Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/6BA11A56807911EBA6F1A955C4F9AE02.roa
File:                     6BA11A56807911EBA6F1A955C4F9AE02.roa (raw, json)
Hash identifier:          BEroe25M20UrAiw8SyEvv6Pk5mXlFp9GQ+z/Vqtvaw0=
Subject key identifier:   1F:DB:8C:4E:B3:F2:C2:85:83:9E:71:A0:30:00:BB:92:3F:55:36:C6
Certificate issuer:       /CN=A91E7222/serialNumber=11B44556B79627853F4031ED6DD57284056EFF53
Certificate serial:       0612
Authority key identifier: 11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/6BA11A56807911EBA6F1A955C4F9AE02.roa
Signing time:             Wed 04 Dec 2024 22:21:37 +0000
ROA not before:           Wed 04 Dec 2024 22:21:37 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     133161
IP address blocks:        103.253.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl
                          rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 22:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1554 (0x612)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7222, serialNumber=11B44556B79627853F4031ED6DD57284056EFF53
        Validity
            Not Before: Dec  4 22:21:37 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=6750d5f1-2e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fb:c9:0d:e6:02:50:31:8d:1b:6f:02:fc:91:
                    f0:f5:6f:5a:61:80:c2:87:29:4b:d8:7a:81:c2:32:
                    f2:a3:7d:b2:1c:98:84:b5:a5:52:98:df:d9:b6:70:
                    11:86:0d:4a:5d:89:f8:c7:ae:7f:25:a6:f8:1a:2b:
                    12:4b:99:cf:de:6b:80:cf:ab:b8:af:6e:c2:84:ef:
                    56:9d:24:a7:f5:40:c6:da:93:05:27:2d:49:2c:78:
                    1a:e6:c2:43:dc:94:6d:4d:91:76:63:08:da:8d:94:
                    bc:d5:5f:33:fc:19:47:ba:95:53:2b:d2:35:98:a5:
                    33:ec:ff:e2:cf:5c:49:5e:87:64:7a:80:58:6b:5b:
                    37:99:bc:83:18:39:89:65:c0:a1:e4:40:61:9a:2c:
                    d2:fb:18:b7:c4:b6:e0:d8:0c:59:d4:e7:0e:20:e3:
                    68:e0:a1:f5:a6:88:19:82:46:24:7a:8a:c2:82:db:
                    71:32:6a:e0:22:ed:d5:58:cd:b0:09:44:2d:e9:57:
                    15:c7:54:f0:20:8f:6d:6b:cc:02:76:91:bb:1e:f8:
                    a8:c0:c6:c2:fb:cd:14:c5:7e:60:b3:71:48:77:34:
                    9e:9d:3f:10:52:06:67:d2:80:a5:d8:7f:ba:3e:8f:
                    89:50:11:31:e6:56:70:cf:54:c2:54:6d:e3:6e:c7:
                    7f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DB:8C:4E:B3:F2:C2:85:83:9E:71:A0:30:00:BB:92:3F:55:36:C6
            X509v3 Authority Key Identifier:
                keyid:11:B4:45:56:B7:96:27:85:3F:40:31:ED:6D:D5:72:84:05:6E:FF:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/EbRFVreWJ4U_QDHtbdVyhAVu_1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EbRFVreWJ4U_QDHtbdVyhAVu_1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7222/CA076158807511EB8DCB984EC4F9AE02/6BA11A56807911EBA6F1A955C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.253.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:95:85:98:33:b2:b5:58:7c:54:9c:24:89:d7:83:41:27:d6:
         18:4c:c1:92:85:2b:60:40:1a:57:92:ef:da:80:45:29:ac:c4:
         f2:ce:b4:f2:7a:f0:d7:15:4e:47:9d:5d:97:31:77:f1:10:f0:
         9e:a5:14:64:79:db:9a:12:d3:cc:94:d9:e6:21:68:49:d7:88:
         2a:e6:e5:81:ee:9a:bb:a2:07:29:12:66:95:cb:bd:71:c7:26:
         95:9c:44:64:cb:b5:c0:70:05:d5:55:ac:94:fd:15:37:fd:20:
         b4:3d:6f:66:48:ca:87:86:2a:04:2a:8d:74:50:19:54:43:df:
         eb:70:4e:9d:40:a2:6e:c2:0f:af:12:fc:de:40:1f:be:18:92:
         91:77:96:c3:43:9d:87:2e:bb:02:51:4c:50:8c:5f:27:d7:13:
         d8:08:46:03:9f:27:88:dc:1c:38:d4:a9:69:46:3a:de:4e:f1:
         fb:a9:17:6f:fa:5a:18:82:4c:75:a1:4c:fc:92:1e:bb:ba:c5:
         be:43:22:67:5c:49:f7:d5:92:2b:b3:39:8d:95:79:7f:fc:d5:
         87:43:fd:e2:46:57:af:01:d6:c0:d8:e2:2c:71:41:1a:a7:92:
         6d:e5:d6:e0:90:e7:b3:f4:17:77:39:6b:f4:3c:16:9d:5e:9f:
         fe:ef:ad:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:09:52 2025 by rpki-client