Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/ECC070D01A0A11F0AEC42962C4F9AE02.roa
File:                     ECC070D01A0A11F0AEC42962C4F9AE02.roa (raw, json)
Hash identifier:          wPzqsKlBHcOZAjJwLiFb2UV/ROirDSGbxeBgwt+tt0Y=
Subject key identifier:   DE:B9:8F:75:64:67:4B:0C:FF:24:79:43:39:DD:B6:00:93:07:CD:D6
Certificate issuer:       /CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
Certificate serial:       14C7
Authority key identifier: B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/ECC070D01A0A11F0AEC42962C4F9AE02.roa
Signing time:             Tue 30 Jun 2026 17:20:59 +0000
ROA not before:           Tue 30 Jun 2026 17:20:59 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     152700
IP address blocks:        14.192.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl
                          rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 17:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5319 (0x14c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E93F, serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
        Validity
            Not Before: Jun 30 17:20:59 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a43fafa-4804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:03:48:d2:19:bb:e4:e0:57:f4:51:c2:c4:27:
                    36:7e:59:36:22:94:8a:44:39:70:5f:14:36:5d:78:
                    90:d4:ac:a1:19:50:8d:4f:b2:6e:ae:e1:45:14:67:
                    0d:ac:8f:1e:18:91:f2:53:0f:07:3e:2a:29:d4:f4:
                    96:e8:69:6f:94:20:c8:f3:48:cf:83:02:76:98:86:
                    17:2e:e8:6c:ae:8f:08:06:17:2d:b7:af:1d:f1:89:
                    ff:8b:88:c3:cd:66:5c:bf:39:c1:a0:72:e6:c1:d3:
                    2a:86:42:a1:a8:c0:86:3b:a7:8a:4b:f8:4e:01:bc:
                    21:7a:7a:11:dd:ce:8f:34:ab:a8:c4:c7:88:89:b2:
                    4b:f4:37:4f:0c:b1:b7:0e:c5:5e:27:8a:36:43:8c:
                    30:ae:4b:e3:e5:3d:e7:16:e1:d1:14:af:5f:ab:fa:
                    37:a9:b1:87:e7:e8:26:da:a4:52:da:63:93:c1:9e:
                    b8:22:1b:42:8d:fa:17:b0:49:74:dc:04:39:4f:c7:
                    99:23:3a:97:f9:85:05:9b:cd:7a:7c:7d:94:fb:58:
                    54:88:c5:63:40:ca:98:8e:be:39:96:c5:8f:e0:d5:
                    06:7d:d3:43:c7:5f:fd:58:a8:c8:8f:f1:f5:1d:08:
                    c9:ad:50:dd:56:34:d1:21:09:90:42:1a:17:d0:58:
                    75:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B9:8F:75:64:67:4B:0C:FF:24:79:43:39:DD:B6:00:93:07:CD:D6
            X509v3 Authority Key Identifier:
                keyid:B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/ECC070D01A0A11F0AEC42962C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:49:25:fd:e8:65:2a:b6:eb:e3:ad:7a:c2:e2:c9:72:0e:82:
         7d:8b:81:a7:98:67:c0:22:c8:06:9f:6e:0e:45:35:a8:a6:38:
         ea:a6:c1:f5:d6:89:02:b3:5d:7c:b9:05:cf:43:ef:d2:0f:eb:
         e0:72:f4:3d:28:5c:77:ca:8e:e5:11:af:ef:dd:33:51:b1:e9:
         53:50:e5:86:10:22:6c:37:5d:4b:38:00:ee:d7:07:65:ec:03:
         0d:ba:f2:63:8d:5b:09:ed:21:3d:a5:96:1a:63:c6:f4:b7:d9:
         84:33:73:f3:d9:74:e1:12:7d:d6:bc:d8:fd:6a:a4:41:8c:93:
         0a:00:7a:d6:bd:b9:5d:01:1f:8b:f6:97:22:b2:21:00:8f:e3:
         42:28:13:76:3d:7b:0f:a8:21:51:b8:9c:7c:bd:37:a8:57:bd:
         af:12:7a:0e:7c:c8:69:7b:6a:4e:d4:fa:40:bf:56:30:54:ed:
         7e:71:70:fd:1e:f3:82:04:c2:5d:10:45:fe:54:1c:62:8f:ef:
         53:47:bf:2f:ac:20:fa:c5:90:fa:72:10:35:14:b5:c2:44:d3:
         ce:ec:48:e6:e7:cb:8f:02:98:0f:d2:ff:d4:1a:29:90:a1:ae:
         3a:35:7d:4d:75:35:82:a5:c1:4d:dd:02:38:11:6d:9c:f2:52:
         c8:eb:ee:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:22:05 2026 by rpki-client