Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/6EDD05143FA311EDABCBBA25C4F9AE02.roa
File:                     6EDD05143FA311EDABCBBA25C4F9AE02.roa (raw, json)
Hash identifier:          VaOofZOdoeXB+ROUfhfuam0fJhFDWk1WoiIImzNsQ8w=
Subject key identifier:   3C:6C:96:32:09:0D:B5:73:12:30:CF:24:8C:02:23:F1:CB:97:4E:F2
Certificate issuer:       /CN=A9140BD4/serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1
Certificate serial:       0453
Authority key identifier: F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/6EDD05143FA311EDABCBBA25C4F9AE02.roa
Signing time:             Tue 01 Jul 2025 01:05:50 +0000
ROA not before:           Tue 01 Jul 2025 01:05:50 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        202.50.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl
                          rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 01:05:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1107 (0x453)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140BD4, serialNumber=F13BCA804F8F198176F99E7BC9AEA98CAFC0B8B1
        Validity
            Not Before: Jul  1 01:05:50 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6863346d-d921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:70:b1:14:f0:b4:bd:33:ed:c7:64:ac:3e:70:
                    d6:e2:a9:85:77:51:66:79:dc:ff:6b:8e:e4:90:cc:
                    02:14:b5:7b:bf:1f:bb:65:e6:be:ca:59:fc:7e:1e:
                    1c:c0:50:71:57:f3:30:13:50:98:d1:04:ba:52:f9:
                    e1:f1:e0:72:d4:2d:25:54:5d:42:20:a8:26:ab:d8:
                    e9:8b:1c:13:dd:f4:e3:21:da:44:84:61:a4:64:23:
                    7d:73:3d:ec:e0:f7:9c:a8:9f:4a:a5:fa:2f:39:4d:
                    34:21:7c:7a:47:0d:54:0a:1d:e8:cd:03:52:b3:a3:
                    e9:03:1a:20:99:ca:1f:71:42:d0:46:77:04:60:10:
                    f4:bf:1e:a8:b0:09:09:05:a9:bc:57:cc:3b:bd:1b:
                    84:37:25:4d:02:2b:bf:15:cf:c6:38:60:7b:bc:f4:
                    24:81:b3:2f:3d:b2:d5:aa:9d:e8:0b:b9:fc:1c:28:
                    c2:f9:1a:b4:4f:3a:7b:3b:7b:3a:01:46:c0:08:57:
                    e1:39:e3:ce:21:da:69:c1:fe:e9:36:b5:34:0f:e9:
                    4b:cf:7f:8f:d4:54:2f:fd:2c:ce:37:36:30:44:12:
                    f8:2e:91:41:b8:0c:34:4c:f3:2e:f5:2f:fc:33:1f:
                    8c:2b:00:cf:ef:d9:f3:98:7b:44:92:83:d0:71:8b:
                    41:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6C:96:32:09:0D:B5:73:12:30:CF:24:8C:02:23:F1:CB:97:4E:F2
            X509v3 Authority Key Identifier:
                keyid:F1:3B:CA:80:4F:8F:19:81:76:F9:9E:7B:C9:AE:A9:8C:AF:C0:B8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/8TvKgE-PGYF2-Z57ya6pjK_AuLE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8TvKgE-PGYF2-Z57ya6pjK_AuLE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BD4/4865BD48611111EC984E3E7FC4F9AE02/6EDD05143FA311EDABCBBA25C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.50.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:71:33:e8:71:a3:6c:d4:a2:d7:23:19:ba:95:71:28:4b:37:
         9d:64:94:be:d0:17:96:f1:ca:b4:85:56:d0:c2:2f:8e:a9:2a:
         bc:33:e1:9e:5d:19:df:eb:a7:27:55:75:dd:0e:84:d2:f0:5e:
         e8:d2:b0:2d:4b:51:fa:50:cf:fc:ad:6e:9a:93:81:31:09:78:
         dc:fe:a2:85:25:77:d5:8d:aa:42:3b:1c:69:6f:fa:8b:19:c2:
         bd:3d:c4:6e:42:65:dd:55:8b:2e:8b:bb:68:e1:f9:58:58:6a:
         69:a6:a8:58:d1:41:70:2c:3e:cc:8b:05:fc:63:39:60:ad:36:
         35:ed:78:59:39:8a:12:08:ea:c0:ed:4e:18:9d:9e:69:e0:0d:
         0f:68:c7:df:2f:4e:1a:5f:00:74:ef:ca:01:32:ad:92:9b:58:
         96:48:1a:e8:b8:77:f7:a9:09:13:86:82:39:30:a3:9e:c0:c8:
         49:c6:fd:22:5e:cf:8c:7b:b2:18:79:05:53:59:41:b2:f3:a8:
         f5:0b:4c:bf:f2:55:2d:ac:d9:73:c2:7a:c4:2c:83:65:5e:b2:
         e9:5d:76:ff:4b:be:5a:1e:e0:b3:a3:ea:f7:d4:e5:a8:77:da:
         df:bc:4f:1f:18:93:24:4c:c6:e0:5b:48:01:c6:66:e1:ee:3b:
         45:f1:d8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:31:58 2025 by rpki-client