Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/6B0DCABA80D111EFA7138B77C4F9AE02.roa
File:                     6B0DCABA80D111EFA7138B77C4F9AE02.roa (raw, json)
Hash identifier:          XrzD9gHCwm8eB2YxyR3P7eTPrT9KRU3rPXHkNDhO2w8=
Subject key identifier:   6B:9B:8C:A3:B9:2D:EA:0C:E4:60:FE:3B:74:36:2F:D8:EB:52:F5:02
Certificate issuer:       /CN=A9171524/serialNumber=C2FC3E1B1B543EBD48DFDA591DC2518224F95B7F
Certificate serial:       0211
Authority key identifier: C2:FC:3E:1B:1B:54:3E:BD:48:DF:DA:59:1D:C2:51:82:24:F9:5B:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/6B0DCABA80D111EFA7138B77C4F9AE02.roa
Signing time:             Thu 27 Mar 2025 02:08:53 +0000
ROA not before:           Thu 27 Mar 2025 02:08:52 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     142295
IP address blocks:        103.182.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.crl
                          rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 02:08:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529 (0x211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171524
        Validity
            Not Before: Mar 27 02:08:52 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67e4b334-d42b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a4:2b:10:38:ac:8b:e7:66:e1:ef:1d:d5:ea:
                    d6:4c:74:2f:65:89:49:d0:86:6e:06:be:52:14:3c:
                    46:35:b1:67:9e:31:15:ad:4b:27:20:a3:83:1b:4c:
                    35:3a:e8:e8:e6:4b:05:37:3e:b0:7a:96:12:f1:21:
                    30:91:af:db:99:02:93:ee:0f:0f:5b:6a:97:5c:a4:
                    0b:98:48:6d:ba:4e:2f:fd:5c:4e:2b:6c:29:9d:9b:
                    2d:00:b1:fe:18:2a:07:d1:99:71:7f:c1:ed:92:ad:
                    7d:05:26:f1:e0:01:39:63:c6:16:ba:aa:3a:d0:50:
                    e2:23:60:65:3e:ad:5e:f7:c2:c2:e8:63:da:87:a5:
                    37:7f:2e:f9:27:68:91:af:3a:29:dc:96:cc:cf:a6:
                    33:c2:53:0a:28:12:0e:d0:f3:8c:b3:56:fb:b1:5b:
                    3f:00:4b:b6:7e:74:ab:5b:07:54:7d:73:80:62:3a:
                    13:04:09:22:19:1d:2e:0a:5c:9a:8e:31:bf:ad:58:
                    ed:c3:da:f8:45:f9:17:2b:72:37:2e:7b:b6:e2:c2:
                    cf:92:21:3f:67:79:73:82:82:ad:66:81:63:c3:e8:
                    37:11:97:3e:d5:46:b1:c3:83:ab:b1:62:7a:22:0b:
                    54:63:12:7d:30:89:26:e8:92:1a:e2:ce:6f:48:b7:
                    e2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9B:8C:A3:B9:2D:EA:0C:E4:60:FE:3B:74:36:2F:D8:EB:52:F5:02
            X509v3 Authority Key Identifier:
                keyid:C2:FC:3E:1B:1B:54:3E:BD:48:DF:DA:59:1D:C2:51:82:24:F9:5B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/wvw-GxtUPr1I39pZHcJRgiT5W38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wvw-GxtUPr1I39pZHcJRgiT5W38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171524/491F02DE2C7811ED95F3DE14C4F9AE02/6B0DCABA80D111EFA7138B77C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:40:b3:31:cb:b9:18:3b:ee:4c:36:25:ac:e9:b7:aa:dc:70:
         0e:69:c8:48:ea:d7:b4:37:3b:23:86:40:13:80:2d:99:d2:c1:
         89:a9:50:1f:1a:74:e0:6f:6e:7c:3d:43:3b:8b:2a:7c:d6:45:
         4d:93:a9:84:96:27:71:7b:2b:75:5a:5e:da:26:9a:41:95:9a:
         0f:da:bb:a7:2b:9f:28:c1:d3:fd:0d:41:82:2b:83:1a:30:44:
         13:79:eb:2e:61:77:50:ef:42:43:28:e0:62:cd:ea:f8:7e:bb:
         e6:a9:0f:c8:ca:82:35:b3:22:c4:2a:40:95:9d:f5:be:43:ae:
         a2:ed:ec:9b:3c:9d:6e:79:2f:14:05:a5:b3:6e:52:8b:07:a0:
         83:0e:57:39:6a:52:63:b1:ce:ac:38:cb:2a:e3:ee:20:9f:2f:
         a3:03:e0:c3:34:91:9c:f8:92:a0:e8:5f:dd:57:f4:d6:1c:b9:
         b1:99:3f:45:e5:e6:ae:66:8d:db:d7:a3:ed:61:4d:83:61:c4:
         56:1b:06:00:92:f1:ef:3e:bb:4e:c6:fe:dc:9d:9b:5c:48:ec:
         03:dd:f4:60:45:8e:3b:3a:c4:0c:e3:8b:a1:60:b2:bf:5e:c0:
         f8:71:f5:2e:29:9c:8e:04:10:de:cf:8f:2d:b9:ac:42:9d:10:
         f7:f5:0b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:25:04 2025 by rpki-client