Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/DC75E9A4B4E511F1A38ADEFD3811F970.roa
File:                     DC75E9A4B4E511F1A38ADEFD3811F970.roa (raw, json)
Hash identifier:          /JW9Vk0apJhTZwFqw6P9ComNZ+dwVYIIOxiI0EsMVuY=
Subject key identifier:   B9:24:9F:25:59:12:B8:73:89:FD:0C:75:5B:E5:48:1E:86:AE:70:0A
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       1152
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/DC75E9A4B4E511F1A38ADEFD3811F970.roa
Signing time:             Sun 20 Sep 2026 20:31:17 +0000
ROA not before:           Sun 20 Sep 2026 20:31:17 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     133933
IP address blocks:        14.192.130.0/24 maxlen: 24
                          14.192.132.0/24 maxlen: 24
                          14.192.136.0/24 maxlen: 24
                          14.192.140.0/24 maxlen: 24
                          14.192.141.0/24 maxlen: 24
                          14.192.146.0/24 maxlen: 24
                          14.192.147.0/24 maxlen: 24
                          14.192.148.0/24 maxlen: 24
                          14.192.152.0/24 maxlen: 24
                          14.192.157.0/24 maxlen: 24
                          14.192.159.0/24 maxlen: 24
                          103.20.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 14:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4434 (0x1152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Sep 20 20:31:17 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6ab04294-4022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:11:bf:ea:68:00:6e:da:cc:45:b6:b3:5d:54:
                    55:af:06:e3:bc:ff:b8:23:a6:26:16:28:c7:5f:90:
                    a1:ba:c5:d3:f1:f0:ec:b9:67:2b:05:bb:9b:3a:01:
                    a1:f0:ab:c1:c4:cf:f9:01:4f:65:8c:33:b0:8f:a5:
                    f6:fd:7e:7f:87:25:a0:7f:08:59:3e:84:12:53:a7:
                    da:a1:4e:1d:0c:71:bd:79:56:df:d0:e4:b0:98:dc:
                    a8:fa:5a:85:49:fd:5f:ea:c9:40:bd:22:05:24:ee:
                    32:fb:15:76:06:88:38:4d:f9:c0:ff:de:ad:a2:d5:
                    13:b3:9a:04:2f:cb:33:3e:8b:80:c4:9c:b8:e0:e9:
                    1a:27:ea:a4:a3:46:aa:48:06:a7:a3:19:1e:9e:69:
                    8c:b4:d5:dd:03:ec:ab:6b:a7:b3:4b:48:37:ec:36:
                    25:8d:58:65:0b:30:32:44:90:ef:a8:f4:a5:b2:54:
                    32:84:32:cf:b6:1a:4d:7c:13:ab:c6:25:27:94:ff:
                    dc:96:fc:1d:c4:42:e6:e5:af:fb:07:75:ff:00:f9:
                    5a:6a:2d:55:29:5f:d7:93:dc:0c:85:91:c5:ea:02:
                    c1:04:4c:ba:e6:83:ac:81:8f:ec:76:1c:be:45:8d:
                    24:fb:9b:73:03:4d:83:27:48:94:89:75:b6:19:79:
                    c7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:24:9F:25:59:12:B8:73:89:FD:0C:75:5B:E5:48:1E:86:AE:70:0A
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/DC75E9A4B4E511F1A38ADEFD3811F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.130.0/24
                  14.192.132.0/24
                  14.192.136.0/24
                  14.192.140.0/23
                  14.192.146.0-14.192.148.255
                  14.192.152.0/24
                  14.192.157.0/24
                  14.192.159.0/24
                  103.20.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:1f:15:17:ec:ba:63:77:c0:a6:b9:a2:5f:d8:8c:ff:59:ac:
         49:72:63:a4:41:9b:be:b6:58:14:e2:39:2e:f5:04:de:47:ea:
         f0:1c:ac:7f:a2:0e:8e:13:0e:35:b3:90:48:1a:da:93:0c:06:
         8d:38:7d:5b:d5:d9:53:4c:e9:c4:cc:bd:7e:5e:12:7b:e0:fa:
         b5:c8:19:12:a3:c6:37:1e:8b:79:42:8a:af:75:9e:8e:05:a6:
         9f:3b:4b:48:9b:7d:f7:de:bf:76:63:59:de:8c:9d:d4:09:b3:
         1c:ec:17:4c:5e:cf:e7:17:3f:0b:1a:dd:e8:7f:07:ad:aa:76:
         ff:6b:c8:f5:f1:82:c9:ee:ce:fc:ed:e9:51:c1:38:7b:38:c6:
         db:f5:01:84:6d:c5:b6:bf:11:7e:a3:bc:ba:72:ab:32:23:c1:
         b6:c1:92:69:34:d0:03:b7:cb:f9:0f:54:cf:06:10:bc:75:d3:
         4b:23:c3:09:76:1f:0f:11:7b:4a:43:0d:b9:a6:db:7e:cf:e9:
         3d:b2:78:bf:42:09:c9:6e:49:b7:91:af:86:c7:41:c0:b8:7b:
         35:9a:d7:92:e2:38:ec:66:a0:68:5b:f5:9f:c3:26:a7:0e:59:
         bd:1b:23:9d:f4:81:28:ae:01:cd:d3:db:b9:2e:0f:76:e2:3f:
         c7:e2:39:a3
-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgICEVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwQ0QxMTAvBgNVBAUTKDM4MTkzNzIwODIxRTA3RDY5MThFM0E3OUZCRTA4MjND
NjczMkUyNjQwHhcNMjYwOTIwMjAzMTE3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWIwNDI5NC00MDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxBG/6mgAbtrMRbazXVRVrwbjvP+4I6YmFijHX5ChusXT8fDsuWcrBbubOgGh
8KvBxM/5AU9ljDOwj6X2/X5/hyWgfwhZPoQSU6faoU4dDHG9eVbf0OSwmNyo+lqF
Sf1f6slAvSIFJO4y+xV2Bog4TfnA/96totUTs5oEL8szPouAxJy44OkaJ+qko0aq
SAanoxkenmmMtNXdA+yra6ezS0g37DYljVhlCzAyRJDvqPSlslQyhDLPthpNfBOr
xiUnlP/clvwdxELm5a/7B3X/APlaai1VKV/Xk9wMhZHF6gLBBEy65oOsgY/sdhy+
RY0k+5tzA02DJ0iUiXW2GXnHqQIDAQABo4ICmDCCApQwHQYDVR0OBBYEFLkknyVZ
Erhzif0MdVvlSB6GrnAKMB8GA1UdIwQYMBaAFDgZNyCCHgfWkY46efvggjxnMuJk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBDRC80NjcyM0YxRTg5
RUMxMUVBODFDMDRGMUVDNEY5QUUwMi9PQmszSUlJZUI5YVJqanA1LS1DQ1BHY3k0
bVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL09CazNJSUllQjlhUmpqcDUtLUNDUEdjeTRtUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUEwQ0QvNDY3MjNGMUU4OUVDMTFFQTgxQzA0RjFFQzRGOUFFMDIvREM3NUU5QTRC
NEU1MTFGMUEzOEFERUZEMzgxMUY5NzAucm9hMFcGCCsGAQUFBwEHAQH/BEgwRjBE
BAIAATA+AwQADsCCAwQADsCEAwQADsCIAwQBDsCMMAwDBAEOwJIDBAAOwJQDBAAO
wJgDBAAOwJ0DBAAOwJ8DBABnFIQwDQYJKoZIhvcNAQELBQADggEBALQfFRfsumN3
wKa5ol/YjP9ZrElyY6RBm762WBTiOS71BN5H6vAcrH+iDo4TDjWzkEga2pMMBo04
fVvV2VNM6cTMvX5eEnvg+rXIGRKjxjcei3lCiq91no4Fpp87S0ibfffev3ZjWd6M
ndQJsxzsF0xez+cXPwsa3eh/B62qdv9ryPXxgsnuzvzt6VHBOHs4xtv1AYRtxba/
EX6jvLpyqzIjwbbBkmk00AO3y/kPVM8GELx100sjwwl2Hw8Re0pDDbmm237P6T2y
eL9CCcluSbeRr4bHQcC4ezWa15LiOOxmoGhb9Z/DJqcOWb0bI530gSiuAc3T27ku
D3biP8fiOaM=
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:47:13 2026 by rpki-client