Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/2687563AFA8E11EB8B0FCD39C4F9AE02.roa
File:                     2687563AFA8E11EB8B0FCD39C4F9AE02.roa (raw, json)
Hash identifier:          n/YbDaTHamqztSNTrdvyoK86w2NzWca60Rrf+3JLb04=
Subject key identifier:   7A:3C:44:75:DA:DF:5E:D3:8C:37:E2:2A:D8:DA:EE:69:12:57:82:13
Certificate issuer:       /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial:       3371
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/2687563AFA8E11EB8B0FCD39C4F9AE02.roa
Signing time:             Sat 02 May 2026 16:17:41 +0000
ROA not before:           Sat 02 May 2026 16:17:41 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209242
IP address blocks:        14.142.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
                          rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:27:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13169 (0x3371)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
        Validity
            Not Before: May  2 16:17:41 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f623a5-01db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f6:fa:c5:d9:be:3c:6f:1b:3a:f7:a8:0a:ca:
                    99:71:36:15:28:5b:43:de:48:dc:3e:18:12:fd:68:
                    fc:1d:f7:9b:8d:1c:13:17:98:04:c4:60:3a:73:ac:
                    8e:08:2e:a5:dd:8d:f6:6e:38:64:2e:17:17:1f:2c:
                    f6:d1:da:52:2b:f6:bf:a8:f6:41:22:a8:fd:9a:74:
                    e4:a4:72:db:44:a3:67:74:2a:02:ed:24:97:18:e2:
                    58:ed:98:cb:77:0d:f5:e0:a8:ac:a1:5d:ce:d7:fe:
                    f9:1d:ae:aa:5b:d6:ad:90:dd:7f:a6:c7:61:c1:cf:
                    ab:d9:33:6f:d0:79:40:73:60:be:06:f6:a1:74:a7:
                    23:e2:d9:de:14:5f:b7:04:db:ef:0d:8d:76:4b:97:
                    32:e4:bb:63:ea:4f:e2:db:14:45:34:40:22:63:a5:
                    5d:12:5e:9b:fe:de:59:a7:20:ac:df:bb:d0:d9:59:
                    5f:99:85:e9:53:76:1b:fc:19:34:a3:c5:24:8a:ca:
                    2a:f8:e9:af:37:71:57:50:b7:c1:f7:dd:91:0e:18:
                    f9:08:ed:cb:9f:22:0c:4e:b1:f1:ea:fc:8f:89:e6:
                    fb:d2:a1:64:b3:95:f6:aa:5b:2a:b1:fa:e8:3c:a4:
                    fe:38:10:e9:a6:73:c0:f0:e7:ac:12:fa:e9:76:e0:
                    b4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3C:44:75:DA:DF:5E:D3:8C:37:E2:2A:D8:DA:EE:69:12:57:82:13
            X509v3 Authority Key Identifier:
                keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/2687563AFA8E11EB8B0FCD39C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.142.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:8b:79:70:73:a1:30:2f:bc:9d:e4:38:ad:05:51:5c:24:17:
         3a:36:44:c3:91:6a:6b:b7:bf:42:37:7d:d1:94:f8:4d:4d:6b:
         35:e0:35:c0:ea:86:09:9b:4c:b0:77:4a:ae:1a:c0:1f:2d:7e:
         c2:af:d0:f1:45:ae:74:b5:37:fa:42:2b:0e:4b:f2:ea:19:6d:
         c1:70:34:4f:4a:e2:e1:74:71:e1:36:6c:23:22:eb:ff:39:16:
         fd:a0:7d:eb:a4:6d:04:31:19:da:ea:25:19:ca:29:a7:ba:9a:
         d5:5a:bf:ad:7d:35:7b:71:ea:43:10:95:64:e0:64:29:bb:2e:
         3a:f9:2e:da:0c:10:1a:cb:e0:76:db:ed:4d:95:cf:26:ad:62:
         dc:3b:c0:e0:1a:c9:f0:fc:a5:59:c3:f5:8c:a7:b9:43:f5:b9:
         cb:25:0c:e9:20:79:e7:1b:b0:7b:4a:80:75:8b:cd:d9:32:4f:
         31:b8:cc:4c:c9:55:31:7a:c3:46:a7:a0:65:52:1d:97:22:da:
         d9:a3:af:f8:c3:94:06:1b:0a:ac:bf:fe:cb:ee:31:91:31:4a:
         0e:97:5f:07:ff:36:10:8d:c0:85:f0:ab:e2:44:a3:10:39:73:
         c7:4a:c0:94:83:22:5f:6b:29:d7:ef:3d:e1:4c:90:12:27:07:
         1d:38:d6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:27:16 2026 by rpki-client