Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/691CFE18184B11EA85906435C4F9AE02.roa
File:                     691CFE18184B11EA85906435C4F9AE02.roa (raw, json)
Hash identifier:          XBLnLS8CoZPqneN92hjne4admIXeH2doDZ0IFbFaSn4=
Subject key identifier:   9C:7F:9E:FD:11:B0:97:FB:A0:35:11:5E:72:67:AE:98:D5:5E:A8:3D
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       34CA
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/691CFE18184B11EA85906435C4F9AE02.roa
Signing time:             Fri 24 Jan 2025 16:02:33 +0000
ROA not before:           Fri 24 Jan 2025 16:02:33 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     38516
IP address blocks:        103.54.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13514 (0x34ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214
        Validity
            Not Before: Jan 24 16:02:33 2025 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=6793b999-c1b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a0:68:e2:09:72:6f:7c:e4:3a:71:35:bc:a9:
                    69:2c:d5:3a:38:7a:2b:9a:fe:6a:41:c7:f7:97:21:
                    eb:6a:25:f4:7e:e3:f7:27:5e:7d:14:a2:3c:ab:e2:
                    6f:59:3e:d2:51:72:a5:a2:ae:73:a2:3d:8e:41:e7:
                    b7:cb:31:b2:77:17:9b:09:6e:cb:5e:73:dd:dd:2b:
                    63:2f:a3:eb:84:74:84:11:2a:b8:5e:97:12:03:e6:
                    db:87:ab:d9:a1:28:27:df:5f:79:88:30:d4:ec:62:
                    81:7d:72:2d:ea:ec:37:3b:51:d1:88:63:08:2b:5e:
                    f5:26:3e:35:75:3e:66:0f:40:a7:de:76:a6:68:40:
                    a3:b0:b8:08:8a:5a:10:ae:7a:4a:f5:d5:18:c7:a9:
                    db:66:ae:4b:31:c1:a8:f8:c9:8b:df:bc:7d:00:e9:
                    d8:4c:17:9e:84:7c:d6:a4:03:a3:39:e7:73:db:40:
                    aa:0c:bf:f1:8b:d6:db:11:70:28:9e:04:c5:30:13:
                    dd:b2:13:93:bd:62:c5:e1:1e:1d:ef:b7:69:61:78:
                    f1:2f:55:95:00:6a:26:05:2e:ff:49:a0:48:fd:40:
                    d1:43:ea:e4:3a:84:8f:2a:50:87:53:d8:eb:35:ba:
                    be:81:c1:6d:cb:17:55:0a:ca:f7:88:c9:ab:6b:57:
                    f7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7F:9E:FD:11:B0:97:FB:A0:35:11:5E:72:67:AE:98:D5:5E:A8:3D
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/691CFE18184B11EA85906435C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:3e:5c:48:12:a7:82:f0:42:cc:fe:c9:3e:97:c0:ba:ac:9b:
         76:c4:2d:6b:e8:b5:0e:d0:a1:c8:7b:aa:bb:fd:2a:6f:0f:4b:
         f9:cf:14:5f:12:5f:a7:c2:e9:40:11:39:83:6e:8c:67:f9:4c:
         63:c1:76:3a:95:f7:6a:6f:33:47:0d:c8:7d:19:07:58:25:46:
         e7:fc:bd:fd:b8:23:a8:7d:55:16:9c:2d:93:20:64:af:7c:ec:
         65:ed:47:f2:53:a4:50:6e:89:7a:5b:cc:e5:dd:c1:19:c0:95:
         93:23:72:a2:73:df:0b:54:39:a3:83:72:a0:14:32:74:b0:5c:
         5a:15:d4:d9:c4:28:dc:9a:2f:38:c4:4e:ee:03:0a:4a:ca:01:
         ef:ed:09:0b:7c:da:2f:bd:42:d3:2b:78:b7:85:ae:32:ed:e0:
         69:b4:22:0c:6a:77:6f:a3:8f:e9:3e:bd:06:89:55:be:fd:98:
         bd:69:bf:a1:5c:fb:cf:5b:9d:80:33:d1:09:1f:37:fa:db:0f:
         02:66:2c:71:d0:6e:89:e3:2d:80:1a:40:e9:0e:96:40:af:f7:
         49:fe:7f:de:c6:5b:9f:9f:10:3f:01:29:82:6d:62:35:43:a7:
         de:b7:1f:53:a4:14:cb:4e:ad:fe:f4:3e:0f:68:ee:2c:b2:bb:
         f8:ce:e3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:37:26 2025 by rpki-client