Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/EF7E4B883FDE11EE8EC3E546C4F9AE02.roa
File:                     EF7E4B883FDE11EE8EC3E546C4F9AE02.roa (raw, json)
Hash identifier:          dLzX51Se2cwYVIN8Vmr+uVPw3hseY/U8FombHRxTBaQ=
Subject key identifier:   5C:6B:32:C8:D3:B0:1A:DB:FD:35:F3:F2:6E:93:07:1D:72:29:88:5F
Certificate issuer:       /CN=A91169FB/serialNumber=A9F7B93E9524FC4F1681A892C47322155422B18E
Certificate serial:       0874
Authority key identifier: A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/EF7E4B883FDE11EE8EC3E546C4F9AE02.roa
Signing time:             Sun 02 Mar 2025 21:39:19 +0000
ROA not before:           Sun 02 Mar 2025 21:39:19 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     2519
IP address blocks:        103.6.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl
                          rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 20:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2164 (0x874)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91169FB
        Validity
            Not Before: Mar  2 21:39:19 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67c4d007-852b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:69:bb:3d:b8:6b:c0:29:44:2e:d6:e6:a3:ec:
                    f5:c7:6c:11:f2:7b:e1:00:3d:a8:9e:8a:22:9b:30:
                    9c:54:e6:fb:66:ad:2e:9a:29:1a:26:10:57:9c:1e:
                    04:e5:d0:88:db:db:16:84:f1:00:e4:d8:32:2a:54:
                    88:bd:79:b6:f6:23:c7:16:fa:ea:df:e6:3b:dd:5b:
                    8c:31:1a:79:57:c9:2a:21:c0:55:02:1e:59:46:c2:
                    65:44:d5:de:42:ed:c3:f5:57:de:26:ed:c6:8d:34:
                    79:d8:13:85:dd:54:1b:7e:03:34:18:af:b4:62:db:
                    7c:c2:13:24:9e:f2:5a:c9:c2:c1:9f:35:64:eb:fa:
                    02:a6:21:33:b4:aa:e0:eb:1e:c0:4a:c0:dc:4f:05:
                    a6:c1:22:c3:10:52:e7:f6:5c:09:8f:bf:ae:b6:96:
                    01:d4:eb:aa:4e:27:79:14:36:30:0e:ee:a9:fd:f1:
                    18:ff:bc:e9:79:c3:f8:df:9b:bc:ce:f6:08:6d:38:
                    6b:20:78:3a:b7:4d:47:3b:06:1b:75:ec:94:8d:5d:
                    cc:11:02:9c:67:bd:3e:02:eb:0f:3d:34:dc:bf:9b:
                    77:af:33:06:08:b8:01:04:49:55:68:1b:f4:0f:2c:
                    5e:ed:4a:81:d9:b0:dd:23:81:df:79:2e:67:a6:90:
                    f0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:6B:32:C8:D3:B0:1A:DB:FD:35:F3:F2:6E:93:07:1D:72:29:88:5F
            X509v3 Authority Key Identifier:
                keyid:A9:F7:B9:3E:95:24:FC:4F:16:81:A8:92:C4:73:22:15:54:22:B1:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/qfe5PpUk_E8WgaiSxHMiFVQisY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qfe5PpUk_E8WgaiSxHMiFVQisY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91169FB/20AD4834BF3711EAA3E3A36FC4F9AE02/EF7E4B883FDE11EE8EC3E546C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:81:e7:32:74:f4:dc:28:b0:7b:02:e2:af:0e:e5:3d:61:b1:
         f1:00:ff:16:92:16:41:ab:43:52:c3:10:14:54:ef:ba:92:91:
         73:56:f8:21:d7:65:97:d8:31:e1:07:eb:bd:19:70:97:31:da:
         22:27:a8:8a:6f:7f:89:2b:15:98:c5:70:b2:6a:68:58:5b:12:
         2a:cd:be:97:88:51:45:61:5c:95:c7:94:f7:aa:98:8f:a2:40:
         b0:7d:bc:c8:59:f0:31:01:c5:11:b5:58:92:4f:3e:5d:8c:00:
         a9:46:99:7b:67:46:a7:ca:81:8e:bc:be:59:21:4c:09:67:ec:
         55:6f:cd:6d:fe:a9:24:27:d6:9b:b8:11:61:c1:fd:61:ad:36:
         8b:d7:af:c2:36:b2:4c:b3:12:39:aa:54:19:da:90:fc:65:7a:
         28:5a:29:11:86:45:10:27:eb:d1:c6:e7:90:ba:dd:f8:8c:e1:
         af:fc:7b:6c:10:5f:4b:4a:c4:ff:68:dc:41:28:f3:c3:b6:7a:
         ec:eb:57:0d:28:66:5f:35:c3:45:3e:26:f6:2a:c4:8e:d9:bb:
         9a:ab:ea:2b:d0:0a:26:b9:5d:e9:7b:57:de:fc:b9:e0:28:98:
         fa:23:e5:4a:60:36:2c:67:cd:4f:78:65:74:58:3b:a7:33:27:
         49:ed:c1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:52:12 2025 by rpki-client