Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/6993B4CCD43B11EDA821F80DC4F9AE02.roa
File:                     6993B4CCD43B11EDA821F80DC4F9AE02.roa (raw, json)
Hash identifier:          ZSI/iXYWNqdEgciLkCgrj+0eyDroB8ECUVdL5jcas7g=
Subject key identifier:   5F:E9:46:52:88:CE:BE:9A:40:58:D7:75:2D:36:5D:DE:97:2B:A3:65
Certificate issuer:       /CN=A916E2DC/serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577
Certificate serial:       01D2
Authority key identifier: 9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/6993B4CCD43B11EDA821F80DC4F9AE02.roa
Signing time:             Thu 03 Apr 2025 02:28:49 +0000
ROA not before:           Thu 03 Apr 2025 02:28:49 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149634
IP address blocks:        45.114.160.0/22 maxlen: 24
                          103.54.112.0/22 maxlen: 24
                          103.183.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl
                          rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 02:28:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 466 (0x1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E2DC
        Validity
            Not Before: Apr  3 02:28:49 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67edf261-8f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:aa:50:8a:4d:26:6c:b4:ff:a8:cb:19:46:dc:
                    65:e9:ee:0b:4b:35:fc:54:15:22:b8:c7:26:e0:7c:
                    aa:33:e1:aa:75:3a:ef:92:1e:48:42:a6:2c:dd:e1:
                    1a:73:0e:cb:a5:58:75:4c:d5:4b:0e:45:10:d5:6c:
                    c4:81:f2:65:e8:3f:0c:11:ad:21:37:78:5a:89:c1:
                    e4:bb:3c:10:3e:be:84:bb:77:67:a1:75:41:1b:8c:
                    c5:58:40:9e:cf:a9:5f:ad:8a:21:7f:03:9c:10:e2:
                    58:5d:08:47:b6:73:7b:9e:b5:f8:ad:29:61:d8:5c:
                    b8:14:5c:7a:db:01:62:52:70:59:61:9d:cf:cc:21:
                    b5:cc:48:db:c9:e1:6b:c4:e0:c6:91:6a:62:c3:8f:
                    8d:03:d2:9d:8f:51:ce:6b:5d:46:f6:3f:e8:82:17:
                    ef:e8:ce:68:70:20:b3:21:b2:dd:60:0b:82:dc:c1:
                    6f:0b:95:dc:3f:a8:54:59:28:36:cd:da:af:78:eb:
                    07:a0:eb:98:d5:65:2a:79:ea:a3:50:99:cd:3d:93:
                    97:61:08:5c:9e:24:1b:5e:7c:8c:de:bb:d2:1e:7f:
                    ce:11:0c:ec:f5:64:e5:8f:e4:39:01:79:d4:94:0b:
                    9d:66:05:f5:bc:a1:c5:88:73:01:e2:67:18:0c:ba:
                    74:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E9:46:52:88:CE:BE:9A:40:58:D7:75:2D:36:5D:DE:97:2B:A3:65
            X509v3 Authority Key Identifier:
                keyid:9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/6993B4CCD43B11EDA821F80DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.114.160.0/22
                  103.54.112.0/22
                  103.183.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:38:3a:c4:a3:46:bf:b5:12:d4:86:e4:a3:3d:dd:8a:e7:04:
         41:b6:52:60:cd:57:5d:26:e0:e2:be:5e:2e:8a:f5:0d:85:b7:
         49:01:fd:33:48:9d:9b:d9:44:0b:14:29:22:15:50:17:33:35:
         d5:82:c8:b9:fe:87:5a:ff:55:eb:57:0f:89:b5:dc:88:72:65:
         33:69:13:38:4b:5d:40:a3:2b:f9:b9:7b:73:92:0d:e1:c6:e4:
         22:86:56:2c:87:39:c2:de:ab:40:03:96:3e:0c:c1:1b:b0:8e:
         2a:b6:42:3e:42:69:42:4f:bd:35:1b:8f:21:1c:f4:fb:f9:de:
         5e:2b:01:c4:f4:66:f7:69:24:d5:4c:ac:86:c9:8f:b1:57:80:
         76:fe:f4:7a:bd:5a:88:23:ca:f4:2b:1d:2f:ac:dd:2a:3b:fe:
         58:21:01:c3:bb:f1:51:2a:6d:27:e4:b4:b2:3b:7d:03:19:87:
         54:15:39:46:66:87:17:57:85:5a:2d:8e:83:5b:32:21:93:5c:
         3b:02:51:6e:d4:1d:30:56:aa:5e:65:04:4d:59:1f:a9:01:9b:
         9a:76:61:90:41:23:ae:a1:b5:50:fe:c6:e4:e0:32:6f:e3:63:
         60:17:eb:e0:95:20:44:1a:20:b0:df:2d:23:3f:c0:d7:cb:83:
         44:df:87:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:38:05 2025 by rpki-client