Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/C2C5450E608B11F0BF46DC2EC4F9AE02.roa
File:                     C2C5450E608B11F0BF46DC2EC4F9AE02.roa (raw, json)
Hash identifier:          /ee3Z/RejGv34651CFjDfo357/BI2yYheaPQiVddGg4=
Subject key identifier:   F6:45:C4:58:8B:96:E9:41:49:0B:A2:27:8F:B5:46:79:41:A8:F2:C6
Certificate issuer:       /CN=A9151B71/serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206
Certificate serial:       07DB
Authority key identifier: 6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/C2C5450E608B11F0BF46DC2EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 09:41:12 +0000
ROA not before:           Mon 14 Jul 2025 08:23:03 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     13335
IP address blocks:        103.215.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl
                          rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 21:11:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2011 (0x7db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151B71, serialNumber=6DA16BF0CD09EF768F90213B66D8CBC3CE934206
        Validity
            Not Before: Jul 14 08:23:03 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a409b8-0bfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:99:f1:e1:e1:67:d9:44:fc:1a:2b:99:52:ad:
                    20:fc:2c:9c:c8:66:c7:4a:20:78:7b:6d:92:37:24:
                    00:bd:0e:46:bc:34:43:eb:41:6a:44:b6:6b:a4:3b:
                    a2:05:84:12:98:92:88:fb:79:df:39:33:88:44:82:
                    38:5a:11:3a:5f:a7:fa:50:da:d0:b1:0e:71:c2:31:
                    c6:f8:f3:93:16:4b:d6:32:4e:b6:04:f9:6a:45:a5:
                    d4:3e:24:55:6c:2a:c1:cc:19:ec:59:59:28:08:d6:
                    4b:3f:d3:08:5e:ac:c7:d7:ce:41:e6:c1:d3:d1:ad:
                    12:aa:53:73:d1:3d:e6:08:82:fd:3b:ef:76:91:5f:
                    9e:da:1f:a7:aa:56:34:8f:4d:63:13:3b:ce:47:e4:
                    f5:85:f2:4c:8e:de:97:52:8e:f2:df:8f:a6:f8:fc:
                    43:80:e3:9e:d8:03:e5:c1:be:05:89:7e:9e:8d:50:
                    cd:97:19:d8:45:d3:95:2c:50:6e:45:5d:e3:b5:65:
                    75:55:ab:54:9d:c5:b5:a3:85:2b:f4:80:bd:52:9f:
                    fa:cc:93:cd:b4:b8:aa:08:64:c3:f6:ae:3b:9c:dc:
                    7e:14:31:74:b9:7c:28:6f:a1:5f:00:6b:2e:52:99:
                    29:50:68:53:44:42:76:17:e7:3a:0f:69:08:c9:bb:
                    af:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:45:C4:58:8B:96:E9:41:49:0B:A2:27:8F:B5:46:79:41:A8:F2:C6
            X509v3 Authority Key Identifier:
                keyid:6D:A1:6B:F0:CD:09:EF:76:8F:90:21:3B:66:D8:CB:C3:CE:93:42:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/baFr8M0J73aPkCE7ZtjLw86TQgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/baFr8M0J73aPkCE7ZtjLw86TQgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151B71/9FD5F80E2EA911EB9168FB37C4F9AE02/C2C5450E608B11F0BF46DC2EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:f1:19:30:57:21:e4:ae:4f:5d:b9:b4:17:ef:d3:54:2c:05:
         d4:b7:72:1a:f6:65:bf:07:63:e7:06:e7:7c:1e:c9:0a:fb:60:
         2a:3d:30:7b:7c:a5:03:39:3b:49:95:41:c0:cb:72:c1:95:de:
         4b:8f:86:75:84:db:fa:70:54:30:bb:9c:d2:a8:e0:d4:d8:57:
         f6:89:46:f2:30:67:44:d9:b9:c4:d6:fb:51:1e:32:3e:1a:34:
         c9:c0:75:29:2b:0c:30:29:ad:d7:f7:e0:49:49:28:7b:a2:90:
         70:ed:d5:44:38:ec:a7:3d:ae:0e:9c:d7:85:d7:f0:83:64:f1:
         3b:29:ac:3d:ae:ef:e6:46:66:1d:78:f0:f2:a2:76:6a:55:6f:
         4e:2d:8a:5d:0f:26:88:5d:96:24:f8:bc:31:59:95:89:7b:64:
         3d:b5:9d:90:49:fd:f3:77:c7:df:70:93:86:e9:36:93:42:54:
         2c:b1:d0:58:ac:0c:2f:35:29:44:93:be:c8:76:8d:5b:50:98:
         3e:73:e3:fa:4f:b7:ba:14:7b:01:3b:06:71:a6:bc:d8:43:fd:
         9c:e5:5a:a6:40:32:9c:3e:1f:93:f3:ee:09:43:b7:58:78:d8:
         ab:ef:5a:b9:23:af:8f:b0:2d:36:fb:a2:0b:e2:90:3e:f5:80:
         0e:0e:ca:db
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICB9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTFCNzExMTAvBgNVBAUTKDZEQTE2QkYwQ0QwOUVGNzY4RjkwMjEzQjY2RDhDQkMz
Q0U5MzQyMDYwHhcNMjUwNzE0MDgyMzAzWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MDliOC0wYmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx5nx4eFn2UT8GiuZUq0g/CycyGbHSiB4e22SNyQAvQ5GvDRD60FqRLZrpDui
BYQSmJKI+3nfOTOIRII4WhE6X6f6UNrQsQ5xwjHG+POTFkvWMk62BPlqRaXUPiRV
bCrBzBnsWVkoCNZLP9MIXqzH185B5sHT0a0SqlNz0T3mCIL9O+92kV+e2h+nqlY0
j01jEzvOR+T1hfJMjt6XUo7y34+m+PxDgOOe2APlwb4FiX6ejVDNlxnYRdOVLFBu
RV3jtWV1VatUncW1o4Ur9IC9Up/6zJPNtLiqCGTD9q47nNx+FDF0uXwob6FfAGsu
UpkpUGhTREJ2F+c6D2kIybuvAQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPZFxFiL
lulBSQuiJ4+1RnlBqPLGMB8GA1UdIwQYMBaAFG2ha/DNCe92j5AhO2bYy8POk0IG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUI3MS85RkQ1RjgwRTJF
QTkxMUVCOTE2OEZCMzdDNEY5QUUwMi9iYUZyOE0wSjczYVBrQ0U3WnRqTHc4NlRR
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JhRnI4TTBKNzNhUGtDRTdadGpMdzg2VFFnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTFCNzEvOUZENUY4MEUyRUE5MTFFQjkxNjhGQjM3QzRGOUFFMDIvQzJDNTQ1MEU2
MDhCMTFGMEJGNDZEQzJFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ9cWMA0GCSqGSIb3DQEBCwUAA4IBAQB+8RkwVyHkrk9dubQX79NU
LAXUt3Ia9mW/B2PnBud8HskK+2AqPTB7fKUDOTtJlUHAy3LBld5Lj4Z1hNv6cFQw
u5zSqODU2Ff2iUbyMGdE2bnE1vtRHjI+GjTJwHUpKwwwKa3X9+BJSSh7opBw7dVE
OOynPa4OnNeF1/CDZPE7Kaw9ru/mRmYdePDyonZqVW9OLYpdDyaIXZYk+LwxWZWJ
e2Q9tZ2QSf3zd8ffcJOG6TaTQlQssdBYrAwvNSlEk77Ido1bUJg+c+P6T7e6FHsB
OwZxprzYQ/2c5VqmQDKcPh+T8+4JQ7dYeNir71q5I6+PsC02+6IL4pA+9YAODsrb
-----END CERTIFICATE-----
Generated at Wed Mar 4 14:26:14 2026 by rpki-client