Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/A6CBF914AC3411EDB324F037C4F9AE02.roa
File:                     A6CBF914AC3411EDB324F037C4F9AE02.roa (raw, json)
Hash identifier:          1lAKMWWiDhArZBXjlm4IA+8JjIhSP0kfTCYDjl8+xiU=
Subject key identifier:   85:B2:09:05:67:4E:B8:D6:40:65:12:02:54:5C:FB:75:8F:0C:AB:80
Certificate issuer:       /CN=A91BE374/serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
Certificate serial:       01A8
Authority key identifier: D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/A6CBF914AC3411EDB324F037C4F9AE02.roa
Signing time:             Sun 11 May 2025 02:31:26 +0000
ROA not before:           Sun 11 May 2025 02:31:26 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     135345
IP address blocks:        103.186.106.0/24 maxlen: 24
                          103.186.107.0/24 maxlen: 24
                          2400:6fe0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl
                          rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 02:31:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 424 (0x1a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE374, serialNumber=D84BCD6C5809279BCBCC0A56AD4A1683230F433E
        Validity
            Not Before: May 11 02:31:26 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68200bfd-f00c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e0:86:86:97:95:83:05:0d:d1:05:e3:ee:b4:
                    f9:60:12:57:74:4b:93:68:9d:bd:89:f2:96:81:36:
                    2f:7a:cf:54:5f:b0:8c:78:b9:e2:db:14:d9:03:46:
                    ba:78:9e:4d:8f:c3:a7:13:41:36:65:91:1e:31:3d:
                    17:e8:df:58:50:16:fe:0d:85:e6:86:53:ae:24:b9:
                    68:e4:17:8f:3a:06:7c:4a:ca:ee:62:ba:0d:d6:c4:
                    a5:45:c9:8c:88:e1:a6:8b:86:91:b5:b4:d8:2f:34:
                    67:49:67:0a:62:23:a8:12:44:73:b7:ee:25:3e:86:
                    07:8e:57:5d:89:81:55:26:24:ee:13:eb:79:ea:81:
                    8a:e6:21:ff:39:7e:00:80:d5:b6:7f:41:c7:ce:16:
                    5e:a0:f3:3f:18:81:12:06:cf:5c:89:51:e1:51:19:
                    a0:9b:17:fe:7c:17:2d:23:65:2c:31:5e:6f:bc:c3:
                    c8:6a:95:1b:0d:88:c6:3b:18:bb:43:83:63:65:97:
                    7b:b8:d9:94:f9:d4:99:a0:7f:f3:44:0d:60:fd:cb:
                    2a:62:93:17:25:74:14:44:74:c6:3d:6e:db:fa:c0:
                    63:a8:55:74:94:b6:b6:d6:c9:fb:95:95:43:01:bb:
                    b1:1f:e5:a7:99:95:ef:53:54:aa:9f:3a:e0:b8:ea:
                    e6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B2:09:05:67:4E:B8:D6:40:65:12:02:54:5C:FB:75:8F:0C:AB:80
            X509v3 Authority Key Identifier:
                keyid:D8:4B:CD:6C:58:09:27:9B:CB:CC:0A:56:AD:4A:16:83:23:0F:43:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/2EvNbFgJJ5vLzApWrUoWgyMPQz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2EvNbFgJJ5vLzApWrUoWgyMPQz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE374/40603562AC3111ED928B1936C4F9AE02/A6CBF914AC3411EDB324F037C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.106.0/23
                IPv6:
                  2400:6fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:8f:9e:8a:12:42:df:4c:27:ae:08:55:17:e0:a5:a6:9c:08:
         78:31:ec:ba:b3:ae:f7:fc:a9:2c:da:fe:4c:84:79:cc:23:f9:
         63:5d:a3:05:ef:41:7c:75:57:88:6b:51:1a:29:9d:c8:9c:b8:
         3b:1c:eb:21:0a:d5:5b:4f:43:e0:3d:a3:a3:69:06:db:f5:72:
         d0:b2:4f:ec:af:1c:6e:fa:de:ee:f8:56:fd:15:87:e0:1d:cb:
         3e:70:c4:a2:69:6e:9e:cf:48:47:a3:39:9c:bb:c5:23:9d:d5:
         60:68:88:c2:26:e4:8e:ca:6d:b6:eb:71:82:c9:b9:be:6e:a3:
         13:8f:60:97:e3:95:85:ff:d0:11:72:4e:00:54:1b:d4:22:db:
         af:dc:a5:1f:d3:cf:58:b1:43:92:f4:8f:63:c9:53:bc:27:66:
         92:85:2d:f2:52:15:d8:f0:14:e1:57:e3:30:73:b3:a5:f5:9a:
         49:2e:7e:22:30:d9:1b:6b:1a:85:c4:88:9c:ac:d3:24:93:fa:
         bf:0e:34:b2:0f:89:89:4d:61:1a:f7:03:ad:ea:c2:3a:e5:79:
         ef:cc:dd:07:b5:b7:d6:25:68:bf:36:b2:3b:6b:09:3b:ab:21:
         e6:89:98:0d:56:e4:bd:14:e4:3a:48:6b:7c:8d:41:3e:ec:73:
         6a:5d:df:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:54:00 2025 by rpki-client