Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/6B9D491C379A11F0B3AC7740C4F9AE02.roa
File:                     6B9D491C379A11F0B3AC7740C4F9AE02.roa (raw, json)
Hash identifier:          RLph3rOI+XvGrIXc+VEb/mig9QwsOBw+jIRI25aGTLo=
Subject key identifier:   F0:47:B2:77:13:58:1F:E3:8E:F8:84:EC:DA:7B:31:E6:5E:04:DC:2B
Certificate issuer:       /CN=A91F79A2/serialNumber=9133ACBECFDEECF4DA3A2222827834F5B73AFAA7
Certificate serial:       BB
Authority key identifier: 91:33:AC:BE:CF:DE:EC:F4:DA:3A:22:22:82:78:34:F5:B7:3A:FA:A7
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/6B9D491C379A11F0B3AC7740C4F9AE02.roa
Signing time:             Wed 11 Jun 2025 05:44:56 +0000
ROA not before:           Wed 11 Jun 2025 05:44:56 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     142108
IP address blocks:        160.22.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.crl
                          rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 04:58:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 187 (0xbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F79A2, serialNumber=9133ACBECFDEECF4DA3A2222827834F5B73AFAA7
        Validity
            Not Before: Jun 11 05:44:56 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=684917d8-396e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c8:b6:19:f0:b9:2b:f0:36:56:98:a7:c1:11:
                    1e:fa:a1:8f:39:a9:03:df:b0:b7:30:ac:35:16:b2:
                    c1:41:4a:bf:5b:15:51:a7:c8:68:29:7e:d0:bb:63:
                    1c:06:9e:53:6b:65:f9:cb:2a:25:63:3e:98:66:1b:
                    f0:a3:4a:93:95:0f:e2:96:84:43:9a:cc:62:39:5f:
                    a0:d4:44:49:fd:7d:7e:83:99:66:d7:1e:8a:a3:38:
                    09:40:25:ab:c0:ec:26:c2:1d:52:b0:43:04:9c:1d:
                    24:b8:93:0d:b4:0d:51:cf:27:b9:41:01:6c:46:f3:
                    03:13:7f:d1:68:25:e7:c4:29:9b:dd:64:e7:44:34:
                    99:f7:4a:89:a7:9c:85:c5:71:95:99:72:69:08:85:
                    41:16:e2:eb:7a:6d:e9:ed:7a:b9:ba:07:4f:f4:8c:
                    38:9b:2e:69:b1:2b:4d:bd:20:39:88:9e:2a:c4:67:
                    4c:85:27:eb:6f:32:1c:a4:58:c5:46:15:b5:e0:7f:
                    bb:92:a2:e1:28:f5:3a:f7:e6:07:f2:5f:a0:4e:d5:
                    50:04:33:4b:b1:e3:74:84:c0:73:6b:bf:c5:42:08:
                    12:13:b2:5b:c7:42:c3:66:b1:97:d8:8d:6d:0e:7f:
                    8a:0b:b1:ef:05:e1:4c:4b:9b:bf:fc:db:38:21:db:
                    60:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:47:B2:77:13:58:1F:E3:8E:F8:84:EC:DA:7B:31:E6:5E:04:DC:2B
            X509v3 Authority Key Identifier:
                keyid:91:33:AC:BE:CF:DE:EC:F4:DA:3A:22:22:82:78:34:F5:B7:3A:FA:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/kTOsvs_e7PTaOiIigng09bc6-qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kTOsvs_e7PTaOiIigng09bc6-qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F79A2/1A05E6EE2D2E11EFA54C8042C4F9AE02/6B9D491C379A11F0B3AC7740C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.22.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4a:af:8f:20:bb:b3:2d:80:01:bc:7c:d2:a4:3e:78:4b:49:30:
         dc:9b:10:77:85:50:be:9e:24:01:e8:c1:24:3e:18:ea:a6:2e:
         91:65:76:b7:7d:f7:69:a6:f9:05:fb:1c:a2:0b:76:1b:96:63:
         d4:ca:b7:81:f5:3e:60:21:9b:4e:63:46:4d:43:db:69:35:11:
         c7:b8:a5:e1:2c:19:3c:65:b2:19:ee:71:b2:d3:19:cd:19:94:
         9a:b3:b3:9a:5b:e5:bd:98:7a:21:3c:54:05:de:88:35:de:b9:
         81:e5:b3:f0:d8:2d:f1:32:79:c2:c2:bb:e7:b0:0a:9f:dd:94:
         b8:88:7a:49:07:65:76:e0:5a:ad:cb:3f:ee:1a:3e:7a:ad:80:
         fb:52:ab:20:b9:b8:bd:c7:19:ba:20:7e:3e:6b:0c:bf:a5:53:
         89:a0:5b:f8:36:00:ad:94:07:bd:fb:1b:a9:5d:16:e4:b9:1a:
         10:ad:80:35:b2:a2:9c:de:e8:6b:0a:88:bb:42:49:c7:c4:42:
         1f:32:48:2d:f8:e9:77:4c:16:97:4c:ad:ae:94:e3:62:7f:19:
         d1:be:67:ea:c8:92:e0:c4:79:4e:99:2d:6f:cd:d0:d6:89:1d:
         07:ec:2d:e7:da:25:c8:70:46:d0:9f:75:36:d7:4c:1a:68:ae:
         32:c5:67:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 04:40:37 2025 by rpki-client