Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/2F9915D8718D11EE97E3E022C4F9AE02.roa
File:                     2F9915D8718D11EE97E3E022C4F9AE02.roa (raw, json)
Hash identifier:          GrGkG20pVLIXaVavRxjSp69qWiDnznKbma4BJAp5ZPg=
Subject key identifier:   20:85:C3:50:44:50:7A:FF:50:07:94:60:52:00:84:5F:71:44:5F:5A
Certificate issuer:       /CN=A9166123/serialNumber=7B40A8CF8F4F1A06C36E2034F18A38BF98CA5B18
Certificate serial:       021D
Authority key identifier: 7B:40:A8:CF:8F:4F:1A:06:C3:6E:20:34:F1:8A:38:BF:98:CA:5B:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/2F9915D8718D11EE97E3E022C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:00:21 +0000
ROA not before:           Tue 03 Feb 2026 02:23:08 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     19905
IP address blocks:        103.234.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.crl
                          rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:13:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166123, serialNumber=7B40A8CF8F4F1A06C36E2034F18A38BF98CA5B18
        Validity
            Not Before: Feb  3 02:23:08 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a43865-a44a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:61:ba:e1:68:ae:4c:43:67:6a:62:b6:cb:4e:
                    b4:22:01:0e:84:72:c5:f3:84:66:e9:f0:5a:a5:bf:
                    8d:58:b6:8f:34:cf:14:40:1f:c5:dc:d8:46:75:ab:
                    c6:bd:4c:cb:d7:e3:93:60:76:37:4e:5e:39:b2:15:
                    9a:9a:79:92:05:21:38:5c:e4:5c:aa:3a:ee:3d:51:
                    93:ab:5a:f3:3f:56:aa:f3:41:10:a1:54:86:08:7f:
                    76:ba:b1:ce:9f:01:b6:28:0e:d7:0a:f4:b4:a3:7a:
                    32:c3:11:d4:72:25:be:6a:12:8f:0d:a1:27:46:33:
                    5c:68:71:37:a6:b1:3f:8e:cb:af:4f:60:aa:6c:53:
                    59:60:ee:68:51:72:ab:7b:2d:e8:0d:49:39:84:c4:
                    ca:6a:32:1a:56:56:f7:bc:7e:9d:41:fb:00:d8:09:
                    25:d5:33:bf:26:0e:8a:98:a6:63:77:eb:b7:d4:58:
                    f0:2e:de:34:c8:e4:72:cd:ac:72:bc:58:b2:31:83:
                    3b:20:cb:33:8c:ab:f9:d7:e8:08:66:25:1a:92:a8:
                    e9:e5:9b:b1:73:eb:04:0d:a8:00:b8:11:1e:4f:f6:
                    9a:09:5a:de:13:d4:83:f2:0a:19:b1:3d:a1:d9:1d:
                    53:50:c5:9a:08:9b:25:8e:12:96:49:31:aa:3a:41:
                    4f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:85:C3:50:44:50:7A:FF:50:07:94:60:52:00:84:5F:71:44:5F:5A
            X509v3 Authority Key Identifier:
                keyid:7B:40:A8:CF:8F:4F:1A:06:C3:6E:20:34:F1:8A:38:BF:98:CA:5B:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/e0Coz49PGgbDbiA08Yo4v5jKWxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e0Coz49PGgbDbiA08Yo4v5jKWxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166123/1B00EAE8F48C11EDA8895453C4F9AE02/2F9915D8718D11EE97E3E022C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:89:68:83:19:bd:f0:cd:6b:f1:0e:0e:7d:23:b4:22:bf:6b:
         5f:e4:97:5f:ab:c4:9a:d5:60:9a:fe:09:89:0a:ab:53:fd:81:
         46:54:fe:da:0d:8c:7a:0d:12:83:7b:23:27:cb:2f:7c:a5:e3:
         06:88:43:b8:4d:8b:1a:02:89:a4:a1:00:2c:da:22:da:cf:b6:
         2b:3b:22:96:fa:dd:63:e0:0a:b8:c0:85:a1:d1:7c:bd:7e:95:
         e6:33:06:fa:04:22:21:4a:ed:a8:3e:53:67:bd:12:ec:61:55:
         d1:1f:af:f8:ef:05:c7:5c:2a:b4:a5:fd:16:5b:91:53:de:7e:
         fb:54:85:4d:00:3a:aa:0e:26:37:db:22:91:4f:ff:e8:50:35:
         e6:83:1b:ef:3b:d1:a5:3b:77:c4:67:f1:16:dc:82:63:c0:86:
         af:bf:45:f2:cc:44:54:85:67:09:f4:f7:f9:4b:be:0a:59:a6:
         be:d5:7e:5b:9f:48:ae:dd:c3:c9:da:73:f0:77:ac:75:8f:be:
         16:a8:2f:a7:51:e4:11:54:c2:e4:87:d6:b6:04:0e:92:c0:ae:
         7e:27:cd:2a:8c:0c:1b:dc:96:62:04:df:03:10:88:d7:52:f1:
         50:ab:2e:43:90:52:a2:95:a9:70:0b:54:70:6c:9a:7b:97:23:
         fe:fd:11:8b
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjYxMjMxMTAvBgNVBAUTKDdCNDBBOENGOEY0RjFBMDZDMzZFMjAzNEYxOEEzOEJG
OThDQTVCMTgwHhcNMjYwMjAzMDIyMzA4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0Mzg2NS1hNDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA32G64WiuTENnamK2y060IgEOhHLF84Rm6fBapb+NWLaPNM8UQB/F3NhGdavG
vUzL1+OTYHY3Tl45shWamnmSBSE4XORcqjruPVGTq1rzP1aq80EQoVSGCH92urHO
nwG2KA7XCvS0o3oywxHUciW+ahKPDaEnRjNcaHE3prE/jsuvT2CqbFNZYO5oUXKr
ey3oDUk5hMTKajIaVlb3vH6dQfsA2Akl1TO/Jg6KmKZjd+u31FjwLt40yORyzaxy
vFiyMYM7IMszjKv51+gIZiUakqjp5Zuxc+sEDagAuBEeT/aaCVreE9SD8goZsT2h
2R1TUMWaCJsljhKWSTGqOkFP0wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCCFw1BE
UHr/UAeUYFIAhF9xRF9aMB8GA1UdIwQYMBaAFHtAqM+PTxoGw24gNPGKOL+YylsY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NjEyMy8xQjAwRUFFOEY0
OEMxMUVEQTg4OTU0NTNDNEY5QUUwMi9lMENvejQ5UEdnYkRiaUEwOFlvNHY1aktX
eGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2UwQ296NDlQR2diRGJpQTA4WW80djVqS1d4Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjYxMjMvMUIwMEVBRThGNDhDMTFFREE4ODk1NDUzQzRGOUFFMDIvMkY5OTE1RDg3
MThEMTFFRTk3RTNFMDIyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ+qqMA0GCSqGSIb3DQEBCwUAA4IBAQBwiWiDGb3wzWvxDg59I7Qi
v2tf5Jdfq8Sa1WCa/gmJCqtT/YFGVP7aDYx6DRKDeyMnyy98peMGiEO4TYsaAomk
oQAs2iLaz7YrOyKW+t1j4Aq4wIWh0Xy9fpXmMwb6BCIhSu2oPlNnvRLsYVXRH6/4
7wXHXCq0pf0WW5FT3n77VIVNADqqDiY32yKRT//oUDXmgxvvO9GlO3fEZ/EW3IJj
wIavv0XyzERUhWcJ9Pf5S74KWaa+1X5bn0iu3cPJ2nPwd6x1j74WqC+nUeQRVMLk
h9a2BA6SwK5+J80qjAwb3JZiBN8DEIjXUvFQqy5DkFKilalwC1RwbJp7lyP+/RGL
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:24:20 2026 by rpki-client