Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/6B5723D8F89F11ED8F29921CC4F9AE02.roa
File:                     6B5723D8F89F11ED8F29921CC4F9AE02.roa (raw, json)
Hash identifier:          SdXEUbD7bDMQhTYpbl9h+rsPxGL65X2f3Ma+s3etM2Y=
Subject key identifier:   BF:A9:EF:BB:E9:ED:A6:B2:43:F3:62:23:71:5A:15:66:86:B1:7B:CD
Certificate issuer:       /CN=A91F0FAA/serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6
Certificate serial:       016B
Authority key identifier: DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/6B5723D8F89F11ED8F29921CC4F9AE02.roa
Signing time:             Sat 19 Apr 2025 03:29:00 +0000
ROA not before:           Sat 19 Apr 2025 03:29:00 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141004
IP address blocks:        103.131.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl
                          rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 03:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0FAA, serialNumber=DB8690F64E7F832ACFC3A6A6E8421D4177C894F6
        Validity
            Not Before: Apr 19 03:29:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6803187c-13b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2f:37:e2:2f:57:30:fe:65:62:48:5e:d9:4c:
                    af:49:d8:60:06:25:53:4d:70:8f:28:3c:0c:c6:8e:
                    57:9b:3d:02:b6:37:f8:63:46:55:8f:0f:52:97:58:
                    99:af:36:e3:6b:8e:d5:72:8a:2a:ae:e4:de:58:96:
                    91:67:b8:3f:21:6e:fc:c9:99:28:44:c8:e0:92:77:
                    43:f1:0d:47:de:4b:85:13:7f:1d:ba:2b:30:75:ac:
                    43:42:fc:fd:5b:92:d1:59:58:46:48:dd:9b:f6:92:
                    43:78:d7:55:72:9a:c3:76:01:05:8f:7b:85:fc:01:
                    bb:f5:69:d0:d1:cc:99:7a:13:37:77:47:09:1e:a4:
                    1c:b7:3a:83:40:b0:8c:f2:4e:3f:67:68:70:ea:54:
                    54:73:17:e8:9f:1b:58:8b:d0:d6:2c:eb:b9:83:c4:
                    71:59:8b:b2:0f:45:9b:a4:bb:72:fa:0a:71:3a:ba:
                    d5:46:a2:da:ae:dc:74:2d:02:02:10:17:21:9e:4c:
                    cc:62:d9:c9:29:de:90:4f:d6:74:95:d3:83:a7:50:
                    5d:9c:90:39:04:60:52:85:cc:5c:fc:f5:15:bd:47:
                    3e:cd:2e:fb:82:b1:ea:33:7a:53:23:21:86:81:f6:
                    6c:90:40:b8:83:86:75:34:0c:72:14:21:50:b1:44:
                    e2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A9:EF:BB:E9:ED:A6:B2:43:F3:62:23:71:5A:15:66:86:B1:7B:CD
            X509v3 Authority Key Identifier:
                keyid:DB:86:90:F6:4E:7F:83:2A:CF:C3:A6:A6:E8:42:1D:41:77:C8:94:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/24aQ9k5_gyrPw6am6EIdQXfIlPY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/24aQ9k5_gyrPw6am6EIdQXfIlPY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FAA/FE101CCCF89811ED86235F68C4F9AE02/6B5723D8F89F11ED8F29921CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:46:c2:58:00:d3:65:af:a0:30:92:fd:03:06:24:e7:cc:75:
         36:cb:8f:8d:4a:45:16:83:e3:d2:27:66:68:92:75:5c:ad:8c:
         24:a1:42:03:90:ee:23:4d:74:1a:3b:ce:8a:fc:62:dd:23:a0:
         70:d8:d8:f2:d6:ed:0b:8e:b2:1c:24:cd:7a:3e:e1:a4:29:e2:
         50:3c:e0:5f:3a:de:2e:d8:eb:8b:df:26:1a:3d:cc:be:a8:c4:
         e5:b8:e0:25:21:3e:39:84:f9:98:be:ba:31:a7:06:f5:d5:c8:
         80:5c:36:ee:34:02:a3:e9:44:46:36:14:4c:32:fe:b3:dc:e0:
         64:09:86:15:1f:72:29:f7:49:a8:fd:1d:fa:33:56:47:5c:db:
         82:25:24:62:9f:13:02:d9:c4:12:6d:97:4e:e9:cc:cb:56:39:
         ff:6d:a7:37:a5:42:bf:8b:2b:38:c1:f5:11:13:46:b4:c3:86:
         bb:f8:3c:c3:60:73:74:22:c8:80:81:b6:d0:12:f2:5b:d3:a4:
         18:50:5e:e9:fb:51:c8:16:e6:bf:cb:12:65:cb:18:6b:0d:1c:
         43:28:a6:e1:1a:bd:ef:57:fb:ed:03:98:33:29:da:21:93:5d:
         86:02:84:b2:72:33:df:b2:dc:9d:7f:71:a4:74:5e:07:30:d6:
         76:fa:f5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:25:48 2025 by rpki-client