Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/F94772A2127711F18BE24F01353D8C67.roa
File:                     F94772A2127711F18BE24F01353D8C67.roa (raw, json)
Hash identifier:          Ia2OY00mHGLN5kewmPdoukAdUzDfyI0EliOAKlUSYq8=
Subject key identifier:   23:6F:F9:06:4B:69:78:9A:55:E9:E5:79:C6:62:7B:B2:86:53:8C:68
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       0F89
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/F94772A2127711F18BE24F01353D8C67.roa
Signing time:             Sun 01 Mar 2026 19:18:41 +0000
ROA not before:           Wed 25 Feb 2026 18:29:52 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     154198
IP address blocks:        14.192.146.0/24 maxlen: 24
                          14.192.147.0/24 maxlen: 24
                          14.192.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:39:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3977 (0xf89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Feb 25 18:29:52 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a49111-ea95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:98:23:06:31:92:a0:48:07:a7:9f:db:59:f6:
                    e8:00:f6:8c:8c:b5:78:76:35:89:9d:c5:86:fc:f6:
                    18:08:ff:3d:15:68:dc:1c:ec:b5:7a:b8:14:5a:f4:
                    fa:f3:d4:2a:3e:11:d1:e4:61:ff:87:56:ea:d7:44:
                    e1:89:e7:6f:cd:c8:3b:5d:b0:d5:a3:28:cd:e0:28:
                    57:1d:2d:79:6f:69:4a:af:e4:76:3e:c6:ec:3f:eb:
                    77:1a:b0:a8:a0:1c:01:3b:d8:58:a1:27:fc:56:bc:
                    b9:5b:0a:de:1b:b2:0a:0d:89:de:9b:fc:06:c1:93:
                    ab:89:ea:3c:36:1b:38:fe:0b:a1:99:e2:95:fa:fe:
                    65:6b:f8:2c:f3:59:5e:fe:b5:16:a4:42:c4:ef:12:
                    08:5a:3d:b5:7b:0c:b5:01:e6:d1:a3:03:06:f7:68:
                    81:fe:2e:a5:32:f0:c0:bf:3f:53:98:85:99:5f:dc:
                    56:dc:a9:c2:13:12:6d:3d:ca:ac:b8:60:38:97:b6:
                    e4:2c:58:c1:29:98:fa:84:89:4f:f5:ec:3d:e3:c6:
                    08:4f:13:e5:37:aa:b0:0b:44:62:53:dd:4e:96:a7:
                    98:8d:fd:ba:b6:0b:0a:b8:94:16:87:d4:59:cb:6a:
                    61:d8:39:4a:64:72:a9:3f:24:64:15:9d:12:0c:ba:
                    97:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6F:F9:06:4B:69:78:9A:55:E9:E5:79:C6:62:7B:B2:86:53:8C:68
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/F94772A2127711F18BE24F01353D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.146.0-14.192.148.255

    Signature Algorithm: sha256WithRSAEncryption
         2e:4b:f2:b3:31:1e:64:59:b8:c0:8f:37:e8:a6:e8:5f:1e:da:
         76:bc:ab:d5:62:1a:2a:d8:a2:47:f3:39:63:f8:60:5b:3b:cd:
         65:b3:6b:ef:0e:81:89:ec:76:3b:f7:5b:f6:22:fe:fd:21:fe:
         a9:70:38:6d:4a:7a:90:e7:b1:95:cd:50:03:20:79:5d:63:02:
         80:28:65:89:fe:17:3a:4b:2c:dd:84:49:31:dc:3b:4f:b6:f6:
         4d:fa:0c:54:ca:b6:9c:cf:f7:9b:7c:de:45:87:92:2d:31:56:
         db:6b:87:48:26:70:27:b8:7c:00:bd:50:69:a2:f0:b1:83:9d:
         5e:22:c3:0f:0d:80:4e:5d:be:f3:16:ea:56:05:b6:a6:f7:8c:
         c5:c4:fb:7e:95:44:35:23:7d:6c:b0:92:a5:e5:8f:45:ad:0e:
         04:95:c5:0d:55:c7:7e:c2:de:45:6e:15:2b:f4:ba:cc:56:ec:
         65:fa:37:ed:7e:db:0b:f3:2b:05:58:07:40:05:96:72:4f:f6:
         54:b3:ba:22:34:bd:c2:4b:bc:f9:29:76:5d:11:bf:8c:b1:8d:
         e5:70:b8:d5:3d:67:e4:7f:de:21:84:03:9f:8f:e0:c4:1b:99:
         80:25:d9:82:f5:9c:b7:40:cf:80:c9:c8:9f:aa:47:ee:58:c8:
         b8:4d:85:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:36:56 2026 by rpki-client