Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/C6E6A146171011F1BE8A5674053D8C67.roa
File:                     C6E6A146171011F1BE8A5674053D8C67.roa (raw, json)
Hash identifier:          giIRr2ar8YF7Sh/tonFBshlOwMtWsPmV9SJJhoV2jPo=
Subject key identifier:   BD:74:7C:69:D3:1A:2F:B4:1E:27:15:A5:F9:E0:8E:99:88:90:19:23
Certificate issuer:       /CN=A9142241/serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0
Certificate serial:       0946
Authority key identifier: 2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/C6E6A146171011F1BE8A5674053D8C67.roa
Signing time:             Mon 09 Mar 2026 06:20:48 +0000
ROA not before:           Mon 09 Mar 2026 06:20:48 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        202.173.24.0/24 maxlen: 24
                          202.173.26.0/24 maxlen: 24
                          202.173.27.0/24 maxlen: 24
                          202.173.28.0/24 maxlen: 24
                          202.173.29.0/24 maxlen: 24
                          202.173.30.0/24 maxlen: 24
                          202.173.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl
                          rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Mar 2026 20:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2374 (0x946)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142241, serialNumber=2B53091DC9CB38447758E61D9DEE153541413ED0
        Validity
            Not Before: Mar  9 06:20:48 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69ae66c0-a4b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e8:2a:60:05:e9:ce:a5:e7:09:2e:a2:db:13:
                    1c:ad:84:93:de:8b:e7:a6:b3:b8:58:8b:93:70:26:
                    1b:82:fb:43:9d:d7:64:4f:7d:03:9f:f7:ae:0a:80:
                    dc:a7:df:8c:86:b4:30:66:2e:c8:b3:89:46:8c:c9:
                    1a:ed:54:ca:00:fc:9e:ea:0a:01:4b:71:7d:1d:66:
                    3a:5d:40:d7:9d:6c:9a:0a:17:a6:f7:c9:68:00:2c:
                    cb:b9:d7:69:ab:b8:0f:bb:5a:b6:5b:79:f7:bd:12:
                    12:da:2d:fa:da:89:db:c9:8c:48:d0:6b:76:f4:3f:
                    86:5f:1b:5e:b6:e5:58:3e:73:a8:a7:81:80:4e:ec:
                    3c:ba:af:8b:17:05:48:8e:7f:78:e0:0f:a7:83:c0:
                    18:9d:45:b7:d8:8a:d2:f5:5c:9e:42:dd:1e:53:74:
                    a1:e3:9c:59:b0:12:55:66:37:bf:04:05:ad:34:fb:
                    46:25:30:92:1f:29:98:de:1e:c5:b9:69:86:54:96:
                    7d:e7:32:62:85:d6:5d:6f:5c:31:f0:4c:99:44:09:
                    2d:39:83:d8:d3:1f:c7:29:ba:c7:67:d6:b0:13:ce:
                    8c:c5:b6:b5:3c:64:e9:75:0a:b7:92:c8:0c:ad:1d:
                    8e:45:d0:61:e3:61:55:28:95:69:6d:4a:31:98:91:
                    4f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:74:7C:69:D3:1A:2F:B4:1E:27:15:A5:F9:E0:8E:99:88:90:19:23
            X509v3 Authority Key Identifier:
                keyid:2B:53:09:1D:C9:CB:38:44:77:58:E6:1D:9D:EE:15:35:41:41:3E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/K1MJHcnLOER3WOYdne4VNUFBPtA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K1MJHcnLOER3WOYdne4VNUFBPtA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142241/4F7B9866C5F711EABA9D2081C4F9AE02/C6E6A146171011F1BE8A5674053D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.173.24.0/24
                  202.173.26.0-202.173.31.255

    Signature Algorithm: sha256WithRSAEncryption
         c7:0a:18:42:9b:ae:22:7f:01:10:ae:32:45:b2:8d:fd:47:de:
         40:ad:4c:1a:e1:de:9f:93:7b:e5:01:5e:af:bd:ad:ba:a7:aa:
         9c:ae:3c:06:4e:8f:f5:a3:48:88:a8:eb:b2:9e:9f:99:1c:25:
         fa:db:f3:8b:ea:fb:7d:76:a4:63:f3:d6:6d:a9:8d:23:c3:89:
         f2:74:89:ce:f3:4b:6a:7c:29:f2:ab:6e:08:63:a2:dd:cb:06:
         07:b7:65:08:69:45:8c:25:8b:5a:62:5e:5d:3c:86:a6:d3:7d:
         97:62:d6:9f:77:e1:24:7a:73:f4:4e:28:6a:c7:06:38:ad:27:
         6a:d5:2e:97:dd:54:bc:b3:cf:89:d4:32:d9:f6:b6:d6:28:ae:
         de:e9:b2:ce:46:a7:17:08:ea:52:0f:df:e1:7f:16:ac:09:39:
         ab:12:3d:6b:2b:71:38:d6:5a:9f:f2:18:58:58:44:e7:30:b9:
         c9:b4:85:dd:64:49:5f:4a:ee:7c:f3:eb:69:11:7a:90:25:d4:
         1b:ce:23:c1:d8:90:88:1f:34:d5:b0:47:47:72:2c:f3:ed:5f:
         19:ba:88:2d:ee:ca:41:4c:c0:4b:6b:4e:6e:33:6e:3b:f3:7d:
         8f:ef:6d:61:c8:a6:39:b5:df:b1:a5:c0:62:04:a3:7f:9e:18:
         e9:49:f7:8b
-----BEGIN CERTIFICATE-----
MIIFSjCCBDKgAwIBAgICCUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIyNDExMTAvBgNVBAUTKDJCNTMwOTFEQzlDQjM4NDQ3NzU4RTYxRDlERUUxNTM1
NDE0MTNFRDAwHhcNMjYwMzA5MDYyMDQ4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWFlNjZjMC1hNGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6+gqYAXpzqXnCS6i2xMcrYST3ovnprO4WIuTcCYbgvtDnddkT30Dn/euCoDc
p9+MhrQwZi7Is4lGjMka7VTKAPye6goBS3F9HWY6XUDXnWyaChem98loACzLuddp
q7gPu1q2W3n3vRIS2i362onbyYxI0Gt29D+GXxtetuVYPnOop4GATuw8uq+LFwVI
jn944A+ng8AYnUW32IrS9VyeQt0eU3Sh45xZsBJVZje/BAWtNPtGJTCSHymY3h7F
uWmGVJZ95zJihdZdb1wx8EyZRAktOYPY0x/HKbrHZ9awE86Mxba1PGTpdQq3ksgM
rR2ORdBh42FVKJVpbUoxmJFP5wIDAQABo4ICbjCCAmowHQYDVR0OBBYEFL10fGnT
Gi+0HicVpfngjpmIkBkjMB8GA1UdIwQYMBaAFCtTCR3JyzhEd1jmHZ3uFTVBQT7Q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjI0MS80RjdCOTg2NkM1
RjcxMUVBQkE5RDIwODFDNEY5QUUwMi9LMU1KSGNuTE9FUjNXT1lkbmU0Vk5VRkJQ
dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0sxTUpIY25MT0VSM1dPWWRuZTRWTlVGQlB0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDIyNDEvNEY3Qjk4NjZDNUY3MTFFQUJBOUQyMDgxQzRGOUFFMDIvQzZFNkExNDYx
NzEwMTFGMUJFOEE1Njc0MDUzRDhDNjcucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa
BAIAATAUAwQAyq0YMAwDBAHKrRoDBAXKrQAwDQYJKoZIhvcNAQELBQADggEBAMcK
GEKbriJ/ARCuMkWyjf1H3kCtTBrh3p+Te+UBXq+9rbqnqpyuPAZOj/WjSIio67Ke
n5kcJfrb84vq+312pGPz1m2pjSPDifJ0ic7zS2p8KfKrbghjot3LBge3ZQhpRYwl
i1piXl08hqbTfZdi1p934SR6c/ROKGrHBjitJ2rVLpfdVLyzz4nUMtn2ttYort7p
ss5GpxcI6lIP3+F/FqwJOasSPWsrcTjWWp/yGFhYROcwucm0hd1kSV9K7nzz62kR
epAl1BvOI8HYkIgfNNWwR0dyLPPtXxm6iC3uykFMwEtrTm4zbjvzfY/vbWHIpjm1
37GlwGIEo3+eGOlJ94s=
-----END CERTIFICATE-----
Generated at Thu Mar 19 12:31:11 2026 by rpki-client