36:b5:a6:11:1e:32:d1:85:03:0f:03:5a:37:45:e8:
                    c8:1e:f7:e4:ac:89:7b:e2:3b:6b:27:da:38:5a:8b:
                    53:e5:ed:f4:f0:7c:36:2c:47:b6:e8:d2:d4:72:57:
                    de:5d:43:42:76:7a:e3:8f:fe:ef:57:85:1d:79:77:
                    38:d3:5f:59:9b:f1:56:ad:03:57:26:86:2c:da:bb:
                    26:8d:9b:8a:f7:64:25:a0:47:f0:c4:8b:58:5e:28:
                    94:57:b5:95:24:da:4b:8e:67:9f:53:44:cc:60:c6:
                    14:29:8f:93:0f:6d:37:a4:a2:9c:83:47:1f:b3:54:
                    83:55:e5:f9:7e:60:84:36:55:05:d4:15:b4:8f:ca:
                    ec:84:de:33:54:bb:d3:dd:6b:40:e5:c9:19:78:8b:
                    89:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FA:C4:AA:86:B4:39:B2:4D:33:A6:90:88:D9:25:E0:F5:00:D2:33
            X509v3 Authority Key Identifier:
                keyid:B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/ECC070D01A0A11F0AEC42962C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:d9:80:57:c5:83:08:c4:0b:57:76:95:47:c3:38:bf:88:03:
         4f:a2:68:1e:4a:c9:82:46:ec:4a:b5:fd:07:27:f1:bb:65:13:
         ba:95:49:93:52:31:f2:4c:03:0b:32:43:03:15:aa:0d:e2:55:
         c7:85:e2:4f:67:e1:aa:74:3c:0e:f5:a2:6c:51:18:84:68:fa:
         89:35:59:8c:48:bd:7f:7a:10:5d:cb:54:ca:4f:5e:94:6f:03:
         8c:e1:41:cd:e8:47:47:3f:57:02:69:e3:a8:f9:b0:13:81:e4:
         2b:b2:e5:0a:21:35:0f:68:5f:68:0e:ba:47:3d:a7:a8:d6:12:
         4b:1d:b8:8d:17:26:29:b3:39:99:3e:f5:fd:06:7f:64:68:ef:
         19:ec:6b:08:70:ff:e7:81:0c:d2:42:64:e5:00:85:0b:52:d8:
         a1:d1:82:1c:9e:ed:a6:51:99:bf:d3:5b:00:23:8a:36:7c:eb:
         b9:49:4e:61:ff:48:2e:8c:27:6e:00:cd:e5:9d:bb:dd:cd:88:
         01:92:63:1c:a4:2e:a0:9d:41:90:5f:3a:2f:13:6a:3d:a7:77:
         ef:f2:29:67:f1:7f:cf:a6:42:26:85:b0:8e:02:44:33:69:b5:
         d5:0d:20:80:38:ee:45:0e:fa:15:4a:ff:f9:8b:a6:02:9d:01:
         62:11:47:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:52:23 2026 by rpki-client