Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/3E745A08803611ECB2187650C4F9AE02.roa
File:                     3E745A08803611ECB2187650C4F9AE02.roa (raw, json)
Hash identifier:          AjLtnQtkAPQclAieWGuvtVrv0i+EnV+un4k9GjM/4H4=
Subject key identifier:   65:34:14:2F:A8:9E:E6:40:14:0A:72:8C:AD:AD:72:11:74:BA:A5:D4
Certificate issuer:       /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial:       3370
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/3E745A08803611ECB2187650C4F9AE02.roa
Signing time:             Sat 02 May 2026 16:17:39 +0000
ROA not before:           Sat 02 May 2026 16:17:39 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     18221
IP address blocks:        14.142.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
                          rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:27:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13168 (0x3370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
        Validity
            Not Before: May  2 16:17:39 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f623a3-c590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a1:9b:22:50:9a:83:ca:c4:d5:71:a7:bf:ce:
                    b8:60:36:a9:fa:17:8c:83:50:90:ee:1a:a4:78:c3:
                    0b:a8:ad:f5:ed:36:b9:b9:20:0a:c2:26:50:cb:cf:
                    b9:27:fe:92:2c:8b:1d:c9:a6:ee:ab:17:ff:cc:67:
                    e0:76:d0:e1:42:44:25:52:1f:85:e8:fa:88:be:d8:
                    ee:be:63:39:19:3a:93:10:5b:0a:a9:7c:27:81:c5:
                    12:d3:1d:de:0d:f2:50:8c:0a:04:5e:00:b9:5a:0e:
                    4d:5c:fb:90:95:9d:47:fc:ba:b7:26:a9:0b:c2:0a:
                    99:00:26:75:ca:c7:6b:82:2c:20:d1:a5:af:02:87:
                    98:48:07:4d:37:af:c3:34:91:78:e9:7e:b8:14:20:
                    47:b6:37:70:49:2e:8d:7f:8f:99:a5:72:8c:41:fb:
                    ce:9c:79:6a:86:df:46:29:f5:32:7c:36:3d:7c:da:
                    c5:60:de:e3:1d:b1:42:19:5e:9f:10:0b:fa:31:7f:
                    af:62:73:e9:b9:7c:e4:c3:29:30:80:9f:79:d6:d3:
                    e1:96:49:34:52:d0:27:0d:c9:25:7e:fe:41:4f:b3:
                    bd:ed:71:ce:13:c7:23:40:12:33:cd:b8:9e:86:4c:
                    76:ec:82:61:80:be:97:03:e1:0f:b1:a0:73:db:95:
                    d6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:34:14:2F:A8:9E:E6:40:14:0A:72:8C:AD:AD:72:11:74:BA:A5:D4
            X509v3 Authority Key Identifier:
                keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/3E745A08803611ECB2187650C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.142.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:47:27:6d:e4:9b:ca:ed:27:0d:5e:65:6f:0a:c9:08:c1:3d:
         d2:d5:2f:ff:5b:26:d4:c0:32:cf:2a:c0:3e:c7:da:6b:18:6f:
         d3:71:71:39:fd:38:22:ac:89:1b:db:59:65:99:13:fb:ed:de:
         19:09:d6:c4:a4:3c:1b:16:15:01:cb:bc:a5:65:54:71:f0:ce:
         84:ca:10:a1:a2:eb:46:3a:0b:2e:c7:0a:f6:7d:06:3e:8a:ba:
         ea:e6:5a:72:04:09:40:63:cb:6b:81:17:3a:cc:ef:a1:24:5a:
         5c:20:9c:3a:83:4e:12:37:db:bf:33:ee:4a:1d:5e:ef:94:cb:
         23:b9:2b:3e:4e:c6:b4:ac:58:bc:a2:d6:26:56:ee:97:c5:c4:
         b8:fc:fb:0e:9a:e3:9b:68:fb:cb:9e:67:91:12:f7:b3:06:fe:
         ec:6e:61:57:73:8c:1b:0b:fa:e2:4b:10:c6:41:aa:b4:07:3c:
         32:1c:44:28:6e:c6:89:be:49:33:86:30:e2:54:1e:dc:74:66:
         63:d4:c9:d7:92:54:87:30:92:10:8c:a0:14:d8:74:79:bf:9d:
         a4:26:a4:ef:f9:b1:ff:53:49:a9:1d:b2:c1:46:1d:01:f4:f3:
         21:6c:e6:5b:83:51:b6:98:cb:71:eb:99:7c:13:22:c6:ac:4f:
         5d:a9:ad:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:38:48 2026 by rpki-client