Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/F42B3E3CD1F511F1A63571EB0466CEF9.roa
File:                     F42B3E3CD1F511F1A63571EB0466CEF9.roa (raw, json)
Hash identifier:          LF0yStH7/LQTVosIfkKXPL5dGV/RyFUX37OCxwnEBw0=
Subject key identifier:   9C:5E:F9:F2:BF:77:BB:A4:A1:F9:92:FB:27:D7:F1:FE:FE:BF:00:CE
Certificate issuer:       /CN=A91E802C/serialNumber=DA0A51BA26315779BF6F83EFF034F260105C5119
Certificate serial:       D4
Authority key identifier: DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/F42B3E3CD1F511F1A63571EB0466CEF9.roa
Signing time:             Tue 27 Oct 2026 11:02:52 +0000
ROA not before:           Tue 27 Oct 2026 11:02:52 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     205548
IP address blocks:        103.19.50.0/24 maxlen: 24
                          103.19.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl
                          rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Nov 2026 06:53:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E802C, serialNumber=DA0A51BA26315779BF6F83EFF034F260105C5119
        Validity
            Not Before: Oct 27 11:02:52 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6ae084dc-28fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4d:7d:ef:57:a0:fd:98:89:09:ef:6d:31:07:
                    3b:4f:fd:60:92:aa:08:03:b9:67:a1:38:00:76:95:
                    d3:94:6d:0f:70:75:95:56:c8:22:7d:69:78:d2:fd:
                    c3:de:cb:8d:3a:6b:9a:42:73:89:86:8e:2b:51:7d:
                    6c:16:9d:ba:b5:43:45:99:35:90:36:d4:3c:32:39:
                    23:d9:22:7e:fd:e6:48:de:94:2f:d7:1a:9a:2b:e8:
                    4a:77:31:f6:90:ab:17:0b:38:c5:ba:f1:8a:90:2d:
                    8f:92:21:87:e7:42:36:e1:d9:cd:e0:e9:f8:83:e5:
                    c0:ba:be:26:e3:46:52:27:3f:30:2e:59:dc:88:ee:
                    77:32:d7:4a:61:c4:a9:73:df:66:39:dc:ab:e5:f8:
                    30:5f:cb:a5:c5:cb:c7:77:26:7e:ef:7b:b4:d3:5d:
                    2b:30:27:3b:40:08:75:07:39:19:c2:c4:be:76:a2:
                    34:5a:5b:77:22:64:8f:eb:8a:d3:2c:95:e8:2c:92:
                    cf:5c:e0:5b:7b:f1:de:e6:0b:b4:8c:a3:dc:2a:e5:
                    18:19:69:79:8a:ca:45:44:c2:17:1c:71:4d:69:f8:
                    fa:29:9a:8c:a0:07:97:29:e9:a0:32:d0:de:9c:c8:
                    29:59:e1:a5:94:8c:56:0b:1c:a2:d7:61:48:ae:7b:
                    25:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5E:F9:F2:BF:77:BB:A4:A1:F9:92:FB:27:D7:F1:FE:FE:BF:00:CE
            X509v3 Authority Key Identifier:
                keyid:DA:0A:51:BA:26:31:57:79:BF:6F:83:EF:F0:34:F2:60:10:5C:51:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/2gpRuiYxV3m_b4Pv8DTyYBBcURk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2gpRuiYxV3m_b4Pv8DTyYBBcURk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E802C/02345F94A9BC11F097564D1BC4F9AE02/F42B3E3CD1F511F1A63571EB0466CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:d6:41:6c:8d:2f:ce:23:e2:ae:b7:4e:fc:7a:82:99:21:78:
         0f:4f:25:f8:30:d4:f1:64:33:55:3f:aa:03:12:5f:b7:9a:89:
         27:c1:1a:c8:e1:2d:28:3b:03:2d:ba:c6:9b:4e:f6:b1:c0:64:
         fa:5f:91:8b:c4:7e:88:1e:d8:e6:39:d5:3d:ef:72:9f:c7:52:
         8f:c8:06:84:1c:fa:f6:7c:d4:21:1f:89:f3:55:f5:3b:8f:45:
         38:19:ea:29:51:01:63:3b:4e:49:87:1a:8d:ab:8e:f9:4a:05:
         4e:73:5e:0e:4e:42:81:0e:01:2e:a8:d9:49:ec:2b:9b:06:a8:
         e3:1b:16:71:52:5d:bc:23:66:a4:41:c8:ee:5b:5a:f4:03:63:
         b0:5f:0c:a6:a0:00:b0:51:1c:89:19:05:64:7d:fb:3c:31:55:
         e2:02:17:fd:db:a0:ad:44:1a:6a:20:c7:f0:85:1a:45:ea:f2:
         18:c9:d0:b3:72:84:73:40:2e:d3:90:8a:02:16:73:bf:5a:27:
         d7:bc:e3:58:dd:46:70:14:23:87:a1:86:7c:47:89:2c:11:3b:
         65:c4:c0:17:44:64:ed:8f:80:42:71:87:05:59:48:89:03:48:
         c8:d4:1d:42:4f:ca:ca:cc:50:ca:5d:0f:fe:e8:94:84:59:79:
         cc:57:b4:1b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTgwMkMxMTAvBgNVBAUTKERBMEE1MUJBMjYzMTU3NzlCRjZGODNFRkYwMzRGMjYw
MTA1QzUxMTkwHhcNMjYxMDI3MTEwMjUyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWUwODRkYy0yOGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtk1971eg/ZiJCe9tMQc7T/1gkqoIA7lnoTgAdpXTlG0PcHWVVsgifWl40v3D
3suNOmuaQnOJho4rUX1sFp26tUNFmTWQNtQ8Mjkj2SJ+/eZI3pQv1xqaK+hKdzH2
kKsXCzjFuvGKkC2PkiGH50I24dnN4On4g+XAur4m40ZSJz8wLlnciO53MtdKYcSp
c99mOdyr5fgwX8ulxcvHdyZ+73u0010rMCc7QAh1BzkZwsS+dqI0Wlt3ImSP64rT
LJXoLJLPXOBbe/He5gu0jKPcKuUYGWl5ispFRMIXHHFNafj6KZqMoAeXKemgMtDe
nMgpWeGllIxWCxyi12FIrnslIQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJxe+fK/
d7ukofmS+yfX8f7+vwDOMB8GA1UdIwQYMBaAFNoKUbomMVd5v2+D7/A08mAQXFEZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODAyQy8wMjM0NUY5NEE5
QkMxMUYwOTc1NjREMUJDNEY5QUUwMi8yZ3BSdWlZeFYzbV9iNFB2OERUeVlCQmNV
UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJncFJ1aVl4VjNtX2I0UHY4RFR5WUJCY1VSay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RTgwMkMvMDIzNDVGOTRBOUJDMTFGMDk3NTY0RDFCQzRGOUFFMDIvRjQyQjNFM0NE
MUY1MTFGMUE2MzU3MUVCMDQ2NkNFRjkucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZxMyMA0GCSqGSIb3DQEBCwUAA4IBAQB11kFsjS/OI+Kut078eoKZ
IXgPTyX4MNTxZDNVP6oDEl+3moknwRrI4S0oOwMtusabTvaxwGT6X5GLxH6IHtjm
OdU973Kfx1KPyAaEHPr2fNQhH4nzVfU7j0U4GeopUQFjO05JhxqNq475SgVOc14O
TkKBDgEuqNlJ7CubBqjjGxZxUl28I2akQcjuW1r0A2OwXwymoACwURyJGQVkffs8
MVXiAhf926CtRBpqIMfwhRpF6vIYydCzcoRzQC7TkIoCFnO/WifXvONY3UZwFCOH
oYZ8R4ksETtlxMAXRGTtj4BCcYcFWUiJA0jI1B1CT8rKzFDKXQ/+6JSEWXnMV7Qb
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:12:11 2026 by rpki-client