Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/5090FDECFF2E11F099E36B6D89EE528E.roa
File:                     5090FDECFF2E11F099E36B6D89EE528E.roa (raw, json)
Hash identifier:          /F1WAshHRA8ziIeFP9f2EN/qfvzetQs/IqfVIK/xJug=
Subject key identifier:   98:E6:A1:62:8D:63:D7:24:64:65:7C:0D:07:EC:E9:6F:03:85:1F:6B
Certificate issuer:       /CN=A919FF19/serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
Certificate serial:       0179
Authority key identifier: 8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/5090FDECFF2E11F099E36B6D89EE528E.roa
Signing time:             Tue 03 Nov 2026 06:52:54 +0000
ROA not before:           Tue 03 Nov 2026 06:52:54 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     132222
IP address blocks:        103.71.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl
                          rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 05:14:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FF19, serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
        Validity
            Not Before: Nov  3 06:52:54 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6ae984c6-d338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b1:fd:ad:2a:da:5e:81:69:9c:b0:0d:d2:da:
                    25:96:e4:dd:ad:c1:96:ec:76:3d:e2:73:db:98:dd:
                    5a:98:5e:ee:45:c6:71:39:74:d4:ab:8c:74:82:de:
                    db:f9:76:df:82:b3:46:40:e9:96:25:db:78:d2:1b:
                    3e:42:22:fb:d7:c8:0a:35:bf:39:b6:dc:40:e2:a6:
                    a7:d9:b7:f0:14:00:1b:1f:a3:02:90:1b:eb:b0:e3:
                    8b:c2:cb:6e:1a:10:ec:62:06:48:5e:66:16:0e:b7:
                    ef:13:d5:7a:aa:3c:1f:88:0f:e3:14:f5:45:5a:bc:
                    ec:43:a3:29:bd:75:25:60:19:a7:f7:7b:c4:2b:63:
                    7c:38:cb:c9:c6:12:55:bd:e8:2d:22:7c:73:25:fa:
                    43:7a:79:d3:24:ee:81:bd:49:b2:0b:bd:1c:36:0c:
                    4d:3f:f1:03:49:d3:22:fe:99:a8:27:24:d8:18:4a:
                    97:cc:6a:2f:53:9c:fb:3d:33:05:c6:8c:a7:62:7d:
                    10:cd:85:72:3a:0b:14:f6:9a:83:71:fa:9c:a7:b5:
                    fa:1e:f5:72:89:01:a0:02:19:b6:65:95:c6:a9:07:
                    6d:17:3b:a8:b0:65:7e:3c:b3:69:19:2c:dd:8e:f8:
                    e2:74:5c:5c:0d:7f:43:76:e5:43:e7:48:54:5c:63:
                    8c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E6:A1:62:8D:63:D7:24:64:65:7C:0D:07:EC:E9:6F:03:85:1F:6B
            X509v3 Authority Key Identifier:
                keyid:8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/5090FDECFF2E11F099E36B6D89EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:d0:b2:f2:00:9c:47:72:b7:a9:db:83:07:fb:1d:ca:31:7b:
         21:0a:2d:d2:bc:61:16:7e:fa:d5:cb:82:38:60:23:61:2b:ad:
         e8:02:3c:f8:0d:01:c9:00:10:06:98:31:d4:8a:ca:43:72:83:
         99:23:91:5b:24:ff:91:71:e0:23:5e:b9:0a:20:91:b2:4a:0c:
         20:16:e5:75:f4:e0:c2:70:a2:10:39:23:53:93:e5:5f:23:30:
         b7:72:17:dd:86:f0:b5:6c:68:ea:ea:ba:b0:e6:ac:c2:16:ce:
         7c:cd:02:c7:7d:94:7c:19:b3:8c:48:b8:ee:fc:2a:4c:d8:74:
         40:1d:dd:d0:c6:d7:ad:71:01:09:4e:0e:84:b3:23:1e:b1:0e:
         c6:a8:d9:22:2c:4f:5c:fb:b6:1f:74:26:58:b3:50:43:26:68:
         cb:14:7c:53:00:be:be:a9:0d:18:91:20:b9:84:e6:83:04:25:
         1c:b2:19:bd:e8:9f:46:9f:2f:c1:7b:8f:7f:af:66:e7:7f:da:
         47:88:f3:b5:60:cf:3e:44:cc:f4:55:64:20:ec:1d:7f:53:5a:
         06:cd:de:1d:af:de:46:32:9d:6c:d3:83:c9:16:f9:c4:da:b0:
         42:d8:f4:ff:52:e7:e9:6e:ce:82:f5:3f:4a:fe:4f:76:94:2e:
         8e:58:18:42
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUZGMTkxMTAvBgNVBAUTKDhENjExRjJDRDczNzk0QUY4MDFDMUJGNjlEODg0ODA5
MTM4MEI0QTUwHhcNMjYxMTAzMDY1MjU0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWU5ODRjNi1kMzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsLH9rSraXoFpnLAN0tolluTdrcGW7HY94nPbmN1amF7uRcZxOXTUq4x0gt7b
+XbfgrNGQOmWJdt40hs+QiL718gKNb85ttxA4qan2bfwFAAbH6MCkBvrsOOLwstu
GhDsYgZIXmYWDrfvE9V6qjwfiA/jFPVFWrzsQ6MpvXUlYBmn93vEK2N8OMvJxhJV
vegtInxzJfpDennTJO6BvUmyC70cNgxNP/EDSdMi/pmoJyTYGEqXzGovU5z7PTMF
xoynYn0QzYVyOgsU9pqDcfqcp7X6HvVyiQGgAhm2ZZXGqQdtFzuosGV+PLNpGSzd
jvjidFxcDX9DduVD50hUXGOMdQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJjmoWKN
Y9ckZGV8DQfs6W8DhR9rMB8GA1UdIwQYMBaAFI1hHyzXN5SvgBwb9p2ISAkTgLSl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RkYxOS9EMjNDQjBCQUMx
QUYxMUVGQkU3QTE0NURDNEY5QUUwMi9qV0VmTE5jM2xLLUFIQnYyblloSUNST0F0
S1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pXRWZMTmMzbEstQUhCdjJuWWhJQ1JPQXRLVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OUZGMTkvRDIzQ0IwQkFDMUFGMTFFRkJFN0ExNDVEQzRGOUFFMDIvNTA5MEZERUNG
RjJFMTFGMDk5RTM2QjZEODlFRTUyOEUucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ0c7MA0GCSqGSIb3DQEBCwUAA4IBAQAB0LLyAJxHcrep24MH+x3K
MXshCi3SvGEWfvrVy4I4YCNhK63oAjz4DQHJABAGmDHUispDcoOZI5FbJP+RceAj
XrkKIJGySgwgFuV19ODCcKIQOSNTk+VfIzC3chfdhvC1bGjq6rqw5qzCFs58zQLH
fZR8GbOMSLju/CpM2HRAHd3QxtetcQEJTg6EsyMesQ7GqNkiLE9c+7YfdCZYs1BD
JmjLFHxTAL6+qQ0YkSC5hOaDBCUcshm96J9Gny/Be49/r2bnf9pHiPO1YM8+RMz0
VWQg7B1/U1oGzd4dr95GMp1s04PJFvnE2rBC2PT/Uufpbs6C9T9K/k92lC6OWBhC
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:51:44 2026 by rpki-client