Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6EEB5A22BE7A11E99ADDFD75C4F9AE02.roa
File:                     6EEB5A22BE7A11E99ADDFD75C4F9AE02.roa (raw, json)
Hash identifier:          zRNl4cGh1wy+6vX2KZejZ9MEfSlh/bELbw2UrGz7fQ4=
Subject key identifier:   FE:23:10:45:B9:DE:5C:51:0C:F9:86:C5:56:14:6F:5B:BE:B7:86:C5
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       34DA
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6EEB5A22BE7A11E99ADDFD75C4F9AE02.roa
Signing time:             Fri 24 Jan 2025 16:02:49 +0000
ROA not before:           Fri 24 Jan 2025 16:02:49 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     58818
IP address blocks:        103.251.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13530 (0x34da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214
        Validity
            Not Before: Jan 24 16:02:49 2025 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=6793b9a9-a055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:81:b2:2f:53:a3:50:54:e6:68:04:03:15:55:
                    55:2f:25:4f:81:c8:2b:7d:05:30:c3:f7:a9:0c:db:
                    79:39:31:34:82:14:e3:03:1c:9a:ae:3b:83:ca:19:
                    a4:35:10:91:00:06:e9:5f:af:0e:db:38:6e:12:18:
                    92:96:50:4a:7c:a5:68:83:b1:bf:22:49:1e:58:42:
                    b0:0f:41:60:41:e9:f6:a8:e9:5a:77:ea:f6:89:7e:
                    54:4d:b4:68:1c:fe:1a:95:5e:a9:b8:5e:fd:46:68:
                    09:ef:87:61:85:59:f4:a9:86:ce:54:63:8a:72:64:
                    73:ef:b5:35:a1:1d:77:bc:90:9b:f5:6a:8a:93:79:
                    e5:02:8d:74:43:47:e0:a6:b7:be:fe:be:3a:d7:0c:
                    f6:e4:2c:04:eb:fe:ef:5f:32:4a:7f:e9:d9:cc:c4:
                    29:4c:b0:95:1d:0b:73:d1:0a:f1:8f:95:c4:f9:29:
                    c6:38:ae:14:95:29:a1:bd:86:45:29:82:15:1f:dc:
                    65:96:85:d8:20:15:9a:2d:a8:af:be:f5:e8:aa:d9:
                    62:1e:d7:4b:50:bb:da:97:85:07:73:f9:83:3e:38:
                    a6:ed:8c:ef:cd:83:90:e2:5b:6c:e1:55:d4:27:91:
                    19:5e:0e:2b:03:27:72:8f:9c:fb:1f:5b:e4:95:46:
                    ec:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:23:10:45:B9:DE:5C:51:0C:F9:86:C5:56:14:6F:5B:BE:B7:86:C5
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/6EEB5A22BE7A11E99ADDFD75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:f6:af:9c:0f:f8:17:f3:00:b7:c0:87:2a:03:0c:47:e8:01:
         ed:e1:68:eb:04:50:c8:6a:9e:09:31:4c:1b:63:b7:f9:21:4c:
         5f:be:80:3f:97:2e:9c:7f:0b:f2:18:84:36:9b:1f:42:bc:54:
         f5:dd:a4:42:07:58:64:e1:13:ec:72:05:5f:97:68:35:11:7b:
         0b:09:1b:57:11:d1:8c:0b:45:dd:8e:77:4f:48:73:b5:be:e5:
         4c:3f:f7:7d:58:c2:5b:fa:2c:03:64:22:ba:61:f1:8f:bb:28:
         7f:7d:ff:a2:25:3f:14:00:5e:e9:2d:f9:48:fe:a8:44:54:75:
         85:b8:a9:97:3f:5c:1a:7d:fb:1d:da:f5:23:c2:37:70:ae:8e:
         e4:9b:9b:4e:61:db:99:29:be:cd:b6:9d:4b:ee:cd:32:93:7e:
         07:89:83:fc:de:8a:a0:60:39:6c:30:13:46:fa:db:13:a3:4b:
         b9:3d:72:33:ea:f2:32:4d:66:9f:69:d7:0f:aa:e9:13:e5:fc:
         83:9f:ef:76:20:29:59:aa:34:0e:06:9e:28:b2:83:6c:05:12:
         b5:cc:af:8d:de:75:f3:e9:d8:c0:9a:66:c1:27:07:9e:86:a3:
         a3:3d:29:30:2f:e3:ee:b2:24:55:09:1d:60:db:75:75:8a:42:
         b9:f9:60:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:59 2025 by rpki-client