Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/DC0082F6EE1F11EF9191EE31C4F9AE02.roa
File:                     DC0082F6EE1F11EF9191EE31C4F9AE02.roa (raw, json)
Hash identifier:          /3sx9qkns8VuuHaAsuXJH8HOSf3Re0TlGJBe6HbkiRw=
Subject key identifier:   AD:15:ED:31:B6:C5:78:D5:27:8A:81:CC:62:C7:C0:A2:4B:51:A6:D1
Certificate issuer:       /CN=A9164B02/serialNumber=6AF83D17250E16EC3876E567AE3E1DAB83251C06
Certificate serial:       1E
Authority key identifier: 6A:F8:3D:17:25:0E:16:EC:38:76:E5:67:AE:3E:1D:AB:83:25:1C:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avg9FyUOFuw4duVnrj4dq4MlHAY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/DC0082F6EE1F11EF9191EE31C4F9AE02.roa
Signing time:             Thu 03 Apr 2025 07:35:11 +0000
ROA not before:           Thu 03 Apr 2025 07:35:11 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     142064
IP address blocks:        103.166.114.0/23 maxlen: 24
                          2001:df6:ad80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.crl
                          rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avg9FyUOFuw4duVnrj4dq4MlHAY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:12:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164B02
        Validity
            Not Before: Apr  3 07:35:11 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67ee3a2f-3339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:57:f2:39:6c:83:52:8b:9b:ca:97:90:af:4e:
                    5b:84:97:1f:ba:61:f8:91:cb:5a:ea:59:6b:d7:d3:
                    af:88:ae:29:b1:e3:b6:a9:e9:7a:83:ea:8a:e4:24:
                    fd:5f:aa:8b:9d:15:f2:09:d2:8e:29:f9:37:81:3a:
                    be:86:18:69:eb:63:46:90:c3:e4:98:42:e4:85:b8:
                    d4:db:0b:73:39:b6:04:9e:d4:9f:db:12:80:bc:ff:
                    53:34:ed:0b:fc:b9:c2:ff:9a:27:61:65:67:87:48:
                    8e:b3:fa:66:3f:cc:d7:ad:63:a2:d9:6b:77:0a:b0:
                    84:3d:a3:b6:0e:4f:f1:69:13:b7:57:2b:a0:b1:c3:
                    27:7b:91:b7:06:5a:89:70:fd:9a:e1:53:29:39:89:
                    83:4a:4f:09:57:63:31:0a:c2:57:b4:bc:3c:be:94:
                    0c:20:6a:b5:90:be:37:b3:c8:ae:0b:bc:0d:71:57:
                    3c:35:6d:27:f1:67:67:2f:93:db:fa:15:84:c6:4d:
                    99:c1:01:cb:44:75:5b:78:36:68:29:07:04:df:17:
                    56:90:30:ad:50:63:b3:9f:14:37:08:8a:f1:22:50:
                    87:df:e7:f4:9a:20:20:d8:51:f7:30:59:9e:f0:1b:
                    1f:2e:79:e7:c6:79:de:f6:2a:e4:de:9c:0b:d7:3a:
                    5f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:15:ED:31:B6:C5:78:D5:27:8A:81:CC:62:C7:C0:A2:4B:51:A6:D1
            X509v3 Authority Key Identifier:
                keyid:6A:F8:3D:17:25:0E:16:EC:38:76:E5:67:AE:3E:1D:AB:83:25:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/avg9FyUOFuw4duVnrj4dq4MlHAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/avg9FyUOFuw4duVnrj4dq4MlHAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B02/99B3AD88EE1F11EFAD2F4B31C4F9AE02/DC0082F6EE1F11EF9191EE31C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.114.0/23
                IPv6:
                  2001:df6:ad80::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:aa:13:02:90:e3:e3:1c:de:7e:e5:de:ec:be:0c:4b:5e:71:
         1e:2b:0e:e0:c1:07:6d:d2:4f:dd:d9:92:cc:23:ff:0d:e1:76:
         84:c5:79:f9:28:1b:01:a1:46:5e:ea:78:d7:0d:fe:e7:d6:14:
         eb:69:0e:8e:7d:a2:7c:d2:d6:2c:21:fc:a8:32:d8:e8:79:b6:
         8b:23:11:9a:85:4d:3c:f5:c8:cf:2a:1f:d1:2f:c1:39:90:55:
         8c:c5:6e:b3:b0:61:ba:7f:84:f8:20:8e:b1:bc:a1:21:83:61:
         79:8f:83:4f:25:82:c5:1e:5d:1c:bc:47:8b:4a:3d:d6:11:74:
         a9:ab:e6:b9:66:80:17:15:7e:41:d0:08:bd:c9:40:42:92:2e:
         25:fc:2a:0b:e7:5c:d4:00:f7:21:32:49:3c:24:8d:72:b3:93:
         6e:8e:5c:8a:ff:70:4c:30:e9:3c:77:e5:83:df:81:c3:9c:93:
         bc:73:e6:ad:e8:65:74:a9:26:d5:3f:f8:82:28:3f:4c:8c:5a:
         49:34:06:97:31:3a:33:70:fd:36:6f:5b:eb:5c:a3:96:0d:fc:
         24:e1:63:10:a0:0b:35:3c:5a:5b:4f:ec:92:82:b9:19:36:6a:
         09:ee:f9:f3:18:f1:8a:d5:07:01:0d:94:a1:67:53:10:6a:f2:
         5a:01:57:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:30:09 2025 by rpki-client