Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/24D519F226FA11F0B737393FC4F9AE02.roa
File:                     24D519F226FA11F0B737393FC4F9AE02.roa (raw, json)
Hash identifier:          YOuhg57dpyAHyHYCyC+N5mtXIsEkAz+fzXjtzYd+ceI=
Subject key identifier:   61:EA:D6:2F:6B:38:AB:78:01:8E:61:7E:88:44:DD:53:D2:21:37:E3
Certificate issuer:       /CN=A9169C00/serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
Certificate serial:       016E
Authority key identifier: CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/24D519F226FA11F0B737393FC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:02:04 +0000
ROA not before:           Sat 03 May 2025 05:42:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153684
IP address blocks:        202.94.64.0/24 maxlen: 24
                          202.94.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl
                          rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366 (0x16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169C00, serialNumber=CB66E035E2F07858F4F73B478DCD85A636A4250A
        Validity
            Not Before: May  3 05:42:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a58a4c-5ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bc:24:bd:f7:ae:7c:07:8f:8b:30:13:81:86:
                    be:9c:46:2d:a8:50:02:52:78:12:12:03:36:fa:3a:
                    c8:38:9e:09:49:ba:9c:02:0f:f3:6b:de:aa:f5:67:
                    0d:71:b8:81:02:13:66:82:d1:11:4f:b3:69:d0:ee:
                    b6:5b:d4:fb:95:7a:7f:1c:51:39:bc:22:0c:32:ce:
                    37:aa:c9:c1:db:88:ff:77:52:82:ad:22:cd:fa:28:
                    7b:b5:d5:09:e3:40:7d:8f:f8:0c:5d:af:5d:24:50:
                    0d:81:59:56:f5:f4:ec:70:c4:25:cc:77:26:80:da:
                    64:91:c1:3b:6c:2d:88:e7:09:9c:46:18:59:34:87:
                    dd:76:ec:3b:48:5a:64:f4:31:7f:95:9a:c6:3c:ee:
                    5e:fd:81:b7:4c:f9:37:c9:f7:96:dc:96:6b:92:eb:
                    ff:de:64:88:32:46:f7:e3:86:38:6f:38:e4:c9:14:
                    6b:bc:a6:24:db:52:76:ee:91:54:11:d1:d3:40:07:
                    08:65:28:96:6c:30:e0:f8:ac:64:f1:58:d3:e6:02:
                    bb:8c:49:85:67:00:85:0f:67:8a:b4:46:58:ac:58:
                    b4:5f:bf:5e:5d:50:cb:68:71:21:3c:bb:c7:1b:49:
                    e7:0b:31:1e:30:cd:f5:89:d1:b4:ea:51:ea:ed:20:
                    95:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EA:D6:2F:6B:38:AB:78:01:8E:61:7E:88:44:DD:53:D2:21:37:E3
            X509v3 Authority Key Identifier:
                keyid:CB:66:E0:35:E2:F0:78:58:F4:F7:3B:47:8D:CD:85:A6:36:A4:25:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/y2bgNeLweFj09ztHjc2FpjakJQo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y2bgNeLweFj09ztHjc2FpjakJQo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169C00/1C31EAF01BC011EFBB688D5EC4F9AE02/24D519F226FA11F0B737393FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.94.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:3e:02:c0:92:25:e8:e7:a9:76:ae:87:a9:fb:5b:79:4e:02:
         79:03:e8:62:21:69:d1:a8:d5:98:ab:de:fc:18:5f:b1:7b:55:
         28:ec:e2:23:c8:20:5b:ec:77:f3:f0:05:dc:0b:83:78:fd:0e:
         88:d7:39:d3:4e:90:41:43:f2:a3:71:4d:fa:da:42:e4:f5:fd:
         bc:55:d1:90:18:4d:98:fa:cb:c0:1b:12:e5:bb:01:ab:c6:16:
         2f:46:e8:02:61:66:c4:ff:fd:d6:b0:c4:97:66:11:39:d5:7d:
         30:00:8c:62:be:b7:82:29:e3:ad:25:46:ec:e1:99:aa:dd:c5:
         09:99:38:7a:af:08:54:5e:be:6e:71:1d:72:38:22:9b:23:08:
         89:7b:57:8f:c1:52:3d:80:f8:3e:3c:7c:c0:21:77:a7:81:8b:
         8e:36:a1:19:57:08:05:f5:10:c0:e9:29:fc:a7:42:db:15:fd:
         87:dc:0b:a7:30:55:66:89:cb:ff:ef:ab:63:d6:e9:db:f7:66:
         b7:3d:6c:5c:c6:75:5d:34:b3:31:a4:85:fc:32:75:6b:e4:5f:
         6b:8c:73:4e:7d:39:fb:cd:cf:cd:8d:70:2c:dc:4f:e9:5b:5c:
         c6:90:01:bf:de:c0:64:8b:7b:9f:67:bd:da:ee:18:62:7f:51:
         1a:da:9a:fb
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlDMDAxMTAvBgNVBAUTKENCNjZFMDM1RTJGMDc4NThGNEY3M0I0NzhEQ0Q4NUE2
MzZBNDI1MEEwHhcNMjUwNTAzMDU0MjEwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OGE0Yy01YWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsLwkvfeufAePizATgYa+nEYtqFACUngSEgM2+jrIOJ4JSbqcAg/za96q9WcN
cbiBAhNmgtERT7Np0O62W9T7lXp/HFE5vCIMMs43qsnB24j/d1KCrSLN+ih7tdUJ
40B9j/gMXa9dJFANgVlW9fTscMQlzHcmgNpkkcE7bC2I5wmcRhhZNIfdduw7SFpk
9DF/lZrGPO5e/YG3TPk3yfeW3JZrkuv/3mSIMkb344Y4bzjkyRRrvKYk21J27pFU
EdHTQAcIZSiWbDDg+Kxk8VjT5gK7jEmFZwCFD2eKtEZYrFi0X79eXVDLaHEhPLvH
G0nnCzEeMM31idG06lHq7SCVFwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGHq1i9r
OKt4AY5hfohE3VPSITfjMB8GA1UdIwQYMBaAFMtm4DXi8HhY9Pc7R43NhaY2pCUK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUMwMC8xQzMxRUFGMDFC
QzAxMUVGQkI2ODhENUVDNEY5QUUwMi95MmJnTmVMd2VGajA5enRIamMyRnBqYWtK
UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3kyYmdOZUx3ZUZqMDl6dEhqYzJGcGpha0pRby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjlDMDAvMUMzMUVBRjAxQkMwMTFFRkJCNjg4RDVFQzRGOUFFMDIvMjRENTE5RjIy
NkZBMTFGMEI3MzczOTNGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQByl5AMA0GCSqGSIb3DQEBCwUAA4IBAQBqPgLAkiXo56l2roep+1t5
TgJ5A+hiIWnRqNWYq978GF+xe1Uo7OIjyCBb7Hfz8AXcC4N4/Q6I1znTTpBBQ/Kj
cU362kLk9f28VdGQGE2Y+svAGxLluwGrxhYvRugCYWbE//3WsMSXZhE51X0wAIxi
vreCKeOtJUbs4Zmq3cUJmTh6rwhUXr5ucR1yOCKbIwiJe1ePwVI9gPg+PHzAIXen
gYuONqEZVwgF9RDA6Sn8p0LbFf2H3AunMFVmicv/76tj1unb92a3PWxcxnVdNLMx
pIX8MnVr5F9rjHNOfTn7zc/NjXAs3E/pW1zGkAG/3sBki3ufZ73a7hhif1Ea2pr7
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:28:57 2026 by rpki-client