Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/C2A46ED64FFD11F085A32C7CC4F9AE02.roa
File:                     C2A46ED64FFD11F085A32C7CC4F9AE02.roa (raw, json)
Hash identifier:          SE7L9xxDYALISbbgjMK3D5a2XUt+rTLuDYxmXb8JkIc=
Subject key identifier:   E9:21:89:46:B5:01:77:7F:31:B8:D1:00:F8:55:F7:20:BF:C6:49:A2
Certificate issuer:       /CN=A9169E54/serialNumber=EA603DF2BCA9ED5BB7BD20C1F4BC51D797C0A63F
Certificate serial:       B2
Authority key identifier: EA:60:3D:F2:BC:A9:ED:5B:B7:BD:20:C1:F4:BC:51:D7:97:C0:A6:3F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/C2A46ED64FFD11F085A32C7CC4F9AE02.roa
Signing time:             Thu 21 May 2026 07:39:48 +0000
ROA not before:           Thu 21 May 2026 07:39:48 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     153981
IP address blocks:        165.101.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.crl
                          rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 07:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169E54, serialNumber=EA603DF2BCA9ED5BB7BD20C1F4BC51D797C0A63F
        Validity
            Not Before: May 21 07:39:48 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a0eb6c4-5cce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4e:39:73:ee:bf:17:ee:48:56:e8:63:85:3f:
                    de:e3:06:56:a8:43:1f:d8:10:9f:f4:35:1f:ca:28:
                    90:8c:04:39:df:f9:d1:f6:bd:d8:a6:5f:a7:1e:8c:
                    19:b0:4e:c1:85:23:76:1e:35:65:2e:70:d5:83:79:
                    ff:23:96:c6:2f:01:f7:cd:47:99:4e:d3:86:ff:50:
                    2a:73:ab:f3:4f:fb:86:0a:dd:ab:7e:83:82:26:c5:
                    2a:82:91:30:a1:3f:a3:7b:e5:56:39:01:80:c4:67:
                    b2:80:18:4c:6b:4f:4a:0c:fa:73:22:0d:ef:1f:64:
                    1b:e5:9d:61:6a:42:d3:a6:46:98:7e:97:6c:e9:00:
                    29:3f:dd:15:90:b5:3e:64:4e:fb:85:e8:33:ae:d3:
                    db:7a:70:7f:e0:c5:6c:8c:aa:83:ca:15:83:6c:7a:
                    f5:bd:76:98:10:61:95:6c:06:45:0c:db:b9:5b:2e:
                    2f:e9:09:b2:88:54:3c:7e:54:41:ec:ea:8c:08:df:
                    d1:a5:a4:dc:fe:3f:7d:8f:51:17:41:71:da:a1:08:
                    bb:1c:cd:19:2c:e9:75:4b:32:a8:c2:bc:78:cd:fc:
                    d6:50:bd:d7:e0:eb:2d:b0:fb:09:ba:f2:37:c1:f6:
                    24:de:80:a7:54:30:af:88:06:8a:82:53:26:64:6b:
                    9e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:21:89:46:B5:01:77:7F:31:B8:D1:00:F8:55:F7:20:BF:C6:49:A2
            X509v3 Authority Key Identifier:
                keyid:EA:60:3D:F2:BC:A9:ED:5B:B7:BD:20:C1:F4:BC:51:D7:97:C0:A6:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/C2A46ED64FFD11F085A32C7CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:69:c4:b5:8f:37:e4:21:5b:44:b8:cc:bc:96:d8:4e:ec:1e:
         9c:a3:49:b9:27:cf:e1:c3:f6:89:c2:11:b4:a3:c9:f7:9b:1a:
         69:5b:c1:1d:c0:f0:83:9f:63:98:e7:07:1a:cd:db:17:02:2e:
         6c:86:40:bd:34:e4:6c:10:34:05:a3:06:b6:02:57:f7:05:5c:
         5f:73:87:4b:80:0a:93:7f:59:43:42:30:7e:4b:1e:e3:35:db:
         63:90:4e:cf:f2:fb:4b:67:ce:0a:67:ba:4e:17:de:47:44:7e:
         29:1a:3c:fa:77:a7:ed:51:57:23:4b:5b:ca:45:af:80:dc:ea:
         a2:c0:5e:d7:5d:24:53:2e:93:8b:8a:24:b4:c6:8c:2a:26:63:
         58:20:d6:fd:0a:4e:b6:2d:91:e2:06:73:e1:3d:d1:6f:76:d0:
         e2:5f:1b:7a:3f:34:6e:f4:0c:33:6f:a6:b8:d1:3e:59:d6:53:
         d3:ad:da:f9:7f:eb:5e:d3:dc:d7:b9:98:f0:ef:7c:15:32:67:
         d4:0d:4b:e0:25:ec:5c:33:24:a9:29:6c:ae:e6:7a:c5:77:b1:
         f8:fa:32:f7:ba:f1:18:66:f8:e5:ec:6f:41:c0:a4:06:2d:0f:
         ac:fc:51:46:18:ce:a6:b6:01:bd:8b:b2:bf:70:cf:52:f7:f1:
         9f:3b:12:f4
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlFNTQxMTAvBgNVBAUTKEVBNjAzREYyQkNBOUVENUJCN0JEMjBDMUY0QkM1MUQ3
OTdDMEE2M0YwHhcNMjYwNTIxMDczOTQ4WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTBlYjZjNC01Y2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxk45c+6/F+5IVuhjhT/e4wZWqEMf2BCf9DUfyiiQjAQ53/nR9r3Ypl+nHowZ
sE7BhSN2HjVlLnDVg3n/I5bGLwH3zUeZTtOG/1Aqc6vzT/uGCt2rfoOCJsUqgpEw
oT+je+VWOQGAxGeygBhMa09KDPpzIg3vH2Qb5Z1hakLTpkaYfpds6QApP90VkLU+
ZE77hegzrtPbenB/4MVsjKqDyhWDbHr1vXaYEGGVbAZFDNu5Wy4v6QmyiFQ8flRB
7OqMCN/RpaTc/j99j1EXQXHaoQi7HM0ZLOl1SzKowrx4zfzWUL3X4OstsPsJuvI3
wfYk3oCnVDCviAaKglMmZGue2wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOkhiUa1
AXd/MbjRAPhV9yC/xkmiMB8GA1UdIwQYMBaAFOpgPfK8qe1bt70gwfS8UdeXwKY/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUU1NC9EOUVFRDEwMDRG
RkIxMUYwQUFFQjM4NzdDNEY5QUUwMi82bUE5OHJ5cDdWdTN2U0RCOUx4UjE1ZkFw
ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzZtQTk4cnlwN1Z1M3ZTREI5THhSMTVmQXBqOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjlFNTQvRDlFRUQxMDA0RkZCMTFGMEFBRUIzODc3QzRGOUFFMDIvQzJBNDZFRDY0
RkZEMTFGMDg1QTMyQzdDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQApWUWMA0GCSqGSIb3DQEBCwUAA4IBAQBDacS1jzfkIVtEuMy8lthO
7B6co0m5J8/hw/aJwhG0o8n3mxppW8EdwPCDn2OY5wcazdsXAi5shkC9NORsEDQF
owa2Alf3BVxfc4dLgAqTf1lDQjB+Sx7jNdtjkE7P8vtLZ84KZ7pOF95HRH4pGjz6
d6ftUVcjS1vKRa+A3OqiwF7XXSRTLpOLiiS0xowqJmNYINb9Ck62LZHiBnPhPdFv
dtDiXxt6PzRu9Awzb6a40T5Z1lPTrdr5f+te09zXuZjw73wVMmfUDUvgJexcMySp
KWyu5nrFd7H4+jL3uvEYZvjl7G9BwKQGLQ+s/FFGGM6mtgG9i7K/cM9S9/GfOxL0
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:25:48 2026 by rpki-client