Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/E62BCC784C9211F09A2E3014C4F9AE02.roa
File:                     E62BCC784C9211F09A2E3014C4F9AE02.roa (raw, json)
Hash identifier:          xT5qy146gRzAu39NzX0c8OhjswZUhA9rByvpjRnnGOU=
Subject key identifier:   49:8D:1D:20:E9:0F:4F:88:DD:B0:32:57:9B:BF:E1:65:C1:17:07:4B
Certificate issuer:       /CN=A91855B3/serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958
Certificate serial:       9E
Authority key identifier: 2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/E62BCC784C9211F09A2E3014C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:53:02 +0000
ROA not before:           Fri 05 Dec 2025 05:15:31 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     141392
IP address blocks:        103.158.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl
                          rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:30:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91855B3, serialNumber=2D01A1942BAFD9D3B31DDBFE75324BAD62B60958
        Validity
            Not Before: Dec  5 05:15:31 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a5963e-51ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:90:8b:b2:ae:10:bd:bf:31:a7:79:9a:06:a5:
                    f9:3d:30:70:2a:a1:61:0f:d5:67:ad:7b:39:dc:78:
                    01:d6:a6:af:7e:43:21:ba:01:07:5b:a1:a7:be:10:
                    1c:16:e0:c6:83:d8:98:e8:bc:06:8a:55:fe:88:3a:
                    b2:36:64:4f:88:3d:7d:60:0d:ff:3d:d7:99:0f:56:
                    01:e7:22:ce:21:b1:81:74:de:fe:cf:12:30:e1:2c:
                    f2:91:39:57:25:17:ac:3b:ea:48:0c:56:f2:f6:4f:
                    f0:fc:b9:9a:a3:2d:15:9b:7a:ee:81:73:17:b3:2f:
                    d4:7f:0e:e4:b7:b4:46:24:8b:23:75:db:9c:1f:18:
                    48:b6:ea:a0:ee:f5:ad:ff:5b:db:bc:c3:d9:02:b1:
                    55:40:f1:97:e7:ca:82:1d:57:42:50:d6:47:62:d5:
                    d1:f2:37:40:af:31:fa:79:7c:60:e7:b3:ae:84:45:
                    50:84:d8:60:8d:8f:b3:f5:2f:84:7c:b5:e5:e9:2b:
                    64:af:44:2a:8f:28:b6:ce:a7:13:10:31:f8:47:53:
                    aa:74:ac:a6:9e:74:73:26:93:64:be:b8:44:94:cf:
                    99:de:1f:f4:19:3f:32:30:4b:3f:ec:a1:06:a2:41:
                    e5:aa:1e:aa:8a:81:5c:b6:f8:86:ae:31:34:e3:84:
                    3d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8D:1D:20:E9:0F:4F:88:DD:B0:32:57:9B:BF:E1:65:C1:17:07:4B
            X509v3 Authority Key Identifier:
                keyid:2D:01:A1:94:2B:AF:D9:D3:B3:1D:DB:FE:75:32:4B:AD:62:B6:09:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/LQGhlCuv2dOzHdv-dTJLrWK2CVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LQGhlCuv2dOzHdv-dTJLrWK2CVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91855B3/26B1E18A31ED11F089DC773BC4F9AE02/E62BCC784C9211F09A2E3014C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:2a:08:30:62:a1:2e:84:1a:0b:2e:e5:b0:91:7f:71:36:b9:
         75:7e:92:3c:04:fc:0a:16:32:98:0e:21:04:ab:d0:54:f4:cf:
         7a:89:b3:d6:56:76:47:85:44:13:02:2b:3d:f1:2b:9b:dd:09:
         c2:43:34:80:f7:09:02:3f:f1:71:7e:a9:9d:d5:60:e0:38:69:
         2c:9d:18:cc:72:eb:1f:e3:01:ea:dc:e2:8b:39:71:bb:70:42:
         ea:f7:96:41:a7:e5:72:b9:ff:18:55:c9:37:60:37:ce:5d:2f:
         e2:1f:d6:1c:5a:16:a6:c6:13:d8:32:52:ad:03:23:59:e6:a0:
         b9:e9:85:34:78:e9:25:f4:4b:f6:18:d4:98:60:32:b1:6f:de:
         05:c3:25:28:ee:8b:76:db:1d:4e:6a:bd:08:00:1a:0c:a4:a0:
         e2:06:9c:10:e0:35:10:08:98:66:28:0a:b8:8c:9f:50:5b:18:
         76:29:0f:a4:77:86:f1:6a:b0:e8:d7:03:43:22:aa:89:2a:16:
         eb:08:89:fa:de:14:ae:fb:53:4e:72:83:ad:f0:a7:2c:4c:63:
         93:15:50:00:5a:4a:70:ce:ea:5e:b9:56:ca:c7:fe:e4:ea:23:
         e8:bb:24:35:8c:37:77:ae:3f:8f:33:ca:7d:d5:9c:14:17:03:
         a6:9d:6b:5a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODU1QjMxMTAvBgNVBAUTKDJEMDFBMTk0MkJBRkQ5RDNCMzFEREJGRTc1MzI0QkFE
NjJCNjA5NTgwHhcNMjUxMjA1MDUxNTMxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OTYzZS01MWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApJCLsq4Qvb8xp3maBqX5PTBwKqFhD9VnrXs53HgB1qavfkMhugEHW6GnvhAc
FuDGg9iY6LwGilX+iDqyNmRPiD19YA3/PdeZD1YB5yLOIbGBdN7+zxIw4SzykTlX
JResO+pIDFby9k/w/Lmaoy0Vm3rugXMXsy/Ufw7kt7RGJIsjdducHxhItuqg7vWt
/1vbvMPZArFVQPGX58qCHVdCUNZHYtXR8jdArzH6eXxg57OuhEVQhNhgjY+z9S+E
fLXl6Stkr0Qqjyi2zqcTEDH4R1OqdKymnnRzJpNkvrhElM+Z3h/0GT8yMEs/7KEG
okHlqh6qioFctviGrjE044Q9VwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEmNHSDp
D0+I3bAyV5u/4WXBFwdLMB8GA1UdIwQYMBaAFC0BoZQrr9nTsx3b/nUyS61itglY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTVCMy8yNkIxRTE4QTMx
RUQxMUYwODlEQzc3M0JDNEY5QUUwMi9MUUdobEN1djJkT3pIZHYtZFRKTHJXSzJD
VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xRR2hsQ3V2MmRPekhkdi1kVEpMcldLMkNWZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODU1QjMvMjZCMUUxOEEzMUVEMTFGMDg5REM3NzNCQzRGOUFFMDIvRTYyQkNDNzg0
QzkyMTFGMDlBMkUzMDE0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ54TMA0GCSqGSIb3DQEBCwUAA4IBAQBUKggwYqEuhBoLLuWwkX9x
Nrl1fpI8BPwKFjKYDiEEq9BU9M96ibPWVnZHhUQTAis98Sub3QnCQzSA9wkCP/Fx
fqmd1WDgOGksnRjMcusf4wHq3OKLOXG7cELq95ZBp+Vyuf8YVck3YDfOXS/iH9Yc
WhamxhPYMlKtAyNZ5qC56YU0eOkl9Ev2GNSYYDKxb94FwyUo7ot22x1Oar0IABoM
pKDiBpwQ4DUQCJhmKAq4jJ9QWxh2KQ+kd4bxarDo1wNDIqqJKhbrCIn63hSu+1NO
coOt8KcsTGOTFVAAWkpwzupeuVbKx/7k6iPouyQ1jDd3rj+PM8p91ZwUFwOmnWta
-----END CERTIFICATE-----
Generated at Fri Mar 27 01:13:39 2026 by rpki-client