Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/AE11F062738111F18BB794EF6BA30FBC.roa
File:                     AE11F062738111F18BB794EF6BA30FBC.roa (raw, json)
Hash identifier:          s9d5gC7hYaCvUgvmb9o9rutS4rMSCmVuPTuxjMy4QDw=
Subject key identifier:   EA:F3:50:A6:BB:D8:D2:8B:BA:B7:20:F6:0C:AF:9F:D5:DF:09:9C:FE
Certificate issuer:       /CN=A91E802C/serialNumber=DA0A51BA26315779BF6F83EFF034F260105C5119
Certificate serial:       88
Authority key identifier: DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/AE11F062738111F18BB794EF6BA30FBC.roa
Signing time:             Mon 29 Jun 2026 06:13:44 +0000
ROA not before:           Mon 29 Jun 2026 06:13:44 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     62864
IP address blocks:        103.19.50.0/24 maxlen: 24
                          103.19.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl
                          rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 09:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136 (0x88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E802C, serialNumber=DA0A51BA26315779BF6F83EFF034F260105C5119
        Validity
            Not Before: Jun 29 06:13:44 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6a420d18-5d3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:91:d8:06:89:c8:f7:bf:6c:b0:4c:fc:0c:cc:
                    05:a8:9b:ff:56:ca:66:f7:1e:2e:6c:92:75:a0:d7:
                    1b:6d:99:87:b0:56:11:a4:b4:11:35:a8:61:42:94:
                    39:54:b4:18:01:10:f8:58:20:31:a1:c8:a3:f0:23:
                    cf:20:69:d5:de:ff:93:2e:77:8a:e2:58:e5:40:2f:
                    3e:04:29:8a:b3:5f:f5:38:86:d5:71:d4:da:42:8d:
                    9b:e2:a7:0e:c7:b7:fc:e3:f4:32:73:59:bc:f9:24:
                    21:7b:71:e9:5c:a6:21:0f:ca:91:6c:f3:58:dd:ec:
                    fd:48:8a:13:c4:1f:68:92:ac:e9:e6:db:23:01:26:
                    32:39:aa:54:c5:6b:dc:89:d6:b1:ed:60:50:5a:a7:
                    97:f0:24:5a:e2:ab:24:06:89:35:8e:f8:9b:5f:f9:
                    9d:86:ee:2c:6f:3e:4d:27:79:c1:99:36:c6:12:e3:
                    fc:3c:02:c9:9f:3c:8a:8d:9d:0e:02:49:f2:e8:e2:
                    99:c4:25:93:41:ae:dc:7c:52:3f:f6:f9:9c:71:9c:
                    34:42:b4:81:82:61:03:17:18:cf:6b:ba:21:02:23:
                    31:0c:2d:a7:a2:07:68:09:a7:d7:93:93:05:83:a4:
                    3c:44:ad:6c:00:03:34:cd:e0:98:11:b6:af:4a:8a:
                    58:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F3:50:A6:BB:D8:D2:8B:BA:B7:20:F6:0C:AF:9F:D5:DF:09:9C:FE
            X509v3 Authority Key Identifier:
                keyid:DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/AE11F062738111F18BB794EF6BA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:ec:5d:8d:0c:13:fe:d6:1c:5b:cf:1f:fb:a8:c3:d6:03:f9:
         90:0d:37:b0:61:a7:47:d2:c0:1b:e8:91:27:7c:8b:b0:e7:4a:
         63:8b:81:d9:48:7b:d5:c2:ef:db:19:12:51:d6:95:c3:a3:a4:
         10:b7:f3:6c:9a:d9:f2:a0:1d:bf:fd:58:82:eb:bf:8d:66:72:
         a9:9b:8f:98:03:78:94:58:65:59:3e:dc:38:14:c1:22:82:78:
         3c:6e:91:30:7b:44:8a:2c:57:25:f5:07:20:bb:1d:18:3a:ef:
         f3:4d:0f:2b:15:bd:3e:20:1b:a0:10:dc:08:a3:55:29:8d:86:
         08:0a:ae:4e:75:35:fa:5f:33:a6:b1:50:dc:b2:b1:9b:ba:2e:
         3e:e1:fb:0d:f6:44:b2:d7:51:a5:29:bf:2d:0f:c6:62:86:e5:
         30:43:46:6b:cc:8f:f8:04:eb:ad:22:12:a1:79:bb:32:fe:ae:
         92:4a:10:bc:39:a0:c4:c6:20:49:54:6a:94:1e:08:53:13:e0:
         7e:56:2e:d3:50:c7:d0:d0:95:fe:9b:66:ba:5c:de:8d:cb:95:
         ba:95:68:06:f1:e2:23:e7:15:29:9b:a0:4d:de:c1:f2:73:46:
         30:c3:46:36:0b:be:d2:a9:e5:dc:93:60:51:57:83:7f:c1:32:
         51:66:87:6c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTgwMkMxMTAvBgNVBAUTKERBMEE1MUJBMjYzMTU3NzlCRjZGODNFRkYwMzRGMjYw
MTA1QzUxMTkwHhcNMjYwNjI5MDYxMzQ0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTQyMGQxOC01ZDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnJHYBonI979ssEz8DMwFqJv/Vspm9x4ubJJ1oNcbbZmHsFYRpLQRNahhQpQ5
VLQYARD4WCAxocij8CPPIGnV3v+TLneK4ljlQC8+BCmKs1/1OIbVcdTaQo2b4qcO
x7f84/Qyc1m8+SQhe3HpXKYhD8qRbPNY3ez9SIoTxB9okqzp5tsjASYyOapUxWvc
idax7WBQWqeX8CRa4qskBok1jvibX/mdhu4sbz5NJ3nBmTbGEuP8PALJnzyKjZ0O
Akny6OKZxCWTQa7cfFI/9vmccZw0QrSBgmEDFxjPa7ohAiMxDC2nogdoCafXk5MF
g6Q8RK1sAAM0zeCYEbavSopYYQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOrzUKa7
2NKLurcg9gyvn9XfCZz+MB8GA1UdIwQYMBaAFNoKUbomMVd5v2+D7/A08mAQXFEZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODAyQy8wMjM0NUY5NEE5
QkMxMUYwOTc1NjREMUJDNEY5QUUwMi8yZ3BSdWlZeFYzbV9iNFB2OERUeVlCQmNV
UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJncFJ1aVl4VjNtX2I0UHY4RFR5WUJCY1VSay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTgwMkMvMDIzNDVGOTRBOUJDMTFGMDk3NTY0RDFCQzRGOUFFMDIvQUUxMUYwNjI3
MzgxMTFGMThCQjc5NEVGNkJBMzBGQkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZxMyMA0GCSqGSIb3DQEBCwUAA4IBAQAL7F2NDBP+1hxbzx/7qMPW
A/mQDTewYadH0sAb6JEnfIuw50pji4HZSHvVwu/bGRJR1pXDo6QQt/NsmtnyoB2/
/ViC67+NZnKpm4+YA3iUWGVZPtw4FMEigng8bpEwe0SKLFcl9Qcgux0YOu/zTQ8r
Fb0+IBugENwIo1UpjYYICq5OdTX6XzOmsVDcsrGbui4+4fsN9kSy11GlKb8tD8Zi
huUwQ0ZrzI/4BOutIhKhebsy/q6SShC8OaDExiBJVGqUHghTE+B+Vi7TUMfQ0JX+
m2a6XN6Ny5W6lWgG8eIj5xUpm6BN3sHyc0Yww0Y2C77SqeXck2BRV4N/wTJRZods
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:31:33 2026 by rpki-client