Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232382e302f32342d3234203d3e203138363033.roa
File:                     31342e3133372e3232382e302f32342d3234203d3e203138363033.roa (raw, json)
Hash identifier:          v4/yTcWGUBx5PU9RBSmSRRN508/di7sYbjuzHisMUkk=
Subject key identifier:   A7:72:3D:FB:BE:09:3E:4F:38:9A:A7:88:6D:69:BB:2D:62:6A:09:16
Certificate issuer:       /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial:       776BE45A4FBD9ABE9BC89517F46E907D1B751F83
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232382e302f32342d3234203d3e203138363033.roa
Signing time:             Wed 25 Feb 2026 00:28:13 +0000
ROA not before:           Wed 25 Feb 2026 00:23:13 +0000
ROA not after:            Wed 24 Feb 2027 00:28:13 +0000
asID:                     18603
IP address blocks:        14.137.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
                          rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 14:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6b:e4:5a:4f:bd:9a:be:9b:c8:95:17:f4:6e:90:7d:1b:75:1f:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
        Validity
            Not Before: Feb 25 00:23:13 2026 GMT
            Not After : Feb 24 00:28:13 2027 GMT
        Subject: CN=A7723DFBBE093E4F389AA7886D69BB2D626A0916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:49:4b:11:ee:f4:7b:ce:b5:16:16:13:a6:be:
                    66:db:ea:30:42:e7:70:ef:76:45:6b:15:52:c7:0f:
                    b6:15:d9:c7:d4:12:74:d4:2d:19:46:e3:80:bb:be:
                    42:df:6e:09:ba:72:eb:68:73:06:4a:ad:89:f2:56:
                    d5:a2:fc:c1:cf:ae:26:c9:68:72:e3:19:d6:62:2f:
                    8e:5f:14:3d:23:c1:0f:1b:95:e1:5f:af:3c:b6:e4:
                    99:b9:9c:3f:42:a3:90:a4:57:df:10:91:5b:7d:a4:
                    94:10:48:b4:85:7a:c9:c4:1f:ff:c7:9b:3c:06:8c:
                    70:3e:35:69:18:98:fa:58:3b:57:de:b7:ed:0e:88:
                    09:ee:37:38:f6:ae:53:c7:a5:72:07:68:bb:7a:6e:
                    d0:20:e5:8f:81:81:a5:36:b6:de:de:05:55:60:f8:
                    5d:61:5d:f2:93:ec:eb:7b:b1:47:26:c8:fd:7c:06:
                    0d:2b:1d:4a:b9:4a:b3:6f:6f:9b:94:68:ad:1f:7d:
                    9b:9d:51:3c:b7:0d:70:4a:e9:d5:0b:e1:09:76:2c:
                    50:85:f4:99:e3:64:5d:04:ea:52:88:0a:a1:50:15:
                    9a:09:d4:75:bf:43:37:bb:de:3c:ed:fd:7f:f4:2a:
                    ff:0e:54:d3:16:46:e6:16:c5:21:84:11:9f:0b:f3:
                    da:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:72:3D:FB:BE:09:3E:4F:38:9A:A7:88:6D:69:BB:2D:62:6A:09:16
            X509v3 Authority Key Identifier:
                keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232382e302f32342d3234203d3e203138363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.137.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:cb:79:10:35:30:ef:b5:02:a6:b4:cb:aa:57:55:44:0d:62:
         bb:ed:87:8a:c8:a9:13:2b:0a:61:d6:69:d8:07:0d:f8:32:99:
         0f:00:8a:35:28:ad:7f:2d:bc:8c:b3:6b:b0:a6:f4:e3:15:76:
         3c:fd:9f:95:d3:6d:ac:27:7e:2c:04:be:4a:8e:8b:cf:95:3f:
         27:d2:8e:79:49:4b:95:68:73:4e:6c:13:d3:80:af:d6:64:c4:
         49:b1:63:e6:83:0d:7c:6f:bc:de:35:c4:c8:2a:a4:b2:98:5f:
         8d:94:2f:ce:0e:ab:d4:cc:f4:10:a6:6d:ad:70:f4:31:f4:6c:
         61:f5:14:bc:2e:28:ed:55:41:59:6d:a9:e9:c9:41:4a:e7:3b:
         72:19:e9:29:41:74:31:7e:5b:f3:ca:03:07:5d:ad:8e:04:a6:
         7f:e8:66:97:15:05:ed:48:49:7f:95:4a:e7:50:2f:6c:bb:5c:
         4f:c3:95:5b:97:10:c0:af:04:9e:12:c9:fb:f7:37:65:30:ff:
         cd:6f:9e:67:e3:26:fb:41:c1:2b:e9:5c:fb:7b:fa:b2:72:b8:
         ac:1b:5f:85:da:dd:c0:15:d0:a4:4a:2d:2a:6d:86:38:3f:b8:
         01:0c:68:b5:67:dc:95:1f:b3:cd:35:27:2b:bd:79:59:f1:19:
         0f:b2:f8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:04 2026 by rpki-client