Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/21C5B04263A311F096468248C4F9AE02.roa
File:                     21C5B04263A311F096468248C4F9AE02.roa (raw, json)
Hash identifier:          EsPSnLTOkuXRSGQKefe1p2f6RMEUDwMDeK+ind9kj7c=
Subject key identifier:   08:27:73:50:97:E8:4B:A0:8C:25:19:09:E5:9A:D7:48:AD:FD:3C:C5
Certificate issuer:       /CN=A9159309/serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777
Certificate serial:       7A
Authority key identifier: 7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/21C5B04263A311F096468248C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:12:34 +0000
ROA not before:           Fri 18 Jul 2025 06:47:55 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     154019
IP address blocks:        165.101.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl
                          rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:08:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159309, serialNumber=7D8FA0BEF6AEF71BDF883858F73619D3B59E2777
        Validity
            Not Before: Jul 18 06:47:55 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a3f4f2-a795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f0:0c:aa:e6:8b:cc:b7:3c:53:1a:02:22:d0:
                    fa:ae:24:0a:15:97:2e:7c:d8:cd:8f:98:0d:b3:98:
                    8f:02:00:d4:f8:de:bb:f8:b0:76:0d:85:e5:ce:ce:
                    14:f5:6e:62:ec:99:3d:67:4e:1b:63:77:d4:2f:b4:
                    91:d9:66:af:14:cf:d0:1d:03:9d:eb:0e:1d:bf:80:
                    a1:71:83:06:9e:5a:e2:f7:4f:85:87:b8:4c:b9:64:
                    a0:25:e1:0e:3c:37:18:d3:15:ff:9e:b4:c0:19:c3:
                    2e:35:79:57:27:05:e5:7e:bc:6e:6d:3f:b6:aa:9e:
                    e8:da:97:64:f9:5a:22:8a:a6:68:a2:28:f4:26:70:
                    5a:30:fa:e3:ea:8b:49:df:b3:e0:06:e0:24:7c:5e:
                    22:4f:ad:f2:24:f0:b3:69:41:8b:f0:69:5c:2d:7f:
                    31:e4:66:88:20:90:22:1f:f9:1e:b9:19:fd:c0:86:
                    d9:c9:d0:e5:3c:6b:4c:b5:23:e0:fa:ca:9f:b9:7c:
                    23:62:97:a4:d6:8c:ff:94:52:0d:e0:09:e0:d9:ae:
                    78:75:8c:33:1b:1d:8e:68:7a:58:57:d4:e7:c5:c4:
                    e2:35:63:a5:01:6c:c5:9d:2a:7f:f7:e0:92:44:b5:
                    95:a6:0f:e1:fc:e2:3a:5e:88:84:c6:86:18:7a:b9:
                    b1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:27:73:50:97:E8:4B:A0:8C:25:19:09:E5:9A:D7:48:AD:FD:3C:C5
            X509v3 Authority Key Identifier:
                keyid:7D:8F:A0:BE:F6:AE:F7:1B:DF:88:38:58:F7:36:19:D3:B5:9E:27:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/fY-gvvau9xvfiDhY9zYZ07WeJ3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fY-gvvau9xvfiDhY9zYZ07WeJ3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159309/9891E92E613D11F0B036B836C4F9AE02/21C5B04263A311F096468248C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:db:60:51:43:74:6c:29:ec:da:74:f6:53:fe:4d:65:9c:31:
         db:a4:50:71:60:39:a8:8e:56:66:7a:de:4d:e8:f6:cc:a3:10:
         df:d1:b5:c1:26:74:a9:f9:4e:58:a2:40:10:5e:c4:d3:cd:82:
         e0:38:63:39:80:b1:9f:ba:2f:81:6d:62:71:2f:f3:13:c4:c3:
         a7:00:ce:e4:be:39:db:b8:51:c8:6a:1f:3b:3e:4d:06:b3:b4:
         ca:34:dd:61:7c:e8:58:f7:df:32:67:1f:72:d9:3c:80:27:34:
         fb:38:eb:c3:ed:72:fb:b6:ae:92:a1:d3:d0:70:e8:99:4d:11:
         86:a9:2e:b2:f4:4b:66:53:8b:3a:65:67:47:a9:34:04:36:01:
         21:64:65:8b:32:8d:ec:52:41:54:fb:f0:9c:47:54:b8:72:94:
         d9:0e:d5:d5:eb:00:83:88:ec:08:f9:17:ad:3f:86:8a:59:28:
         54:cb:a2:c7:45:35:1b:9c:94:d7:89:50:c7:21:a8:68:cf:9c:
         0e:56:72:4f:68:0d:31:dc:e3:71:00:d6:4f:c9:93:7d:f6:cc:
         2e:7d:97:56:ba:a5:0c:b3:07:f0:9d:a6:64:62:65:30:38:50:
         59:4b:63:5d:7f:08:8e:28:18:78:f2:31:fe:dd:99:e2:69:6e:
         52:29:1e:aa
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
OTMwOTExMC8GA1UEBRMoN0Q4RkEwQkVGNkFFRjcxQkRGODgzODU4RjczNjE5RDNC
NTlFMjc3NzAeFw0yNTA3MTgwNjQ3NTVaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNmNGYyLWE3OTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDD8Ayq5ovMtzxTGgIi0PquJAoVly582M2PmA2zmI8CANT43rv4sHYNheXOzhT1
bmLsmT1nThtjd9QvtJHZZq8Uz9AdA53rDh2/gKFxgwaeWuL3T4WHuEy5ZKAl4Q48
NxjTFf+etMAZwy41eVcnBeV+vG5tP7aqnujal2T5WiKKpmiiKPQmcFow+uPqi0nf
s+AG4CR8XiJPrfIk8LNpQYvwaVwtfzHkZoggkCIf+R65Gf3AhtnJ0OU8a0y1I+D6
yp+5fCNil6TWjP+UUg3gCeDZrnh1jDMbHY5oelhX1OfFxOI1Y6UBbMWdKn/34JJE
tZWmD+H84jpeiITGhhh6ubFHAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUCCdzUJfo
S6CMJRkJ5ZrXSK39PMUwHwYDVR0jBBgwFoAUfY+gvvau9xvfiDhY9zYZ07WeJ3cw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU5MzA5Lzk4OTFFOTJFNjEz
RDExRjBCMDM2QjgzNkM0RjlBRTAyL2ZZLWd2dmF1OXh2ZmlEaFk5ellaMDdXZUoz
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZlktZ3Z2YXU5eHZmaURoWTl6WVowN1dlSjNjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
OTMwOS85ODkxRTkyRTYxM0QxMUYwQjAzNkI4MzZDNEY5QUUwMi8yMUM1QjA0MjYz
QTMxMUYwOTY0NjgyNDhDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAClZWswDQYJKoZIhvcNAQELBQADggEBAHTbYFFDdGwp7Np09lP+TWWc
MdukUHFgOaiOVmZ63k3o9syjEN/RtcEmdKn5TliiQBBexNPNguA4YzmAsZ+6L4Ft
YnEv8xPEw6cAzuS+Odu4UchqHzs+TQaztMo03WF86Fj33zJnH3LZPIAnNPs468Pt
cvu2rpKh09Bw6JlNEYapLrL0S2ZTizplZ0epNAQ2ASFkZYsyjexSQVT78JxHVLhy
lNkO1dXrAIOI7Aj5F60/hopZKFTLosdFNRuclNeJUMchqGjPnA5Wck9oDTHc43EA
1k/Jk332zC59l1a6pQyzB/CdpmRiZTA4UFlLY11/CI4oGHjyMf7dmeJpblIpHqo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:48:52 2026 by rpki-client