Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/5B24C51A60ED11EC874B903BC4F9AE02.roa
File:                     5B24C51A60ED11EC874B903BC4F9AE02.roa (raw, json)
Hash identifier:          4w0TogS+2atxTCMCzPs6c9BF71e/45vAMcdgv3e+SKQ=
Subject key identifier:   76:5A:3D:4E:FB:86:1D:CA:5F:6C:41:1E:EC:0C:61:03:F9:C1:5D:A3
Certificate issuer:       /CN=A9190992/serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF
Certificate serial:       04E5
Authority key identifier: 7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/5B24C51A60ED11EC874B903BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:20:01 +0000
ROA not before:           Fri 20 Feb 2026 23:20:19 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     141449
IP address blocks:        103.159.174.0/24 maxlen: 24
                          103.159.175.0/24 maxlen: 24
                          2406:d740::/48 maxlen: 48
                          2406:d740:1::/48 maxlen: 48
                          2406:d740:2::/48 maxlen: 48
                          2406:d740:3::/48 maxlen: 48
                          2406:d740:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl
                          rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:03:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1253 (0x4e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190992, serialNumber=7F65C110E2A17E41D770FC2DFA403D16A33E5CAF
        Validity
            Not Before: Feb 20 23:20:19 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a44b11-c457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d1:c7:cc:43:aa:ab:8a:6c:4c:b6:fd:03:0c:
                    4d:ad:17:08:12:ea:38:fd:b5:ea:3b:ea:e0:71:7f:
                    1e:34:cb:95:5a:17:7c:86:9e:e4:8f:17:58:f9:db:
                    62:22:3e:f3:41:ae:b2:a3:81:49:ef:94:13:3c:6b:
                    7d:98:dd:a3:3c:3f:80:f9:29:c5:07:d4:be:64:d8:
                    7f:05:08:05:b9:de:a9:5a:c0:14:5d:5c:45:52:28:
                    7e:12:df:63:76:4f:04:86:5e:83:d7:ee:c5:24:88:
                    22:11:19:9a:07:76:c6:9d:69:c5:63:38:5d:67:b7:
                    a0:cb:f3:22:6d:7a:67:65:c6:65:f3:e5:e4:dc:e5:
                    9d:d0:44:f2:2c:5c:21:e6:02:62:1b:03:48:0e:76:
                    d2:04:41:ce:47:ea:b0:c9:71:85:e2:c4:23:0f:80:
                    b5:85:37:52:6d:8d:64:4e:be:52:a2:0b:20:08:71:
                    53:e6:83:d8:3f:12:0b:99:4d:88:c4:e3:af:31:2d:
                    fd:26:8f:99:37:53:17:40:49:27:48:04:b7:55:24:
                    d8:e1:d8:72:8a:2a:ff:26:53:05:f0:57:1b:19:2a:
                    09:c0:53:6e:19:32:0e:50:8e:41:18:b3:d6:80:43:
                    67:af:27:19:ee:58:0d:76:15:41:7d:4e:60:4f:f1:
                    8a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5A:3D:4E:FB:86:1D:CA:5F:6C:41:1E:EC:0C:61:03:F9:C1:5D:A3
            X509v3 Authority Key Identifier:
                keyid:7F:65:C1:10:E2:A1:7E:41:D7:70:FC:2D:FA:40:3D:16:A3:3E:5C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/f2XBEOKhfkHXcPwt-kA9FqM-XK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f2XBEOKhfkHXcPwt-kA9FqM-XK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190992/5B3D08025C0E11EC97603617C4F9AE02/5B24C51A60ED11EC874B903BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.174.0/23
                IPv6:
                  2406:d740::-2406:d740:4:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         22:93:a3:0f:9e:71:75:a7:90:8d:56:bb:bd:74:06:45:cf:d7:
         fe:57:c4:ab:af:52:b0:50:cf:3b:36:e0:02:d5:6d:7f:fb:8d:
         2e:8f:0e:54:1c:05:7a:11:05:cc:fb:54:ce:f4:67:c6:9f:24:
         f7:01:7a:91:21:0c:21:c3:d6:6e:dc:09:3b:07:4e:c2:53:09:
         dd:ba:b5:12:c0:f6:70:30:04:c5:7d:6e:b9:21:cb:00:22:cd:
         00:43:cf:5c:33:3b:e6:dc:99:0f:a8:31:a9:5b:bf:86:41:6d:
         9f:d6:08:c1:d0:b3:11:86:20:82:9d:8b:ea:d0:3b:14:93:1b:
         7a:c4:d3:95:79:4a:da:f3:df:cc:d3:06:d5:a0:54:26:01:4c:
         25:d9:e0:78:3d:81:87:2d:ad:cf:14:4d:ef:7d:ed:1a:a4:61:
         25:de:8a:d2:fe:92:4d:12:43:8a:32:05:08:e7:3b:b7:99:37:
         81:84:ce:d3:86:c3:79:d4:b9:d5:6c:5a:74:93:e3:af:70:0a:
         34:26:93:53:8f:cf:9e:54:de:bc:9d:a3:df:23:29:a1:3e:e5:
         04:b2:cc:64:22:73:28:38:4f:64:98:dc:9d:01:bb:15:15:ef:
         2d:cd:21:fe:46:a3:62:b3:f6:6b:0a:d7:97:bc:fe:77:67:3a:
         08:e2:be:4a
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgICBOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTA5OTIxMTAvBgNVBAUTKDdGNjVDMTEwRTJBMTdFNDFENzcwRkMyREZBNDAzRDE2
QTMzRTVDQUYwHhcNMjYwMjIwMjMyMDE5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NGIxMS1jNDU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA69HHzEOqq4psTLb9AwxNrRcIEuo4/bXqO+rgcX8eNMuVWhd8hp7kjxdY+dti
Ij7zQa6yo4FJ75QTPGt9mN2jPD+A+SnFB9S+ZNh/BQgFud6pWsAUXVxFUih+Et9j
dk8Ehl6D1+7FJIgiERmaB3bGnWnFYzhdZ7egy/MibXpnZcZl8+Xk3OWd0ETyLFwh
5gJiGwNIDnbSBEHOR+qwyXGF4sQjD4C1hTdSbY1kTr5SogsgCHFT5oPYPxILmU2I
xOOvMS39Jo+ZN1MXQEknSAS3VSTY4dhyiir/JlMF8FcbGSoJwFNuGTIOUI5BGLPW
gENnrycZ7lgNdhVBfU5gT/GKjwIDAQABo4ICejCCAnYwHQYDVR0OBBYEFHZaPU77
hh3KX2xBHuwMYQP5wV2jMB8GA1UdIwQYMBaAFH9lwRDioX5B13D8LfpAPRajPlyv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDk5Mi81QjNEMDgwMjVD
MEUxMUVDOTc2MDM2MTdDNEY5QUUwMi9mMlhCRU9LaGZrSFhjUHd0LWtBOUZxTS1Y
SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2YyWEJFT0toZmtIWGNQd3Qta0E5RnFNLVhLOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTA5OTIvNUIzRDA4MDI1QzBFMTFFQzk3NjAzNjE3QzRGOUFFMDIvNUIyNEM1MUE2
MEVEMTFFQzg3NEI5MDNCQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAM
BAIAATAGAwQBZ5+uMBgEAgACMBIwEAMFBiQG10ADBwAkBtdAAAQwDQYJKoZIhvcN
AQELBQADggEBACKTow+ecXWnkI1Wu710BkXP1/5XxKuvUrBQzzs24ALVbX/7jS6P
DlQcBXoRBcz7VM70Z8afJPcBepEhDCHD1m7cCTsHTsJTCd26tRLA9nAwBMV9brkh
ywAizQBDz1wzO+bcmQ+oMalbv4ZBbZ/WCMHQsxGGIIKdi+rQOxSTG3rE05V5Strz
38zTBtWgVCYBTCXZ4Hg9gYctrc8UTe997RqkYSXeitL+kk0SQ4oyBQjnO7eZN4GE
ztOGw3nUudVsWnST469wCjQmk1OPz55U3rydo98jKaE+5QSyzGQicyg4T2SY3J0B
uxUV7y3NIf5Go2Kz9msK15e8/ndnOgjivko=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:06:51 2026 by rpki-client