Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/6C3911AC316A11F090B23283C4F9AE02.roa
File:                     6C3911AC316A11F090B23283C4F9AE02.roa (raw, json)
Hash identifier:          DgEucoR97Y9+a6MdEE8/uaZNnvtkSjr5/qYttwnSpcA=
Subject key identifier:   1F:03:A6:B6:C7:46:7F:24:A2:E5:70:61:CE:E4:06:C0:F0:45:17:54
Certificate issuer:       /CN=A91D0C14/serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361
Certificate serial:       87
Authority key identifier: C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/6C3911AC316A11F090B23283C4F9AE02.roa
Signing time:             Thu 15 May 2025 08:56:00 +0000
ROA not before:           Thu 15 May 2025 08:56:00 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     153847
IP address blocks:        160.187.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl
                          rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 02:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0C14, serialNumber=C615700D7C888BE6BA750ADECD94D8864682E361
        Validity
            Not Before: May 15 08:56:00 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=6825ac20-02b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:53:fb:67:78:90:28:99:19:12:24:28:6c:4d:
                    56:72:28:dd:b9:f2:36:0d:36:13:93:63:7c:d0:ea:
                    da:03:f4:a5:a5:12:c4:ce:27:6d:84:d1:d5:7b:35:
                    40:a4:8a:b6:6a:34:5d:03:ea:6c:0c:b7:93:93:48:
                    ac:b5:41:35:79:73:5f:08:0d:aa:b0:52:55:1c:1b:
                    ee:37:7e:56:92:02:c9:5e:b3:71:91:03:1b:ab:43:
                    b9:90:67:47:10:80:e4:e3:52:a4:55:de:0b:7c:25:
                    cd:a8:80:5d:fd:98:1c:56:ed:84:81:b5:a2:cf:fa:
                    6f:cf:ff:de:37:70:76:aa:0c:f3:67:43:8d:b4:f0:
                    61:99:74:91:16:f1:b4:0b:3b:33:f3:81:91:33:fe:
                    3f:26:0b:b3:22:0a:d8:2a:5f:15:5b:c1:71:72:cd:
                    7c:da:a1:0e:c3:a9:db:61:2c:d4:58:f1:44:55:82:
                    2d:01:50:b5:88:87:e3:e5:cf:77:bc:f4:1b:85:4e:
                    b3:6a:ea:f3:dc:c6:28:ff:ce:09:42:78:e0:4a:11:
                    3c:99:4e:5b:37:ea:0b:4f:a1:2a:e0:21:c6:c4:b1:
                    30:13:38:b8:96:a8:db:40:04:3b:85:31:9f:dd:a9:
                    fe:ca:39:b6:62:07:b0:48:1a:21:bb:ca:6f:60:6d:
                    51:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:03:A6:B6:C7:46:7F:24:A2:E5:70:61:CE:E4:06:C0:F0:45:17:54
            X509v3 Authority Key Identifier:
                keyid:C6:15:70:0D:7C:88:8B:E6:BA:75:0A:DE:CD:94:D8:86:46:82:E3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/xhVwDXyIi-a6dQrezZTYhkaC42E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xhVwDXyIi-a6dQrezZTYhkaC42E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C14/8F3399966BFB11EF84632635C4F9AE02/6C3911AC316A11F090B23283C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.187.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:b1:b9:d9:04:ab:0c:c7:78:b2:ac:4f:27:2e:a8:00:74:32:
         11:a3:ce:05:25:ab:ef:66:57:4f:47:dc:10:12:80:3a:0a:a7:
         ac:b0:0e:9c:9d:f8:85:81:8b:a7:57:59:97:bb:9e:89:92:44:
         78:02:dc:b4:e4:60:2f:4b:3e:63:49:f4:b8:8f:52:d2:32:2b:
         81:1d:7d:dc:4a:63:27:a4:d9:a4:26:b3:fb:2c:57:41:1b:a6:
         11:5f:bf:c4:29:e8:3f:f2:2a:4a:79:20:3c:f6:2a:8b:12:98:
         7a:c4:b9:c9:fe:e7:52:82:12:50:1b:30:c8:6f:57:cf:5d:22:
         23:98:d0:89:87:21:d6:6b:f5:39:c4:cf:b4:0b:b3:e2:66:50:
         69:88:30:be:f4:6d:7f:7d:55:dc:1a:aa:b1:6a:29:41:ac:98:
         b8:fb:74:36:2f:9d:0c:45:87:67:dd:1a:03:f4:98:84:d4:fe:
         a6:6b:12:ff:de:bb:b9:4b:63:d9:26:9a:5c:a6:9d:5f:ed:43:
         37:66:1e:58:f5:bf:07:b2:a6:6a:ec:5d:ba:60:5b:ce:f8:4d:
         64:37:0b:a8:d6:cc:c9:63:82:40:f0:6e:8c:a6:d4:3c:4c:ee:
         62:f3:b0:df:b9:91:0d:d3:17:54:c9:44:6c:7a:10:28:fa:1f:
         e7:08:cf:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 08:32:52 2025 by rpki-client