Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232382e302f32332d3234203d3e20383334.roa
File:                     31342e3133372e3232382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          ezb/sgUqEsMnHUM+dUW0Y81o4gg6pWlYG2A4Mnl02is=
Subject key identifier:   BC:D0:A2:8D:B1:19:E3:D8:3B:BB:13:42:5E:D1:5D:53:5D:C0:44:BF
Certificate issuer:       /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial:       3FC027893E3853B321AFCFD39D9F451FAB2E8EAE
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232382e302f32332d3234203d3e20383334.roa
Signing time:             Thu 09 Apr 2026 05:29:01 +0000
ROA not before:           Thu 09 Apr 2026 05:24:01 +0000
ROA not after:            Thu 08 Apr 2027 05:29:01 +0000
asID:                     834
IP address blocks:        14.137.228.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
                          rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 15:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c0:27:89:3e:38:53:b3:21:af:cf:d3:9d:9f:45:1f:ab:2e:8e:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
        Validity
            Not Before: Apr  9 05:24:01 2026 GMT
            Not After : Apr  8 05:29:01 2027 GMT
        Subject: CN=BCD0A28DB119E3D83BBB13425ED15D535DC044BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9d:c3:eb:7c:44:34:b2:9a:a8:a9:44:d5:41:
                    df:8e:a9:35:b2:71:9d:ef:f5:23:41:5a:55:34:b8:
                    08:6c:9c:d9:20:67:3e:18:34:fa:ff:0e:f0:31:07:
                    b1:75:69:98:86:55:2b:cb:e2:78:0f:d4:4f:0f:54:
                    ef:3c:66:68:fe:1a:a1:46:97:91:b6:cd:69:30:21:
                    56:c8:ce:44:6c:de:b1:d2:94:05:05:fc:5d:35:7c:
                    80:71:8f:f8:e5:80:ae:34:12:e6:19:81:77:ce:ab:
                    61:66:44:cc:ae:ee:c9:eb:89:eb:68:07:46:a3:a0:
                    1f:a9:54:2e:b8:6c:9d:62:75:f8:df:c5:76:d2:e4:
                    c8:5b:e4:33:27:0f:26:62:be:83:fa:9a:72:79:4b:
                    4f:04:1a:05:02:06:ce:6e:f6:32:af:b7:19:33:52:
                    1c:60:ec:4a:88:86:75:f0:c0:28:b9:3b:4b:1e:b2:
                    eb:52:bb:13:e7:6f:09:5f:08:c7:8a:c9:df:29:d4:
                    ba:3a:fa:48:76:cd:fe:cb:42:3c:63:68:81:a4:e8:
                    18:1e:0c:08:1f:3a:0f:4c:f3:80:e8:ac:d4:00:78:
                    8a:4f:27:f6:c5:2f:bf:1b:4f:2e:33:63:5c:a3:28:
                    28:c3:e1:b3:b2:12:72:06:62:70:a5:f4:82:fa:cb:
                    af:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D0:A2:8D:B1:19:E3:D8:3B:BB:13:42:5E:D1:5D:53:5D:C0:44:BF
            X509v3 Authority Key Identifier:
                keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232382e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.137.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:f9:88:87:4a:59:7b:85:fc:b1:d5:02:73:79:bc:4a:ee:ea:
         0a:3a:e2:e9:e4:b2:5a:9f:b8:60:6c:76:40:76:00:9b:fb:b2:
         87:97:a2:18:ac:cf:0f:b8:b4:4a:22:26:6d:3a:b1:7b:c8:8c:
         b1:50:72:fa:79:1c:42:64:47:4b:b8:8b:7e:2f:a7:83:41:b7:
         8e:af:7a:5e:e2:38:bd:2f:50:6a:95:44:85:58:df:c6:1e:a3:
         93:28:a1:88:68:89:12:3a:c8:54:e8:b8:ef:85:58:55:89:26:
         45:99:1f:2b:dd:bb:70:80:5d:f4:94:4d:40:8c:e6:35:43:d3:
         e1:af:e3:47:c0:b5:3f:c8:5b:b4:97:c0:c2:92:aa:e1:6b:7a:
         d3:fb:13:f6:66:a4:11:40:7c:dc:01:16:1e:20:06:0f:d1:4d:
         8d:55:c2:fb:06:e7:35:87:b4:da:9f:ee:23:06:42:f8:2b:ef:
         b6:64:28:12:23:4b:9b:76:7e:11:d7:f8:e2:7d:5c:32:30:69:
         94:96:55:1c:df:2e:90:a1:e0:42:86:2b:aa:a1:7a:87:aa:03:
         5d:07:62:ef:41:cb:eb:dd:0f:44:86:cc:f5:ee:5f:54:77:7d:
         bb:18:ec:ac:32:5e:0d:30:fd:86:69:1a:a5:36:0c:1a:96:58:
         af:8c:87:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:33:52 2026 by rpki-client