Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/AF573166309511EABE9B5934C4F9AE02.roa
File:                     AF573166309511EABE9B5934C4F9AE02.roa (raw, json)
Hash identifier:          NS7wTc9RWVEjhe14UUGO+2LOxEkOLR1MToMGLE7e6ZM=
Subject key identifier:   43:8C:E7:94:D9:A0:11:59:2E:EA:2C:DC:36:1F:CD:D9:D2:9B:57:71
Certificate issuer:       /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA
Certificate serial:       0EE5
Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/AF573166309511EABE9B5934C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:43:11 +0000
ROA not before:           Wed 31 Dec 2025 18:15:07 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     60068
IP address blocks:        45.121.202.0/24 maxlen: 24
                          103.15.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl
                          rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3813 (0xee5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169ADA, serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA
        Validity
            Not Before: Dec 31 18:15:07 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a46c9f-52df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6c:23:ee:cd:64:7f:96:56:af:06:63:24:20:
                    90:3e:ec:a5:dc:78:02:ba:1a:98:4d:c3:01:c3:bd:
                    c6:73:c2:91:a9:ab:76:6d:08:7e:41:ef:7c:99:ae:
                    1e:62:a7:d2:5e:12:78:14:66:e1:f0:97:46:7a:7d:
                    1e:c5:53:6c:17:33:52:94:4e:83:fd:f6:24:a1:72:
                    55:1f:0a:b6:84:a3:4c:78:df:96:e0:3a:e8:c0:c4:
                    a9:f7:fb:50:3a:13:cb:ed:f1:dd:33:35:6c:2a:a9:
                    69:48:c5:c1:d0:9d:af:a2:d1:0f:d3:bf:2a:2f:ec:
                    45:b2:c6:a0:bc:14:55:bb:58:9a:8c:79:84:ca:c3:
                    ff:55:ec:49:af:19:1f:3f:9f:b2:ab:2d:da:82:99:
                    07:02:4a:57:07:fe:7e:72:f5:c4:04:06:7b:86:bc:
                    29:99:ee:d0:5f:b9:f9:93:1b:7a:67:38:22:99:18:
                    89:b8:d9:ea:e4:aa:e8:29:8a:b0:e5:26:cb:26:5a:
                    89:3c:eb:d5:c9:72:28:96:b8:a0:4f:23:a2:27:ef:
                    4d:80:5a:8e:9d:60:0a:83:c3:1d:5b:e8:13:09:01:
                    5c:43:ea:5d:f9:9a:f9:b8:69:31:30:8b:58:2b:c6:
                    6b:f8:d5:cd:45:b0:0b:75:0a:9a:f3:09:73:ec:76:
                    b8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8C:E7:94:D9:A0:11:59:2E:EA:2C:DC:36:1F:CD:D9:D2:9B:57:71
            X509v3 Authority Key Identifier:
                keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/AF573166309511EABE9B5934C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.121.202.0/24
                  103.15.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:a0:43:2a:33:97:14:5b:07:53:bb:2b:e8:3b:b7:5a:e7:65:
         83:fb:4f:85:04:45:11:e0:13:11:5e:73:4d:36:4c:0a:bf:ca:
         80:86:f4:81:ce:c2:8e:ea:ae:d3:14:c3:bb:6b:91:82:88:6a:
         4f:74:6d:54:0a:e6:34:9b:6e:96:52:1a:de:23:c9:5d:02:e7:
         13:46:a5:2a:0c:09:75:41:09:2a:a4:26:0d:65:67:33:75:0c:
         67:bd:a4:a9:f1:91:98:c2:ba:cf:36:4d:cc:05:d4:32:00:b5:
         b3:29:37:b0:c6:54:1c:99:1b:da:ca:17:7d:db:4d:6e:87:1a:
         df:df:9d:75:e7:44:1d:d9:2c:b3:6d:6a:a7:42:5e:c0:36:36:
         0a:8f:49:e8:da:b0:ba:e6:94:e8:6e:1a:c4:a6:9d:8a:d5:00:
         93:64:f9:98:aa:7a:83:e5:05:22:95:7d:00:74:20:3d:c0:12:
         dd:62:f8:4d:17:37:01:1d:41:01:9a:62:93:3b:3c:50:49:7f:
         f7:25:cf:fb:2a:eb:8f:88:10:d9:5c:c5:b4:e0:fa:eb:31:7d:
         f3:20:6d:dc:e2:86:4e:d4:24:65:f7:6d:9a:6f:0c:22:e0:29:
         42:b1:1a:f9:8d:e7:26:02:86:78:c9:9b:6a:6e:d2:47:ce:3c:
         96:ad:63:71
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICDuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlBREExMTAvBgNVBAUTKEM0MTcxNUZFRjIwMDEzM0Q5MTIzMjUwRkJCNjUzMUU4
OEE0QTk5REEwHhcNMjUxMjMxMTgxNTA3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NmM5Zi01MmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA22wj7s1kf5ZWrwZjJCCQPuyl3HgCuhqYTcMBw73Gc8KRqat2bQh+Qe98ma4e
YqfSXhJ4FGbh8JdGen0exVNsFzNSlE6D/fYkoXJVHwq2hKNMeN+W4DrowMSp9/tQ
OhPL7fHdMzVsKqlpSMXB0J2votEP078qL+xFssagvBRVu1iajHmEysP/VexJrxkf
P5+yqy3agpkHAkpXB/5+cvXEBAZ7hrwpme7QX7n5kxt6ZzgimRiJuNnq5KroKYqw
5SbLJlqJPOvVyXIolrigTyOiJ+9NgFqOnWAKg8MdW+gTCQFcQ+pd+Zr5uGkxMItY
K8Zr+NXNRbALdQqa8wlz7Ha4XwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFEOM55TZ
oBFZLuos3DYfzdnSm1dxMB8GA1UdIwQYMBaAFMQXFf7yABM9kSMlD7tlMeiKSpna
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUFEQS9GRjMyMDFDRUE2
QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6MlJJeVVQdTJVeDZJcEtt
ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hCY1ZfdklBRXoyUkl5VVB1MlV4NklwS21kby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjlBREEvRkYzMjAxQ0VBNkIyMTFFOThEMkIxODYwQzRGOUFFMDIvQUY1NzMxNjYz
MDk1MTFFQUJFOUI1OTM0QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS
BAIAATAMAwQALXnKAwQAZw/BMA0GCSqGSIb3DQEBCwUAA4IBAQAGoEMqM5cUWwdT
uyvoO7da52WD+0+FBEUR4BMRXnNNNkwKv8qAhvSBzsKO6q7TFMO7a5GCiGpPdG1U
CuY0m26WUhreI8ldAucTRqUqDAl1QQkqpCYNZWczdQxnvaSp8ZGYwrrPNk3MBdQy
ALWzKTewxlQcmRvayhd9201uhxrf351150Qd2SyzbWqnQl7ANjYKj0no2rC65pTo
bhrEpp2K1QCTZPmYqnqD5QUilX0AdCA9wBLdYvhNFzcBHUEBmmKTOzxQSX/3Jc/7
KuuPiBDZXMW04PrrMX3zIG3c4oZO1CRl922abwwi4ClCsRr5jecmAoZ4yZtqbtJH
zjyWrWNx
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:14 2026 by rpki-client