Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/B059C44831AB11ECAB908E42C4F9AE02.roa
File:                     B059C44831AB11ECAB908E42C4F9AE02.roa (raw, json)
Hash identifier:          jcG8jXTEcMWA0kyeBWJCt1XldDDQEQffdhhqylVF28w=
Subject key identifier:   EA:EE:7F:77:79:AA:99:0A:AA:14:51:29:5C:9E:74:58:0E:7E:E7:7A
Certificate issuer:       /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial:       337B
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/B059C44831AB11ECAB908E42C4F9AE02.roa
Signing time:             Sat 02 May 2026 16:18:02 +0000
ROA not before:           Sat 02 May 2026 16:18:02 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     6421
IP address blocks:        14.141.246.0/24 maxlen: 24
                          14.141.247.0/24 maxlen: 24
                          59.164.76.0/24 maxlen: 24
                          59.164.77.0/24 maxlen: 24
                          115.110.74.0/24 maxlen: 24
                          115.110.75.0/24 maxlen: 24
                          115.112.20.0/24 maxlen: 24
                          115.112.21.0/24 maxlen: 24
                          121.240.218.0/24 maxlen: 24
                          121.240.219.0/24 maxlen: 24
                          121.240.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
                          rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:27:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13179 (0x337b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
        Validity
            Not Before: May  2 16:18:02 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f623ba-d4b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6f:89:99:ed:31:54:a0:66:7d:8b:86:93:e0:
                    a7:67:a6:9c:4d:67:d1:52:1e:0e:f2:ea:9c:9b:5d:
                    45:e4:ec:23:4a:ba:07:e9:e0:2b:d6:9e:69:be:9b:
                    a4:ac:c6:3d:ca:72:2a:68:98:29:5e:87:77:f2:a3:
                    53:9d:65:86:d0:43:ba:f7:69:5c:7b:2d:b7:7e:d4:
                    cc:05:5c:07:4b:e7:20:85:b4:e8:8a:62:e7:43:0b:
                    bc:6d:f1:18:07:f6:bb:d8:a2:0a:25:25:8a:b3:c2:
                    e6:b6:4e:30:65:b2:29:f0:b9:48:92:a8:e2:a4:d6:
                    b0:31:61:fa:e6:92:d4:71:f9:ab:61:c4:25:0a:5a:
                    cf:04:79:c6:00:20:b5:e7:08:ae:52:f1:12:cc:76:
                    b9:46:13:f1:96:5b:96:95:9a:78:1f:b9:c4:4c:a3:
                    a0:f5:04:47:29:9a:55:a4:08:61:71:b0:32:b2:42:
                    04:0b:66:e2:41:70:b9:d2:0d:55:35:08:2a:80:56:
                    60:03:1c:71:7f:a5:3a:a9:d7:6c:00:33:2d:4c:75:
                    f3:08:0e:7d:21:1c:ab:d8:0e:7a:da:2a:f1:16:0b:
                    e2:34:4c:f7:4d:3a:9e:d1:72:dc:dc:d1:be:53:0a:
                    ff:25:e4:fd:83:f6:11:65:c2:1c:3d:1b:cc:c8:ba:
                    b7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:EE:7F:77:79:AA:99:0A:AA:14:51:29:5C:9E:74:58:0E:7E:E7:7A
            X509v3 Authority Key Identifier:
                keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/B059C44831AB11ECAB908E42C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.141.246.0/23
                  59.164.76.0/23
                  115.110.74.0/23
                  115.112.20.0/23
                  121.240.218.0/23
                  121.240.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:83:5d:09:f6:3a:8a:f5:9c:79:56:61:f8:c3:ab:b2:36:bb:
         5f:58:96:95:99:96:02:89:11:93:be:f6:18:a2:81:0d:43:76:
         04:da:2a:f8:db:92:2a:20:28:c8:bd:10:0c:f3:a6:ec:fa:8d:
         d2:75:e0:db:c1:91:53:f8:f1:d3:ac:62:08:f8:67:8e:1f:19:
         2c:01:bb:51:33:14:97:8b:e8:d0:fd:8f:26:5d:23:46:89:21:
         7f:ab:17:90:f7:9f:71:12:53:43:a1:6d:ff:4f:77:85:1e:52:
         1a:62:d4:88:1a:c0:9c:92:ff:ad:fe:ff:28:55:39:68:25:3d:
         9e:fe:f8:52:35:25:ca:ab:74:ec:14:eb:c1:ac:74:37:8c:78:
         06:6f:39:a2:04:94:0c:d5:2e:6b:e3:70:0e:6f:85:60:d9:24:
         ef:4f:12:91:f0:29:49:4f:b4:49:f0:a6:8c:7b:75:f0:0e:ab:
         69:1e:83:72:69:39:d0:00:2a:0b:eb:12:7b:94:e9:f7:c0:58:
         bd:95:17:c7:95:2b:a9:e3:29:0d:17:72:8b:c9:0d:cc:bb:5c:
         fa:0e:3c:a1:74:3b:ae:8a:62:20:f8:ac:05:3c:8c:f4:07:2b:
         a8:32:29:48:9f:1f:86:7a:3c:4e:48:8c:eb:94:c4:36:48:75:
         64:fd:a8:bb
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgICM3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENFNzUxMTAvBgNVBAUTKDQ5ODkyNTM3RDhCMkMwMzI1QjdCRTA4MUZEOTI4NkM3
OUJFQTZBODUwHhcNMjYwNTAyMTYxODAyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWY2MjNiYS1kNGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvG+Jme0xVKBmfYuGk+CnZ6acTWfRUh4O8uqcm11F5OwjSroH6eAr1p5pvpuk
rMY9ynIqaJgpXod38qNTnWWG0EO692lcey23ftTMBVwHS+cghbToimLnQwu8bfEY
B/a72KIKJSWKs8Lmtk4wZbIp8LlIkqjipNawMWH65pLUcfmrYcQlClrPBHnGACC1
5wiuUvESzHa5RhPxlluWlZp4H7nETKOg9QRHKZpVpAhhcbAyskIEC2biQXC50g1V
NQgqgFZgAxxxf6U6qddsADMtTHXzCA59IRyr2A562irxFgviNEz3TTqe0XLc3NG+
Uwr/JeT9g/YRZcIcPRvMyLq3lwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFOruf3d5
qpkKqhRRKVyedFgOfud6MB8GA1UdIwQYMBaAFEmJJTfYssAyW3vggf2Shseb6mqF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0U3NS9EMjJFRjNENkZG
NEIxMUUyODFCRTA2NjI1OTExRUEzMi9TWWtsTjlpeXdESmJlLUNCX1pLR3g1dnFh
b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NZa2xOOWl5d0RKYmUtQ0JfWktHeDV2cWFvVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NENFNzUvRDIyRUYzRDZGRjRCMTFFMjgxQkUwNjYyNTkxMUVBMzIvQjA1OUM0NDgz
MUFCMTFFQ0FCOTA4RTQyQzRGOUFFMDIucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq
BAIAATAkAwQBDo32AwQBO6RMAwQBc25KAwQBc3AUAwQBefDaAwQAefD4MA0GCSqG
SIb3DQEBCwUAA4IBAQBOg10J9jqK9Zx5VmH4w6uyNrtfWJaVmZYCiRGTvvYYooEN
Q3YE2ir425IqICjIvRAM86bs+o3SdeDbwZFT+PHTrGII+GeOHxksAbtRMxSXi+jQ
/Y8mXSNGiSF/qxeQ959xElNDoW3/T3eFHlIaYtSIGsCckv+t/v8oVTloJT2e/vhS
NSXKq3TsFOvBrHQ3jHgGbzmiBJQM1S5r43AOb4Vg2STvTxKR8ClJT7RJ8KaMe3Xw
DqtpHoNyaTnQACoL6xJ7lOn3wFi9lRfHlSup4ykNF3KLyQ3Mu1z6DjyhdDuuimIg
+KwFPIz0ByuoMilInx+GejxOSIzrlMQ2SHVk/ai7
-----END CERTIFICATE-----
Generated at Wed May 13 07:29:30 2026 by rpki-client