Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6EEB5A22BE7A11E99ADDFD75C4F9AE02.roa
File:                     6EEB5A22BE7A11E99ADDFD75C4F9AE02.roa (raw, json)
Hash identifier:          xJ5kyaarr5yix5sOUpS/mgqqtRbI9V//xyZE+kCqFBI=
Subject key identifier:   FB:A7:92:1D:01:56:10:CC:56:D5:07:99:D6:5F:B1:94:CC:F9:76:89
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       36B9
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6EEB5A22BE7A11E99ADDFD75C4F9AE02.roa
Signing time:             Sat 02 Aug 2025 15:53:29 +0000
ROA not before:           Sat 02 Aug 2025 15:53:29 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     58818
IP address blocks:        103.251.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 15:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14009 (0x36b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Aug  2 15:53:29 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=688e3479-92d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:43:bb:87:05:6e:05:8a:ba:90:6a:81:f0:4c:
                    65:67:ed:dd:ca:fa:32:be:ff:db:c9:07:61:27:c8:
                    73:04:c5:db:af:61:57:cc:3e:27:41:7e:fa:fc:86:
                    d6:99:6d:06:af:98:15:a3:3e:e4:d8:14:1e:10:a6:
                    22:3c:35:10:b9:fc:a2:2a:07:7f:e8:51:37:98:f6:
                    93:32:ed:f1:ad:87:e9:96:bd:23:ee:e6:60:60:1a:
                    f7:02:9e:55:d6:f2:ef:d7:98:c9:80:96:ab:50:f8:
                    9f:0e:f4:a8:5d:dc:3b:b4:c5:ee:45:c9:81:eb:ea:
                    74:a8:78:6c:92:98:e4:fd:f4:b4:8e:7a:3f:43:18:
                    b6:37:0f:36:ff:b9:07:7a:a2:0e:79:d5:00:a8:8f:
                    25:38:07:4e:02:df:64:4c:3c:43:b9:bb:ee:18:5b:
                    5e:b1:f6:56:44:63:04:c5:01:8c:9c:53:5e:e5:06:
                    07:50:3f:62:44:da:ec:e6:fd:3a:b3:cc:f9:c5:41:
                    cf:d1:d6:81:85:f0:3b:59:3b:3e:2f:c6:a1:89:10:
                    ec:7b:07:14:7b:10:53:7d:dc:fe:78:ac:fe:e7:d4:
                    b9:5d:df:9a:ec:fc:83:35:fd:6b:64:34:6d:6a:50:
                    3b:da:78:1c:37:2a:79:98:54:c6:39:a3:09:26:c6:
                    8a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A7:92:1D:01:56:10:CC:56:D5:07:99:D6:5F:B1:94:CC:F9:76:89
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6EEB5A22BE7A11E99ADDFD75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:65:a6:8e:ec:68:36:8e:37:57:6e:3d:22:5e:94:4d:39:94:
         4c:0a:38:9d:c0:c1:7b:7a:7e:d8:52:78:f2:46:a8:ea:56:66:
         34:bd:d1:3c:d2:cd:fe:5f:53:24:8e:c3:00:5f:e7:71:01:3d:
         c4:cd:6f:49:3b:7a:92:fe:6f:69:58:cd:49:7b:c7:fc:a8:ad:
         6a:5d:43:8e:aa:d7:cc:5b:86:70:b7:ef:f1:88:2b:96:7e:cd:
         c1:f7:8f:e8:e7:60:b0:8a:fe:26:0b:eb:0d:a1:4a:16:69:37:
         38:da:0e:db:45:75:a1:7a:e7:6f:c7:bb:e9:44:42:76:e9:f2:
         fa:4a:59:39:9e:47:5f:59:8c:66:6c:44:8b:0c:ba:ce:45:79:
         cd:4f:e9:c7:0f:af:0a:b0:6d:e6:8e:38:73:ee:f0:6f:cc:57:
         c5:cf:0a:fa:7a:f5:24:db:e6:c7:7f:df:89:65:82:1b:be:57:
         83:69:5d:b2:77:44:b3:88:31:a2:6b:b6:ce:5b:b4:f7:53:29:
         dc:56:11:1f:1a:75:a5:60:2b:39:4c:0b:84:0a:95:72:0e:78:
         d9:e1:da:a0:52:88:52:55:e6:ce:52:2b:5d:e9:81:f9:e1:5a:
         55:af:5b:28:e3:b1:46:57:74:fc:bc:c1:b9:78:06:f1:5e:3a:
         01:b5:57:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:44:53 2025 by rpki-client