Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232362e302f32342d3234203d3e20383334.roa
File:                     31342e3133372e3232362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          Em7ODT/E5gco9M4erYw214RMFSmecrv0g4M2cAQa+FU=
Subject key identifier:   44:01:93:E8:21:84:E0:3D:A3:D2:82:3B:A9:05:F8:1C:FF:F9:A4:21
Certificate issuer:       /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial:       4D0E5F51EECD40E9CACDCAED629E5046AAEAEC2B
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232362e302f32342d3234203d3e20383334.roa
Signing time:             Fri 24 Jul 2026 13:31:52 +0000
ROA not before:           Fri 24 Jul 2026 13:26:52 +0000
ROA not after:            Fri 23 Jul 2027 13:31:52 +0000
asID:                     834
IP address blocks:        14.137.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
                          rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 12:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:0e:5f:51:ee:cd:40:e9:ca:cd:ca:ed:62:9e:50:46:aa:ea:ec:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
        Validity
            Not Before: Jul 24 13:26:52 2026 GMT
            Not After : Jul 23 13:31:52 2027 GMT
        Subject: CN=440193E82184E03DA3D2823BA905F81CFFF9A421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:57:c3:ec:e6:c9:4e:f1:c3:01:7f:6f:03:7e:
                    36:2a:3d:ad:8c:95:91:04:01:1a:b1:fb:a6:de:d7:
                    30:ff:89:45:db:42:cb:6c:41:e2:5a:8c:81:66:c7:
                    24:6a:e4:14:86:79:8d:f3:95:ce:c6:c8:ba:a1:84:
                    ea:26:cf:41:04:95:38:be:e9:0d:62:33:be:5e:4b:
                    a0:fb:71:31:0b:b8:62:6c:37:7c:9a:2e:28:fd:4e:
                    dd:09:41:10:3d:5a:83:28:05:0f:34:d4:57:7c:86:
                    19:56:3d:8c:07:7e:50:de:5e:29:18:f1:f6:b1:d3:
                    7c:f6:cd:ed:6a:15:7f:8c:c4:c7:ab:75:f8:75:3b:
                    f1:6a:4b:b1:33:26:e2:ea:6f:64:ca:30:f3:54:39:
                    66:98:cd:11:8e:c7:4d:6b:0f:0a:74:bf:86:b5:7a:
                    8a:69:d5:28:69:dc:f2:ce:21:0c:0a:f3:30:35:df:
                    15:f9:2e:6c:28:6e:54:e9:35:2b:34:1d:75:13:0b:
                    05:ea:49:50:56:25:09:33:d4:81:49:c0:b5:3d:3a:
                    55:ca:1e:d0:8b:3c:1c:fe:28:ad:55:28:83:62:66:
                    d7:d3:5a:b4:3b:11:0b:08:a4:3d:2a:39:d4:2f:64:
                    6b:78:41:d0:e2:12:3b:07:79:ba:45:1d:5a:ff:c7:
                    71:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:01:93:E8:21:84:E0:3D:A3:D2:82:3B:A9:05:F8:1C:FF:F9:A4:21
            X509v3 Authority Key Identifier:
                keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.137.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:47:10:a5:fa:31:a8:5c:aa:c2:31:fb:54:56:99:e9:fa:a9:
         93:cf:8c:5e:2d:f7:ec:4c:9c:c1:a0:c7:6c:b7:e7:51:55:f0:
         ba:dc:83:0c:72:87:e5:20:90:c0:df:21:bc:3a:8d:3b:ae:82:
         81:c8:78:15:47:c2:74:c3:6d:fe:95:70:3c:69:5b:7c:7d:90:
         2d:ba:61:70:62:5e:71:4b:99:3f:26:a4:21:9d:36:c8:ba:f2:
         a2:7a:1f:0b:ec:71:26:4f:55:08:ee:5b:81:70:af:9b:e7:2e:
         b0:86:4b:fb:6b:12:0c:79:23:4c:24:dc:9b:5f:34:ea:9c:d8:
         2f:d8:c7:3f:35:bd:66:f6:af:fe:b4:a6:d6:6d:4f:79:eb:c6:
         e6:e5:55:09:a9:ba:06:33:68:33:be:d2:28:a6:b8:ff:d8:ca:
         b3:42:09:1b:e5:e5:a6:ad:e8:f1:61:65:79:c5:d5:3a:c0:2c:
         de:9a:bf:b5:9a:b9:a9:c0:be:3f:30:93:dc:30:4a:6d:57:ec:
         74:4f:2f:b7:03:d5:25:28:ea:ba:6b:80:7c:23:08:c0:e3:b1:
         68:d2:13:d0:26:2e:6d:28:3a:29:b5:3f:ad:32:cd:98:15:02:
         90:f3:3e:ab:8d:d4:4d:56:d3:27:53:46:52:d3:b1:3c:ed:56:
         49:45:fe:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:09:27 2026 by rpki-client