Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/EB6E0EE8677811F08B1EA154C4F9AE02.roa
File:                     EB6E0EE8677811F08B1EA154C4F9AE02.roa (raw, json)
Hash identifier:          6eI2hX7+cNDQwr/0gzxm2cvx/HHunNUlrFOX9WFLw2E=
Subject key identifier:   12:46:BA:45:BC:7D:C7:4B:FF:0F:4A:CF:D7:2B:79:5D:FB:8D:49:3C
Certificate issuer:       /CN=A9147150/serialNumber=C1F2EA56DFBE0F2F92B741DD68CF567115B3B292
Certificate serial:       02
Authority key identifier: C1:F2:EA:56:DF:BE:0F:2F:92:B7:41:DD:68:CF:56:71:15:B3:B2:92
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/EB6E0EE8677811F08B1EA154C4F9AE02.roa
Signing time:             Wed 23 Jul 2025 03:55:49 +0000
ROA not before:           Wed 23 Jul 2025 03:55:49 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     152565
IP address blocks:        165.101.250.0/23 maxlen: 23
                          165.101.250.0/24 maxlen: 24
                          165.101.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.crl
                          rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147150, serialNumber=C1F2EA56DFBE0F2F92B741DD68CF567115B3B292
        Validity
            Not Before: Jul 23 03:55:49 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68805d45-5603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1e:b7:d1:b2:88:a6:f5:e0:51:d7:8c:b0:0a:
                    a1:f7:89:80:18:04:2c:59:b0:99:2a:0d:d1:b8:ec:
                    22:fc:fc:b0:ae:68:7f:c2:98:9f:cf:1f:00:eb:ba:
                    f1:ea:b7:3a:e0:df:2b:d9:62:12:88:c9:f6:43:58:
                    4d:9d:25:77:c0:c8:1f:c7:0b:b4:8a:36:f9:f6:35:
                    22:a5:c2:fd:49:ee:80:27:1f:f9:c6:6e:78:a9:22:
                    f4:48:a9:c9:8d:c2:12:58:c6:4b:f5:0e:cd:ae:8e:
                    b2:30:cd:df:f1:47:81:c4:39:17:41:28:8a:6b:98:
                    f3:77:60:b9:f0:88:78:96:cb:4c:34:47:08:d1:0f:
                    cf:5e:33:e3:7a:1b:f2:5d:33:11:84:f9:21:99:4d:
                    68:5f:92:53:aa:59:e7:a0:ce:a4:c9:66:79:49:5e:
                    da:83:91:29:d7:15:3c:14:70:0b:97:fe:3b:26:94:
                    ff:cb:a6:ab:99:a0:e7:25:fc:14:da:a3:71:d1:dd:
                    d9:80:6d:cf:6f:3a:5c:63:e8:94:f4:72:7e:26:f0:
                    f4:11:b9:82:6a:c9:28:0a:8b:40:52:1d:ff:b3:0a:
                    36:0e:23:06:37:4c:bb:0f:c0:4c:db:26:c3:64:50:
                    e8:3c:70:01:40:6e:5e:ed:5f:a3:3c:35:28:d4:68:
                    bc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:46:BA:45:BC:7D:C7:4B:FF:0F:4A:CF:D7:2B:79:5D:FB:8D:49:3C
            X509v3 Authority Key Identifier:
                keyid:C1:F2:EA:56:DF:BE:0F:2F:92:B7:41:DD:68:CF:56:71:15:B3:B2:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/wfLqVt--Dy-St0HdaM9WcRWzspI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wfLqVt--Dy-St0HdaM9WcRWzspI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147150/08EBDC44677811F0B0D0F64FC4F9AE02/EB6E0EE8677811F08B1EA154C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.101.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:71:f7:b0:54:6c:89:8e:94:d1:47:b0:75:8d:49:a7:84:c7:
         43:0a:bd:7a:f5:7e:17:1d:60:7d:45:0e:50:5d:48:c6:2e:27:
         fa:a9:1f:7d:38:63:0b:8f:fa:6e:68:6b:07:2f:0d:0f:45:6a:
         16:d9:a0:1f:92:2d:0d:98:ee:cf:1c:0f:ca:1b:97:82:a7:ee:
         c3:47:8c:44:6e:ae:eb:28:9e:e3:d0:5b:91:8f:44:a0:ad:b1:
         00:2d:75:9f:3c:33:f6:fd:c8:ca:b7:5d:d1:5c:76:cc:1a:6d:
         66:d3:cc:60:2d:5a:34:f3:9b:c6:90:75:4a:9b:c2:6e:58:6b:
         ab:57:b2:c4:50:73:9a:76:5c:1d:bb:ea:16:9f:03:77:ea:ea:
         55:0a:3c:fb:52:54:7c:ce:d5:eb:3d:25:ee:83:0f:53:7f:4c:
         a8:41:33:c3:5b:88:6b:49:a2:fd:b5:16:14:c0:2c:e2:c7:31:
         39:51:dc:87:0c:f5:13:77:f0:7f:89:c0:d7:e3:ba:e8:63:6c:
         13:5e:18:a9:61:96:f5:e9:a0:11:10:72:72:6d:66:de:7b:eb:
         a6:81:5e:d8:e9:40:29:c0:3e:5d:61:72:50:49:11:1a:ce:1a:
         5a:3f:5d:c7:fc:c0:a4:ad:e5:2c:6d:51:67:10:d9:36:15:3e:
         87:18:e1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:33:33 2025 by rpki-client