Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6F9ACE76CE7211EBAF46B61AC4F9AE02.roa
File:                     6F9ACE76CE7211EBAF46B61AC4F9AE02.roa (raw, json)
Hash identifier:          wVYga0/tD85l8FSG82PbnxhnB2SkjvEdIkkyzqmMiv0=
Subject key identifier:   3D:FC:F6:AA:CC:02:5A:84:DB:94:30:69:FC:0E:FD:D8:1C:2C:C5:5D
Certificate issuer:       /CN=A91F6C39/serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8
Certificate serial:       05BD
Authority key identifier: EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6F9ACE76CE7211EBAF46B61AC4F9AE02.roa
Signing time:             Tue 01 Jul 2025 00:02:55 +0000
ROA not before:           Tue 01 Jul 2025 00:02:55 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     142134
IP address blocks:        103.166.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl
                          rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 23:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1469 (0x5bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6C39, serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8
        Validity
            Not Before: Jul  1 00:02:55 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=686325ae-367e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b8:3c:20:a8:9b:67:d0:2e:b3:b2:13:6a:fe:
                    3d:e3:9c:e0:29:1c:17:c0:22:35:83:bc:ed:6d:db:
                    04:66:03:40:31:22:98:d3:eb:d1:5d:fa:a2:6a:12:
                    03:2f:6f:03:e7:c4:1f:42:d3:f9:10:58:65:92:68:
                    74:00:87:01:1a:5a:b3:2b:2b:91:4e:f0:d5:56:86:
                    45:3c:c4:da:33:24:b5:0b:bc:59:c4:97:b6:8c:07:
                    f4:7e:18:7c:b1:37:81:b9:dc:30:be:04:d2:e6:24:
                    a3:90:7b:62:a7:bd:a3:48:ed:ea:37:e8:9c:8b:14:
                    16:a6:e3:db:0b:6b:21:30:9a:bc:d6:cc:6e:ca:ea:
                    64:14:fb:0c:2d:05:86:23:20:b8:d6:60:54:7c:67:
                    ee:de:49:09:01:fd:78:b0:ad:d7:c6:7d:94:e6:9e:
                    f2:42:e4:ad:f8:b2:58:ca:ce:8a:51:b9:84:6b:c2:
                    56:a6:79:78:2b:0e:0e:fe:16:73:0f:9e:37:df:1d:
                    8f:e4:92:0c:9a:4a:01:dd:50:6b:76:4d:93:f9:97:
                    da:0d:35:bf:2b:be:4e:ec:8e:dd:f5:72:a0:72:10:
                    69:f3:e2:2b:16:7e:c1:6d:08:79:34:94:1e:25:4d:
                    8e:86:cf:92:a1:07:78:b6:1d:42:57:c6:16:3d:13:
                    6f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FC:F6:AA:CC:02:5A:84:DB:94:30:69:FC:0E:FD:D8:1C:2C:C5:5D
            X509v3 Authority Key Identifier:
                keyid:EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6F9ACE76CE7211EBAF46B61AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:1f:6a:dd:db:7a:be:6b:ee:c5:a3:a3:f1:63:5d:76:51:df:
         b1:80:73:43:1c:a4:f4:b3:34:ee:69:33:73:79:34:15:21:1f:
         90:7a:e5:78:16:68:d9:c5:90:0b:67:c1:9d:0d:ea:90:49:46:
         73:e4:eb:e9:3c:a7:30:45:5a:4c:0f:70:fa:42:fa:23:4b:86:
         12:f1:d9:fc:1d:ce:e2:b0:f2:41:9f:f0:2e:f1:40:31:a1:92:
         9d:d4:15:b1:65:38:e3:04:e1:73:1b:27:bd:93:e6:2d:3b:21:
         ca:71:bb:2d:b2:6a:ab:7c:29:df:04:b2:03:21:ce:be:18:34:
         20:ff:4a:e4:0b:6a:ae:26:a3:52:fe:4c:09:2a:5e:e7:58:a4:
         f1:04:2e:cf:33:80:f4:5b:cf:1f:f9:9c:2b:de:f0:96:35:89:
         59:09:f4:35:c5:d0:85:f9:d1:68:d4:cc:fe:b8:c9:39:19:75:
         f8:7d:0f:03:d5:e9:e3:c4:94:17:85:24:b2:a0:48:6d:bc:9b:
         b7:5c:b7:e8:7b:b1:a8:a8:4e:9f:1b:38:02:02:7b:7e:a1:d2:
         9c:71:d1:a8:e5:e3:1c:ed:99:ab:3a:bb:b8:ea:6a:2a:cd:0f:
         73:02:b9:34:88:29:e9:d7:01:ec:d6:cb:1e:94:ab:bc:43:4b:
         2d:01:b1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:42:22 2025 by rpki-client