Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6C906DE4BE7A11E99ADDFD75C4F9AE02.roa
File:                     6C906DE4BE7A11E99ADDFD75C4F9AE02.roa (raw, json)
Hash identifier:          AcBpX+mvudevZxRHrFr2+gPNpS9AeBUJGg4GNiQw8SI=
Subject key identifier:   8C:05:43:2C:C3:16:94:72:06:AA:92:22:BE:5F:41:9B:35:B0:35:10
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       34D3
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6C906DE4BE7A11E99ADDFD75C4F9AE02.roa
Signing time:             Fri 24 Jan 2025 16:02:41 +0000
ROA not before:           Fri 24 Jan 2025 16:02:41 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     55654
IP address blocks:        103.209.98.0/24 maxlen: 24
                          2001:df1:2980::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13523 (0x34d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214
        Validity
            Not Before: Jan 24 16:02:41 2025 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=6793b9a1-8b2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:70:a8:71:fc:d0:ae:b7:bf:38:52:bd:b9:37:
                    f8:ea:31:ad:14:cb:8f:28:4a:14:52:84:99:a1:82:
                    4d:21:13:1b:81:48:96:5e:d5:48:7b:4a:94:8f:a9:
                    c2:c2:98:a8:ad:25:d9:c2:18:9a:5b:74:9d:dd:4f:
                    56:02:81:c4:e6:bb:8e:5f:7f:86:0f:00:19:4f:e3:
                    d7:e9:27:5c:e7:1c:db:f9:ee:1f:73:45:92:71:14:
                    f8:05:f0:7a:3c:0a:7e:24:86:94:d1:ce:67:0a:e3:
                    b9:b9:e2:ce:59:02:3e:a6:a0:b8:13:cc:b3:62:75:
                    80:86:ce:b6:11:8e:7d:4e:53:4b:8f:7c:ba:00:6f:
                    ec:67:3b:55:aa:71:33:5c:a8:0a:e0:fa:fb:b5:d9:
                    bb:1b:d1:64:25:7c:fd:1d:09:8b:4b:8e:4b:2e:22:
                    31:f7:40:70:10:e5:35:49:ea:1d:f0:09:7d:19:39:
                    1e:49:41:5e:14:2b:2f:48:3a:ee:3a:73:d2:02:3c:
                    88:cc:1e:a8:d7:fe:e9:72:5e:e8:99:5e:12:fc:44:
                    4e:32:81:b1:a0:21:c3:d0:0c:76:98:d5:ec:02:4c:
                    d6:cf:a2:35:62:00:49:cd:64:89:90:31:71:e6:51:
                    d8:cd:e8:ac:58:8d:d4:c6:08:6f:9c:8e:8b:f2:8f:
                    10:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:05:43:2C:C3:16:94:72:06:AA:92:22:BE:5F:41:9B:35:B0:35:10
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6C906DE4BE7A11E99ADDFD75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.209.98.0/24
                IPv6:
                  2001:df1:2980::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:27:ee:5e:84:93:df:47:ad:48:6f:0c:cb:41:90:be:88:6a:
         f7:45:a6:42:ee:1e:2c:3e:ef:a0:29:70:3a:69:57:35:fa:76:
         30:f4:a5:30:43:92:46:89:72:88:fd:0c:22:14:27:e2:18:7f:
         e1:ee:29:ad:d8:fc:b8:58:bb:eb:60:1d:7e:60:3e:78:16:3b:
         83:2d:e2:0d:1a:e0:d4:08:6d:a4:df:8d:d8:af:65:5f:7b:0b:
         ac:25:13:59:47:e5:5c:1b:ec:79:f5:22:fc:0e:0f:b8:71:3d:
         59:e2:19:d0:84:b1:d2:35:76:a6:0b:59:7e:0d:60:25:9c:d6:
         5e:42:e3:60:a3:23:dc:80:4c:67:67:b8:6e:a3:e3:9d:e8:78:
         92:54:e7:f9:79:5e:50:ed:3b:e3:97:cb:5e:1f:10:b6:49:c7:
         77:45:83:d1:f2:f1:ad:58:cb:58:d9:c7:4e:d1:c7:a2:5b:15:
         bc:b8:9a:45:28:97:ef:c2:94:90:1b:eb:b1:75:d0:3d:b7:09:
         e2:05:2a:74:69:f3:7a:62:cc:0f:95:4c:82:37:21:06:e3:d4:
         03:74:8c:4f:ed:a8:08:01:c4:a6:f9:2b:cc:a2:05:8d:29:24:
         63:d3:b0:b5:f8:6d:cd:60:52:76:42:11:16:25:cb:5f:48:56:
         a3:80:45:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:39:08 2025 by rpki-client