Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/6FA4F9C44D8511EFA6073432C4F9AE02.roa
File:                     6FA4F9C44D8511EFA6073432C4F9AE02.roa (raw, json)
Hash identifier:          gExqM4aUKrBllmPpMCtcVSZCHfPpzfLPu3nuxUT8Qqs=
Subject key identifier:   54:E8:D5:B6:CC:B6:B5:51:6E:90:83:03:FE:91:D4:37:05:89:48:5A
Certificate issuer:       /CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
Certificate serial:       0873
Authority key identifier: A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/6FA4F9C44D8511EFA6073432C4F9AE02.roa
Signing time:             Sun 02 Mar 2025 21:39:18 +0000
ROA not before:           Sun 02 Mar 2025 21:39:18 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     15830
IP address blocks:        103.6.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl
                          rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 20:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2163 (0x873)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91169FB
        Validity
            Not Before: Mar  2 21:39:18 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67c4d006-fd6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:32:a7:8d:32:d5:57:6b:aa:e7:bf:9b:63:65:
                    6e:80:31:c2:b5:75:47:da:3f:45:44:b1:e1:6f:e0:
                    6b:94:21:92:56:7a:e2:31:90:f2:28:a0:87:74:a3:
                    cf:9c:54:4e:57:0a:e0:86:bf:f0:95:27:89:7c:a7:
                    a1:ab:e5:7c:73:d3:f3:7e:f6:73:e5:10:40:c3:48:
                    c9:03:5d:4f:b5:df:55:fd:82:96:74:11:e3:2e:b2:
                    1f:14:22:97:d2:03:fb:c9:f2:51:59:c6:91:3d:27:
                    42:8d:41:c5:f5:87:28:83:4f:58:54:f8:f4:7d:77:
                    91:fc:cf:2c:16:e1:ce:ac:d6:1e:d7:4f:60:a1:d8:
                    f7:35:ba:ef:df:49:98:ba:1b:ce:84:10:78:7f:a7:
                    5c:1c:e2:17:d2:5d:db:17:f7:aa:ec:26:3b:a4:de:
                    af:1f:f4:3e:de:0a:17:7d:ea:0b:70:1d:2f:9c:0e:
                    22:46:13:65:75:a7:5a:0d:7e:c0:ed:9e:7e:b2:52:
                    60:6b:60:12:ab:27:bd:06:35:fe:d5:a4:9f:6d:3a:
                    22:02:37:c4:17:b8:2b:16:c8:a6:5b:30:2b:f0:1e:
                    6b:7e:2a:32:35:ad:de:0a:8d:69:65:21:24:20:0e:
                    b0:a7:ed:d8:7e:ca:1b:32:20:ca:df:0c:20:e9:fc:
                    81:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E8:D5:B6:CC:B6:B5:51:6E:90:83:03:FE:91:D4:37:05:89:48:5A
            X509v3 Authority Key Identifier:
                keyid:A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/6FA4F9C44D8511EFA6073432C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:ca:90:64:54:62:92:b9:a6:4e:dc:00:b3:8b:17:a4:00:c8:
         e8:99:78:19:77:e2:9a:81:f0:84:68:e8:85:aa:54:60:c5:07:
         ae:39:c7:fe:78:37:af:0f:9d:54:06:51:6b:b8:7e:8b:37:6b:
         cd:77:d1:f3:34:4d:77:8d:73:4e:92:d7:80:07:39:99:3f:b5:
         d4:7a:cc:19:6b:6a:e8:1c:27:8a:d6:fe:54:c4:56:35:5b:6c:
         ca:60:c2:60:1f:52:bf:ed:93:0e:c0:7b:27:6a:8d:0c:fb:2f:
         53:96:44:ec:ed:73:2e:01:39:60:8b:ec:0e:92:32:af:2a:67:
         39:4e:60:e5:39:a3:2b:5e:07:38:99:54:0e:a0:9e:c0:65:e5:
         9c:0b:4d:a5:2c:44:42:52:2d:38:83:ee:b3:61:1a:38:85:be:
         b7:28:c0:46:60:00:16:0b:c7:e4:2a:88:33:09:09:3a:66:6c:
         75:ce:86:87:37:3c:43:9b:a5:e6:b6:89:7b:02:85:78:a9:67:
         83:49:1d:03:c5:3d:1f:2e:73:ad:f7:31:e8:12:36:ef:3d:a8:
         d1:56:2e:99:8e:40:cb:29:7b:b0:df:90:1e:06:47:d6:1b:54:
         e4:ec:ba:66:2c:64:6d:d6:a7:80:d9:73:cf:f6:7c:9a:b3:30:
         7b:e9:cd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:54:14 2025 by rpki-client