Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6AE530BABE7A11E99ADDFD75C4F9AE02.roa
File:                     6AE530BABE7A11E99ADDFD75C4F9AE02.roa (raw, json)
Hash identifier:          12DnJM10Jz9IZPLK3tM7lNS1WBmj0BPo3TFdHkp71CQ=
Subject key identifier:   D3:7F:76:D7:B9:83:14:3F:8B:5D:32:64:A5:25:25:EA:8A:2D:B7:D5
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       368D
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6AE530BABE7A11E99ADDFD75C4F9AE02.roa
Signing time:             Sat 02 Aug 2025 15:52:48 +0000
ROA not before:           Sat 02 Aug 2025 15:52:48 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     133832
IP address blocks:        103.58.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 15:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13965 (0x368d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Aug  2 15:52:48 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=688e3450-3d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ff:8a:75:18:40:f3:36:4c:49:a7:5f:3d:d8:
                    21:a9:9a:0e:1e:a6:3e:91:2d:af:9c:d9:45:df:1d:
                    31:97:46:c8:e0:82:35:c7:dc:f9:42:84:34:58:9a:
                    0c:4e:3c:c6:d0:d8:30:8c:0f:68:d2:d6:0b:ed:e6:
                    a2:2d:ad:ab:d4:c6:71:58:fc:17:4b:52:30:cf:45:
                    a4:44:39:58:60:b3:29:0f:dc:d0:35:df:62:82:02:
                    cb:c1:37:f8:ce:7a:b9:b4:4b:93:c7:50:18:2a:de:
                    41:8a:9d:b8:f7:60:de:84:ec:33:41:f4:db:95:3a:
                    7d:47:3c:c2:6b:ff:33:b0:e8:43:14:6c:f7:ec:ab:
                    3e:d0:8d:81:06:c3:ca:57:b3:ca:25:d4:64:dc:a3:
                    9d:92:ef:05:dd:78:e3:ee:0c:4b:2c:fb:5d:96:b9:
                    d9:e3:8c:d8:41:7f:f2:99:30:3f:69:55:40:cb:2c:
                    a3:e3:e9:92:d1:6b:8d:2c:0d:3a:71:60:ea:b5:b6:
                    da:5d:82:82:4f:c0:72:2a:cb:3d:aa:d6:63:80:c6:
                    37:89:50:9c:b7:98:d5:19:da:6b:f7:91:a4:c8:18:
                    64:8e:11:43:fc:96:f5:9f:8c:a7:99:70:bc:21:b8:
                    ed:49:0e:1e:6f:5d:d8:33:60:d8:fc:f5:cb:0e:e9:
                    a6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:7F:76:D7:B9:83:14:3F:8B:5D:32:64:A5:25:25:EA:8A:2D:B7:D5
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6AE530BABE7A11E99ADDFD75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.58.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:6e:c2:df:1c:6b:11:28:a6:2b:ca:ce:8a:c8:e7:59:ac:cf:
         38:3d:61:b8:e5:1e:d6:d9:cd:c9:9b:fa:07:79:9b:14:46:c9:
         7a:cf:b5:9a:02:3b:0c:10:a8:00:c3:d2:e1:01:1c:87:d2:1a:
         95:cc:b4:91:61:41:36:3e:0b:20:37:9f:47:bf:30:54:18:26:
         d0:88:e7:98:6b:55:cd:b6:9f:4f:60:85:d4:f4:5c:73:eb:2c:
         d8:79:35:42:5f:f0:21:fc:b4:59:79:c6:de:bc:af:70:b7:32:
         7f:ee:b5:63:6e:64:65:e4:a8:3e:6c:1a:d4:d4:39:a0:9b:92:
         e9:2a:d1:ed:15:85:47:02:df:50:c8:68:b0:21:5e:96:7e:c4:
         bd:46:11:8c:8c:a9:77:24:78:9e:de:70:d1:21:d2:be:1f:32:
         fb:29:f6:61:47:5a:f5:45:4b:16:8a:c2:cb:b4:fc:42:95:f7:
         16:4a:04:46:47:91:65:f9:67:c5:20:95:95:60:7f:a9:61:38:
         d8:b0:68:4c:7b:0a:2c:9e:f4:56:69:bb:49:4d:8d:be:a1:b3:
         19:7e:87:b6:75:86:66:c0:c3:54:99:eb:e5:9b:c7:fd:95:7e:
         5d:ef:8e:5f:7d:f9:48:63:5e:f4:30:be:c7:24:5c:b4:24:6e:
         f5:0f:eb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:56:34 2025 by rpki-client