Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/6E4711FE544F11EFA572D230C4F9AE02.roa
File:                     6E4711FE544F11EFA572D230C4F9AE02.roa (raw, json)
Hash identifier:          35hCo0g/r7FxI8+/jeqVhnAOkZ//we7adpPQGUSCnXk=
Subject key identifier:   3C:BB:1C:7B:26:BD:56:8F:9C:C4:F3:D2:46:50:8A:CC:E4:3A:26:F1
Certificate issuer:       /CN=A9149907/serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E
Certificate serial:       032A
Authority key identifier: 66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/6E4711FE544F11EFA572D230C4F9AE02.roa
Signing time:             Tue 03 Jun 2025 01:55:23 +0000
ROA not before:           Tue 03 Jun 2025 01:55:23 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153180
IP address blocks:        103.187.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl
                          rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 810 (0x32a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149907, serialNumber=666918657E41633E17EAC86C26B184DBA3E81E2E
        Validity
            Not Before: Jun  3 01:55:23 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683e560b-7b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:40:29:c0:65:6b:81:73:9c:ae:17:f0:fc:b2:
                    e4:f0:cd:38:0a:7f:77:07:cc:17:0b:42:e8:a1:03:
                    b0:bd:fc:c4:b9:3f:73:a0:33:03:e9:ba:ac:8a:0a:
                    ab:7c:f7:dc:78:f4:6c:f0:35:e7:8f:9a:0a:60:72:
                    2f:a6:1f:7e:36:16:d2:c1:64:85:27:ad:33:89:72:
                    05:58:91:08:df:1f:f3:fc:05:f0:65:e1:80:e3:f1:
                    db:3a:8a:36:81:bd:22:84:59:c4:aa:c5:fa:fd:69:
                    2f:32:df:e6:16:ed:9d:33:92:a0:5e:04:e0:79:b1:
                    b6:e1:7e:2c:89:bf:c5:56:7e:83:07:a0:15:cc:5c:
                    f1:ea:83:b4:42:b9:1c:f0:c9:2d:e3:27:a5:e0:ea:
                    34:f6:da:4d:2d:8b:ef:a8:3a:70:57:5b:dc:b8:73:
                    81:e0:1a:d6:2e:8a:88:8c:4e:0e:01:d9:73:52:67:
                    3f:3a:b4:08:14:da:d9:6d:7a:d6:9f:23:99:e5:67:
                    9c:38:2d:68:35:73:38:a6:11:fb:e3:e3:fb:fb:36:
                    29:00:ab:02:3f:1d:b0:59:e2:4c:e9:66:17:e1:e6:
                    1f:77:ac:ca:62:54:8e:3f:41:90:19:2c:75:fd:86:
                    f9:57:18:eb:9e:79:3a:33:c2:e8:57:c7:4f:62:62:
                    ab:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:BB:1C:7B:26:BD:56:8F:9C:C4:F3:D2:46:50:8A:CC:E4:3A:26:F1
            X509v3 Authority Key Identifier:
                keyid:66:69:18:65:7E:41:63:3E:17:EA:C8:6C:26:B1:84:DB:A3:E8:1E:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/ZmkYZX5BYz4X6shsJrGE26PoHi4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZmkYZX5BYz4X6shsJrGE26PoHi4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149907/F714BDCACC2E11EC823BEE35C4F9AE02/6E4711FE544F11EFA572D230C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:c1:bc:66:6c:4d:23:8d:28:c9:f3:c6:25:a8:c0:4e:c5:91:
         a3:54:f9:b0:03:3e:82:d8:69:f2:6a:45:a5:14:86:0d:8a:24:
         e7:3a:be:ae:c8:cb:4a:8b:7e:5b:23:a0:49:d7:6a:06:cf:28:
         6f:1e:e2:6e:c7:69:c6:0c:ce:98:61:63:81:11:68:0f:0b:6b:
         80:ea:43:be:c5:0a:45:d3:d9:9a:2a:cf:08:db:fe:ad:06:5c:
         2d:ae:68:72:1d:af:a5:3a:86:76:70:03:9d:fb:67:89:42:82:
         a8:83:6b:40:92:4e:e6:63:6f:0f:92:de:91:38:a6:1b:cd:62:
         c0:b5:d3:49:6c:b3:b8:36:32:5f:3f:d1:c5:6d:2f:7d:88:bb:
         36:3f:36:32:33:70:cc:4f:7d:1f:1f:04:60:c2:8e:d4:11:e7:
         2e:46:2d:12:25:cf:92:4d:e8:6c:3c:28:9b:c0:89:37:18:c4:
         60:fe:c4:7c:ba:83:0b:06:8f:0e:a1:a1:5c:9f:9e:ec:4b:6e:
         9b:e4:19:b6:97:6e:49:c6:7a:83:7a:05:82:36:ee:e7:fe:c0:
         66:29:fc:f8:27:57:4e:86:60:67:89:52:41:c5:25:99:65:fd:
         a1:08:ff:0c:95:94:05:7f:fa:a3:88:76:cb:2b:fc:7e:04:9c:
         ac:83:b8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 00:57:30 2025 by rpki-client