Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/190BF77EF45111F0A4BBE8C5636F56BC.roa
File:                     190BF77EF45111F0A4BBE8C5636F56BC.roa (raw, json)
Hash identifier:          Hs6ib3TffUGsbUHjDLM2h7Z/Rvg89YIH0XLcITVd2Fk=
Subject key identifier:   E4:2F:E7:68:E9:BC:49:36:45:0D:65:DB:3D:EC:09:6F:97:51:98:72
Certificate issuer:       /CN=A91A532D/serialNumber=875B42F7C62725778F56D951B712EB8879348A45
Certificate serial:       0839
Authority key identifier: 87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/190BF77EF45111F0A4BBE8C5636F56BC.roa
Signing time:             Sun 01 Mar 2026 16:03:29 +0000
ROA not before:           Sun 18 Jan 2026 09:36:00 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     154433
IP address blocks:        103.59.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl
                          rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2105 (0x839)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A532D, serialNumber=875B42F7C62725778F56D951B712EB8879348A45
        Validity
            Not Before: Jan 18 09:36:00 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a46351-22bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:da:1e:52:20:eb:d7:de:8d:0d:3f:9f:15:9d:
                    0a:6d:75:45:d2:ef:6a:02:e4:a4:22:cd:94:63:a8:
                    d8:18:d7:80:3a:5f:91:6a:60:ec:51:5f:c3:d2:53:
                    4c:fd:40:75:e4:52:6e:13:8a:01:b8:09:04:17:12:
                    07:b8:ff:02:39:71:64:7b:d0:2d:10:ff:dc:61:97:
                    4f:a9:0f:53:f8:fb:52:f7:bc:59:e8:32:47:da:a2:
                    cd:7a:0a:48:fa:b9:f6:51:85:da:3a:9a:2a:f4:95:
                    cc:58:a9:77:c7:04:0c:aa:8c:d3:eb:05:8e:d0:00:
                    f7:bc:81:b1:74:9a:f8:b4:30:6f:f5:77:3f:de:a7:
                    c2:59:38:0a:7a:48:da:86:83:9c:1d:bc:a8:f7:11:
                    9e:8f:fc:2b:1c:d6:9f:35:42:b6:c3:e1:96:ad:c1:
                    65:59:bd:18:fa:9a:13:ae:47:12:64:c1:c8:3e:6c:
                    39:6f:f5:00:ef:c6:ab:4d:80:2c:8c:3c:07:0f:dd:
                    41:79:a3:1a:39:c1:b3:0e:49:a2:b5:48:d2:a4:d8:
                    a5:3f:a0:6e:69:14:2f:e3:5a:93:07:c9:c1:4d:c0:
                    c2:30:cc:a7:db:4f:2e:f7:24:6a:fb:52:69:92:7b:
                    2a:d1:5b:9c:2c:7e:08:8a:46:7a:a8:f6:68:27:9e:
                    4d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:2F:E7:68:E9:BC:49:36:45:0D:65:DB:3D:EC:09:6F:97:51:98:72
            X509v3 Authority Key Identifier:
                keyid:87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/190BF77EF45111F0A4BBE8C5636F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.59.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:9a:38:c7:3c:b3:4e:4e:86:3a:88:1f:45:34:37:13:4e:2e:
         2a:cf:13:ab:81:98:e3:ba:87:e6:e5:cd:09:27:e6:31:32:ad:
         1d:12:8c:e0:4d:87:84:a9:83:8b:9c:d9:84:03:5a:b4:75:ca:
         f0:24:31:46:65:4f:7b:d5:24:40:6c:bf:d9:c9:ae:26:0e:58:
         02:cb:70:7e:f3:62:18:1c:b6:11:8f:d6:c1:73:7c:19:9f:45:
         9c:18:ca:d5:0b:b0:3d:f5:53:23:d7:a8:b2:07:f6:5a:8c:2e:
         2b:47:1d:1d:a7:e8:8d:eb:76:4a:55:d0:fd:38:38:50:da:f1:
         62:b7:65:32:06:dd:0e:0f:0d:f1:b0:00:0e:f4:cb:b5:c3:73:
         3f:39:32:c4:d1:94:79:2f:14:e8:3c:18:07:f9:b3:16:72:2e:
         1b:fa:de:20:a6:be:d3:d3:15:29:ea:ee:15:78:98:0e:29:42:
         0c:f9:4a:b6:0e:6b:8e:be:13:59:99:96:c5:3f:33:6c:26:9d:
         0f:b3:26:63:60:67:b2:02:b3:92:3c:9a:d6:9f:ea:38:26:6d:
         c3:7c:5f:5e:13:35:d6:d5:50:b6:3d:16:5c:2f:d1:ee:14:64:
         37:c1:e3:12:f9:d7:20:29:a9:29:01:b5:d7:8d:0f:a8:3a:ed:
         6a:20:e5:5f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICCDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTUzMkQxMTAvBgNVBAUTKDg3NUI0MkY3QzYyNzI1Nzc4RjU2RDk1MUI3MTJFQjg4
NzkzNDhBNDUwHhcNMjYwMTE4MDkzNjAwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NjM1MS0yMmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxNoeUiDr196NDT+fFZ0KbXVF0u9qAuSkIs2UY6jYGNeAOl+RamDsUV/D0lNM
/UB15FJuE4oBuAkEFxIHuP8COXFke9AtEP/cYZdPqQ9T+PtS97xZ6DJH2qLNegpI
+rn2UYXaOpoq9JXMWKl3xwQMqozT6wWO0AD3vIGxdJr4tDBv9Xc/3qfCWTgKekja
hoOcHbyo9xGej/wrHNafNUK2w+GWrcFlWb0Y+poTrkcSZMHIPmw5b/UA78arTYAs
jDwHD91BeaMaOcGzDkmitUjSpNilP6BuaRQv41qTB8nBTcDCMMyn208u9yRq+1Jp
knsq0VucLH4IikZ6qPZoJ55N+QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOQv52jp
vEk2RQ1l2z3sCW+XUZhyMB8GA1UdIwQYMBaAFIdbQvfGJyV3j1bZUbcS64h5NIpF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMyRC9FQUE5NzlGQTBB
QzMxMUVCOTY0QTg5MjRDNEY5QUUwMi9oMXRDOThZbkpYZVBWdGxSdHhMcmlIazBp
a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2gxdEM5OFluSlhlUFZ0bFJ0eExyaUhrMGlrVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTUzMkQvRUFBOTc5RkEwQUMzMTFFQjk2NEE4OTI0QzRGOUFFMDIvMTkwQkY3N0VG
NDUxMTFGMEE0QkJFOEM1NjM2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZzuxMA0GCSqGSIb3DQEBCwUAA4IBAQAGmjjHPLNOToY6iB9FNDcT
Ti4qzxOrgZjjuofm5c0JJ+YxMq0dEozgTYeEqYOLnNmEA1q0dcrwJDFGZU971SRA
bL/Zya4mDlgCy3B+82IYHLYRj9bBc3wZn0WcGMrVC7A99VMj16iyB/ZajC4rRx0d
p+iN63ZKVdD9ODhQ2vFit2UyBt0ODw3xsAAO9Mu1w3M/OTLE0ZR5LxToPBgH+bMW
ci4b+t4gpr7T0xUp6u4VeJgOKUIM+Uq2DmuOvhNZmZbFPzNsJp0PsyZjYGeyArOS
PJrWn+o4Jm3DfF9eEzXW1VC2PRZcL9HuFGQ3weMS+dcgKakpAbXXjQ+oOu1qIOVf
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:46:25 2026 by rpki-client