Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/0F3F5C24FF0E11EFB7B9A13CC4F9AE02.roa
File:                     0F3F5C24FF0E11EFB7B9A13CC4F9AE02.roa (raw, json)
Hash identifier:          nXxKQeupAHWu0+rQi+prWqYe1pxneEGIFehlt67geeM=
Subject key identifier:   03:FE:C1:17:79:3D:F0:CB:E9:5E:DD:F3:BF:33:D3:7D:9C:59:20:92
Certificate issuer:       /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial:       378F
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/0F3F5C24FF0E11EFB7B9A13CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:28:40 +0000
ROA not before:           Sat 22 Mar 2025 15:01:00 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     139820
IP address blocks:        59.103.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 14:46:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14223 (0x378f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
        Validity
            Not Before: Mar 22 15:01:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a48557-58c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a7:1c:2d:20:8c:9c:ff:17:72:d1:0f:35:d0:
                    fc:58:6d:55:0e:d9:98:7e:2a:86:d4:83:04:bc:30:
                    e7:03:83:6e:21:50:a1:f1:94:e3:6c:6b:78:50:57:
                    58:0d:0c:2e:82:81:88:00:af:e7:f1:5b:94:03:06:
                    b4:bb:52:49:aa:0c:2f:e9:00:93:70:2b:9c:8a:f6:
                    d2:f8:88:e8:4a:ec:0c:f3:9f:99:9b:d4:10:df:1c:
                    66:64:ca:84:ee:af:06:bd:1a:06:5f:f0:4a:d7:05:
                    22:b1:64:4c:27:05:bd:fa:2a:b8:9e:a6:38:6f:eb:
                    f5:55:ba:c5:79:7b:fc:ec:00:0c:58:d3:22:b4:4b:
                    aa:b6:22:bc:2e:c5:1f:cd:ee:b6:90:19:3a:3b:0b:
                    e8:af:ce:d3:5c:5a:2c:3b:42:ba:63:13:0c:d0:b1:
                    b5:36:48:c9:77:a7:46:fe:06:1d:db:d3:83:c9:01:
                    7b:d3:f7:c6:99:c5:a7:40:fc:10:61:b5:14:a5:94:
                    69:ca:85:86:42:78:ab:cc:c6:ee:f5:5b:9f:db:f8:
                    b0:8f:c0:78:5c:5a:cd:54:bc:8f:05:e8:16:fa:d9:
                    6a:1b:05:ed:3f:36:d7:95:ed:54:cc:17:7f:97:05:
                    39:b7:fa:8d:2d:19:88:e0:40:4c:e6:ef:39:63:42:
                    8e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FE:C1:17:79:3D:F0:CB:E9:5E:DD:F3:BF:33:D3:7D:9C:59:20:92
            X509v3 Authority Key Identifier:
                keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/0F3F5C24FF0E11EFB7B9A13CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.103.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1a:3e:a8:aa:cb:22:7a:e7:08:91:e6:af:dd:74:71:5e:a4:48:
         bb:ec:6f:93:78:cf:57:ec:48:2f:8f:1a:ea:94:87:f2:91:fc:
         11:1e:0c:70:db:8b:2e:30:f2:28:0c:9b:cc:06:3a:99:9b:c3:
         2a:14:f2:84:ef:34:d6:47:d2:e4:4d:e2:87:bd:b0:53:92:bb:
         71:a9:9b:a2:46:b0:4f:e1:9e:b8:20:6c:49:60:63:08:51:2c:
         27:5a:e6:cc:ba:96:01:75:5b:a5:f3:2f:f7:f8:ff:27:7e:99:
         14:b1:61:6a:11:3a:4e:3d:0f:8e:c0:8a:92:9f:84:21:8c:21:
         df:4b:20:5c:a9:ea:e5:ac:c5:f0:87:a1:25:81:96:43:51:7a:
         85:ad:df:11:7b:76:a3:5e:44:c9:68:7f:c6:53:22:be:d6:ca:
         a7:34:4a:e0:58:00:53:d9:e0:d8:c6:02:5e:c0:24:bd:c8:15:
         8b:5a:ab:43:b7:0c:47:b6:2a:41:96:26:d0:e0:75:2f:ee:a0:
         54:01:a4:88:5b:dc:cc:b2:90:d4:62:ec:b2:03:07:70:e3:ff:
         8f:d3:5d:7b:ac:f4:fe:2a:fe:24:a6:ab:3b:80:78:b2:40:d2:
         e9:f6:08:da:1c:31:4e:e7:78:0b:c8:6e:6d:88:0b:27:ae:77:
         d0:31:9b:1a
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICN48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTA4MzIxMTAvBgNVBAUTKDlFRDkwNTUxMDdDNzBGODVCQjkxQThEQTAyNzBCNUNB
NzYwQUVCNTQwHhcNMjUwMzIyMTUwMTAwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODU1Ny01OGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0KccLSCMnP8XctEPNdD8WG1VDtmYfiqG1IMEvDDnA4NuIVCh8ZTjbGt4UFdY
DQwugoGIAK/n8VuUAwa0u1JJqgwv6QCTcCucivbS+IjoSuwM85+Zm9QQ3xxmZMqE
7q8GvRoGX/BK1wUisWRMJwW9+iq4nqY4b+v1VbrFeXv87AAMWNMitEuqtiK8LsUf
ze62kBk6Owvor87TXFosO0K6YxMM0LG1NkjJd6dG/gYd29ODyQF70/fGmcWnQPwQ
YbUUpZRpyoWGQnirzMbu9Vuf2/iwj8B4XFrNVLyPBegW+tlqGwXtPzbXle1UzBd/
lwU5t/qNLRmI4EBM5u85Y0KOowIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAP+wRd5
PfDL6V7d878z032cWSCSMB8GA1UdIwQYMBaAFJ7ZBVEHxw+Fu5Go2gJwtcp2CutU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDgzMi85REFGNzgwRTFE
OTQxMUUyOTkwMUYzRjgwOEIwMkNEMi9udGtGVVFmSEQ0VzdrYWphQW5DMXluWUs2
MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL250a0ZVUWZIRDRXN2thamFBbkMxeW5ZSzYxUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTA4MzIvOURBRjc4MEUxRDk0MTFFMjk5MDFGM0Y4MDhCMDJDRDIvMEYzRjVDMjRG
RjBFMTFFRkI3QjlBMTNDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQFO2cgMA0GCSqGSIb3DQEBCwUAA4IBAQAaPqiqyyJ65wiR5q/ddHFe
pEi77G+TeM9X7EgvjxrqlIfykfwRHgxw24suMPIoDJvMBjqZm8MqFPKE7zTWR9Lk
TeKHvbBTkrtxqZuiRrBP4Z64IGxJYGMIUSwnWubMupYBdVul8y/3+P8nfpkUsWFq
ETpOPQ+OwIqSn4QhjCHfSyBcqerlrMXwh6ElgZZDUXqFrd8Re3ajXkTJaH/GUyK+
1sqnNErgWABT2eDYxgJewCS9yBWLWqtDtwxHtipBlibQ4HUv7qBUAaSIW9zMspDU
YuyyAwdw4/+P0117rPT+Kv4kpqs7gHiyQNLp9gjaHDFO53gLyG5tiAsnrnfQMZsa
-----END CERTIFICATE-----
Generated at Sat Mar 14 11:05:48 2026 by rpki-client