Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/190BF77EF45111F0A4BBE8C5636F56BC.roa
File:                     190BF77EF45111F0A4BBE8C5636F56BC.roa (raw, json)
Hash identifier:          lBZVT70GvcennulqomPX6yKmyI41Eity8xYXZSW9dN8=
Subject key identifier:   5B:B8:17:AF:E8:27:8E:FB:31:D5:A1:7B:E3:72:DF:D5:8B:B6:D6:79
Certificate issuer:       /CN=A91A532D/serialNumber=875B42F7C62725778F56D951B712EB8879348A45
Certificate serial:       0892
Authority key identifier: 87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/190BF77EF45111F0A4BBE8C5636F56BC.roa
Signing time:             Wed 12 Aug 2026 20:41:03 +0000
ROA not before:           Wed 12 Aug 2026 20:41:03 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     154433
IP address blocks:        103.59.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl
                          rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 21:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2194 (0x892)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A532D, serialNumber=875B42F7C62725778F56D951B712EB8879348A45
        Validity
            Not Before: Aug 12 20:41:03 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a7cda5f-78f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:93:7a:fb:a5:17:d0:3d:90:0f:37:87:1a:08:
                    27:14:1f:ff:44:e2:fa:c8:66:99:0f:0b:bf:ed:ba:
                    cf:e0:85:11:be:af:fc:8e:b7:fb:22:57:c5:18:e2:
                    05:69:34:6f:b0:4c:4e:34:b6:2d:6b:eb:9e:03:8a:
                    49:2f:50:5e:be:6a:35:aa:12:4f:55:8d:f9:3f:fc:
                    de:ad:b7:77:b9:7e:76:ad:a6:76:cc:93:44:ef:c9:
                    52:09:9c:52:d5:03:b7:cb:88:80:a3:ff:bd:47:ce:
                    74:51:97:3e:83:69:c7:79:8a:7e:9a:7c:7e:0e:b8:
                    2c:f1:35:5c:36:26:04:4e:cd:7b:4c:51:98:83:62:
                    62:9a:f0:09:7e:48:77:3e:06:91:de:1f:bb:f1:db:
                    10:44:1f:2c:76:bd:6b:c4:e0:37:80:a8:5a:ed:d1:
                    ae:4c:a2:88:ba:cc:ad:af:87:c7:44:89:f5:cf:b9:
                    0e:9c:93:bd:18:d6:0a:4d:ff:38:79:6a:90:c9:14:
                    07:0e:0a:b4:3d:73:5a:ad:2a:ca:3d:c3:a0:00:57:
                    43:a6:6b:c9:88:40:c7:f3:45:0b:4e:0c:de:76:2b:
                    fc:60:7e:4b:d8:80:fc:5f:4b:b1:8a:ea:94:4e:50:
                    42:cd:2d:6c:ab:32:40:31:41:cc:5a:cd:af:1e:f7:
                    d5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B8:17:AF:E8:27:8E:FB:31:D5:A1:7B:E3:72:DF:D5:8B:B6:D6:79
            X509v3 Authority Key Identifier:
                keyid:87:5B:42:F7:C6:27:25:77:8F:56:D9:51:B7:12:EB:88:79:34:8A:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/h1tC98YnJXePVtlRtxLriHk0ikU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h1tC98YnJXePVtlRtxLriHk0ikU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A532D/EAA979FA0AC311EB964A8924C4F9AE02/190BF77EF45111F0A4BBE8C5636F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.59.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:63:6d:3f:8a:1a:f6:67:6c:e5:4b:0d:9f:24:95:97:0f:f6:
         e6:b4:8c:bb:c3:73:94:c7:71:61:28:61:08:a9:b2:f4:18:c5:
         44:6a:6e:51:45:65:0e:cb:82:87:e2:75:1e:8d:07:57:65:6e:
         37:ed:58:66:a5:9e:12:d9:96:56:61:9f:1c:cc:82:38:49:49:
         e2:7d:d4:fc:73:e7:81:d4:cf:a8:81:e1:e5:85:c9:7c:79:3e:
         d7:b9:5a:84:f3:2a:d8:03:ac:6f:4e:be:b6:67:f7:c4:06:09:
         56:fc:1d:b8:82:ff:d9:ea:93:4a:1b:6c:ac:c1:82:b3:17:ee:
         89:8f:6c:c9:d6:f4:71:10:8e:a7:47:23:eb:51:b9:53:d5:27:
         17:ca:05:b9:b5:9f:ee:28:21:0a:b7:fc:fe:d8:4f:99:e2:19:
         ec:62:a2:23:3d:7d:b1:50:85:86:c9:78:d4:95:c9:12:35:f8:
         eb:ff:12:53:48:34:c3:71:12:04:29:81:83:d6:d5:a3:b4:f6:
         a1:95:64:9f:e8:7f:a1:09:31:a3:ce:48:56:b1:8b:92:06:b8:
         4d:43:70:c3:4e:3e:76:1f:2e:3c:3f:06:98:24:9c:94:f8:bc:
         bf:92:4a:bc:df:83:2e:e9:c6:51:7e:fb:be:8f:f5:61:3b:e3:
         0b:91:c3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:15:51 2026 by rpki-client