Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/69AF571603F211F09BC45354C4F9AE02.roa
File:                     69AF571603F211F09BC45354C4F9AE02.roa (raw, json)
Hash identifier:          53Kyy1kva/SQpoiJO7sMdUqe3HQnREKk18bpEmS8HmQ=
Subject key identifier:   06:09:96:7B:55:33:58:DE:6F:25:50:CE:BE:47:5E:32:C7:70:50:7D
Certificate issuer:       /CN=A915201D/serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C
Certificate serial:       C5
Authority key identifier: DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/69AF571603F211F09BC45354C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:25:53 +0000
ROA not before:           Mon 03 Nov 2025 06:51:39 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     7545
IP address blocks:        203.21.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl
                          rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 06:18:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915201D, serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C
        Validity
            Not Before: Nov  3 06:51:39 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a59df1-6661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1a:2d:ca:43:6d:eb:12:35:a7:d3:fc:1b:e1:
                    ba:5f:39:fb:33:08:b6:72:a6:e5:93:ce:0b:82:97:
                    5b:f4:0f:f4:a2:76:69:13:88:35:76:24:79:b8:74:
                    79:d2:a3:b9:21:5f:81:bd:49:b9:f1:ab:53:3c:9f:
                    7f:7a:02:9c:11:64:ae:e9:02:4c:c8:69:1f:b6:27:
                    18:ea:be:82:ca:94:a8:d5:69:8d:f5:6e:4c:fd:49:
                    f5:f8:a5:16:c6:69:a6:da:27:f7:b1:f9:4b:1a:d9:
                    a0:28:39:ad:c2:9e:31:cb:d1:34:60:98:b1:f9:41:
                    71:60:98:de:6b:8e:03:e6:df:cc:b0:47:3d:85:53:
                    7b:cc:c2:ef:c1:73:ec:f0:a2:47:09:e2:56:01:44:
                    51:da:b9:2c:50:a0:3e:9c:a7:b3:f0:f3:cf:36:1e:
                    f1:08:43:90:e8:b0:12:3f:f8:f2:00:b5:d6:e5:24:
                    dc:f8:93:5e:86:12:ec:78:ff:94:1f:06:57:0d:b4:
                    a5:65:a2:5a:fd:99:59:0d:06:b1:31:43:ae:32:a4:
                    6a:74:b4:4b:ae:92:02:2a:3a:8e:e9:ec:d4:6d:e0:
                    ff:57:70:73:c0:7f:c2:bd:9c:11:62:97:ae:cd:34:
                    5a:8d:79:4a:d3:51:f1:17:70:cb:1d:13:33:a2:a5:
                    cf:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:09:96:7B:55:33:58:DE:6F:25:50:CE:BE:47:5E:32:C7:70:50:7D
            X509v3 Authority Key Identifier:
                keyid:DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/69AF571603F211F09BC45354C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.21.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:74:e7:d5:64:c6:61:6f:34:bf:a7:3e:43:96:c7:20:d6:16:
         d0:58:0b:3a:62:a5:95:21:c8:8f:f4:9a:45:a2:31:59:c9:9f:
         5f:05:6c:2d:e4:54:c9:81:78:54:d1:94:5c:5e:36:c3:8a:e8:
         0e:ab:5c:ae:e0:ae:6d:92:1f:ac:cb:ea:d2:4e:5d:52:a3:50:
         09:26:f8:99:2e:84:82:df:e0:d4:f3:e8:d3:72:bf:49:2a:01:
         6c:0e:77:52:31:66:bf:00:ba:7e:5d:41:e1:2a:58:9b:71:db:
         75:60:4d:c1:08:b8:eb:7a:93:e7:21:c8:3b:82:d0:e5:8f:11:
         44:c2:ae:1d:cc:a3:64:be:ed:fa:f4:75:e9:ed:41:89:a6:1d:
         e7:d1:d5:fa:8b:ea:1b:78:d2:02:e6:58:c1:00:ef:c7:c4:34:
         4e:20:b0:d2:47:62:3d:7d:06:c3:7e:2c:2b:24:6f:53:ad:90:
         90:3a:b9:81:48:3a:e0:f0:1c:ff:39:1f:9c:ab:61:d6:94:69:
         10:83:8b:e5:12:7b:49:de:d8:c8:ab:67:93:53:7c:0e:31:ff:
         fc:25:dd:0e:93:fd:7c:ec:5b:b2:f6:36:1d:19:b2:b6:4f:bc:
         b1:9f:8b:b9:e4:bd:39:f1:cc:1d:97:ae:03:0e:40:42:8f:25:
         07:11:54:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:27:06 2026 by rpki-client