Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/5090FDECFF2E11F099E36B6D89EE528E.roa
File:                     5090FDECFF2E11F099E36B6D89EE528E.roa (raw, json)
Hash identifier:          PrWTL5usD2G+p37NAOHzpvbn2FCtmNcY07TLdtnld18=
Subject key identifier:   DB:31:26:42:8B:0E:46:31:45:41:0E:47:4E:81:52:8D:81:2F:BC:A2
Certificate issuer:       /CN=A919FF19/serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
Certificate serial:       F2
Authority key identifier: 8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/5090FDECFF2E11F099E36B6D89EE528E.roa
Signing time:             Sun 01 Mar 2026 16:57:13 +0000
ROA not before:           Tue 03 Feb 2026 06:28:36 +0000
ROA not after:            Tue 02 Jun 2026 00:00:00 +0000
asID:                     132222
IP address blocks:        103.71.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl
                          rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FF19, serialNumber=8D611F2CD73794AF801C1BF69D8848091380B4A5
        Validity
            Not Before: Feb  3 06:28:36 2026 GMT
            Not After : Jun  2 00:00:00 2026 GMT
        Subject: CN=69a46fe9-a12a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b1:34:77:bf:d6:12:21:f7:83:9e:0e:52:2a:
                    50:3e:45:e2:ee:94:e4:36:e7:41:62:71:bd:38:3f:
                    7c:83:ec:35:e5:1a:f3:4a:fe:56:8f:f1:6e:e6:fd:
                    78:9b:b1:35:75:25:99:df:55:4b:98:e3:68:61:cc:
                    40:c5:bf:99:68:a5:f1:47:07:1d:7f:2b:e5:b7:3b:
                    9a:bd:ce:3b:58:b0:73:5d:eb:fd:95:3e:aa:09:82:
                    b1:18:49:ff:cb:25:ec:a0:f2:01:1d:95:b9:79:7e:
                    f0:97:50:f3:09:a0:ba:76:fe:6e:8d:52:43:68:f2:
                    65:33:5a:25:79:8a:17:41:70:fc:df:0b:c6:2e:97:
                    6b:06:63:35:e3:8e:fc:d3:63:47:b8:28:9d:08:ab:
                    42:f5:b6:b5:b4:39:54:62:44:a8:09:be:f2:5b:b8:
                    88:6a:ac:9c:b7:e6:dd:28:28:43:2a:80:3c:9c:72:
                    af:5e:1e:9a:05:1b:fb:93:77:8d:ab:c5:43:90:32:
                    74:27:07:9a:c3:06:ea:30:0a:7d:49:0b:68:b5:a0:
                    98:83:8f:9c:b9:64:4d:be:6c:25:db:e8:ac:70:69:
                    ab:ed:6e:f2:b0:43:f1:78:8b:30:02:ad:1a:0b:6f:
                    e0:44:79:f8:23:42:91:64:d1:70:c6:12:03:e6:2d:
                    92:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:31:26:42:8B:0E:46:31:45:41:0E:47:4E:81:52:8D:81:2F:BC:A2
            X509v3 Authority Key Identifier:
                keyid:8D:61:1F:2C:D7:37:94:AF:80:1C:1B:F6:9D:88:48:09:13:80:B4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/jWEfLNc3lK-AHBv2nYhICROAtKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jWEfLNc3lK-AHBv2nYhICROAtKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FF19/D23CB0BAC1AF11EFBE7A145DC4F9AE02/5090FDECFF2E11F099E36B6D89EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:81:1c:ab:71:f8:a5:e9:1d:bb:68:a9:4f:1d:03:c0:22:41:
         c6:fd:00:23:d2:97:c6:0f:c0:38:6d:14:ce:fa:3e:a2:a9:fb:
         59:45:4b:0c:51:bd:ff:02:71:6c:88:0d:83:56:3a:7f:d9:b5:
         72:32:cf:4a:c6:47:c5:b7:4a:e5:c7:d4:28:bd:07:7a:e6:b5:
         f4:ef:b8:2f:df:8b:69:4d:5e:b9:ee:0c:34:be:cd:75:7f:1b:
         f5:1c:4e:18:92:20:50:35:a1:6f:ff:5e:18:3b:ba:f0:a0:71:
         d4:78:ca:84:87:b7:08:b7:a3:6c:73:ff:a8:59:9b:6a:4f:c2:
         a8:6c:10:d5:0a:be:59:d7:9e:27:f5:5b:a8:5a:e0:20:7d:5c:
         84:7c:3e:a5:4b:82:cd:0d:76:a7:1f:94:7d:fa:6a:02:c2:3b:
         df:c2:52:56:c8:15:32:75:e6:3b:1f:7a:81:60:7b:47:1c:95:
         fc:8f:fb:d9:df:82:bd:ed:0c:c4:1f:04:d4:2a:23:ea:5c:89:
         1c:93:e9:c6:db:e7:f4:53:11:30:59:09:5e:2d:c0:79:00:f5:
         5a:ea:36:61:d7:2f:84:cb:c2:7f:d7:d7:97:bd:a0:df:6c:0f:
         f5:a5:bd:57:3e:0e:05:80:d8:43:50:82:89:c9:20:cc:89:17:
         53:ff:59:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:18:16 2026 by rpki-client