Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233302e302f32342d3234203d3e203138363033.roa
File:                     31342e3133372e3233302e302f32342d3234203d3e203138363033.roa (raw, json)
Hash identifier:          YJ1fO/i2NmA35f1AvgvdHQklEKCITvzgNHSdGBEJzz0=
Subject key identifier:   A0:B7:85:3E:CD:CB:73:0D:48:87:2D:F3:2B:63:78:64:BA:A4:86:87
Certificate issuer:       /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial:       5E4B6EA5967C4725CC042E8D387B6E3E8A92BA39
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233302e302f32342d3234203d3e203138363033.roa
Signing time:             Wed 25 Feb 2026 00:28:13 +0000
ROA not before:           Wed 25 Feb 2026 00:23:13 +0000
ROA not after:            Wed 24 Feb 2027 00:28:13 +0000
asID:                     18603
IP address blocks:        14.137.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
                          rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Mar 2026 04:23:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:4b:6e:a5:96:7c:47:25:cc:04:2e:8d:38:7b:6e:3e:8a:92:ba:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
        Validity
            Not Before: Feb 25 00:23:13 2026 GMT
            Not After : Feb 24 00:28:13 2027 GMT
        Subject: CN=A0B7853ECDCB730D48872DF32B637864BAA48687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9c:98:73:0a:cd:f1:e5:66:34:c9:12:09:01:
                    4f:d5:a1:af:86:e3:c9:37:58:86:3c:2d:4d:1c:87:
                    4a:a8:18:00:87:94:99:3d:cc:de:c0:fa:86:25:0f:
                    b4:37:00:eb:c9:4e:8d:2e:24:22:d5:15:68:14:e4:
                    42:f8:27:11:e6:95:d6:6a:6b:fc:7a:c2:55:ca:9e:
                    d7:99:f2:d1:f3:43:9f:9f:0f:66:20:38:44:7f:d5:
                    ee:84:0e:40:82:f9:23:c8:a1:27:ef:84:a3:97:18:
                    57:b6:00:40:ef:cf:26:8f:33:53:31:c4:3f:0b:9a:
                    de:cd:ce:6c:08:50:06:25:12:76:9b:3c:e3:9f:79:
                    52:09:57:54:0a:ea:8f:ef:f3:14:8f:41:82:a0:0c:
                    ff:64:e4:db:2d:c0:22:65:f7:f2:cc:f2:a5:e1:7d:
                    3d:ed:30:87:ab:76:8a:e8:4e:14:8b:37:88:7c:55:
                    a8:18:65:e9:f0:aa:0b:54:53:3d:ef:b0:7d:c0:d7:
                    72:d6:ed:11:69:a2:03:b0:51:e3:78:8c:c3:86:b0:
                    9a:b6:59:c4:d7:f2:fa:77:12:c0:a7:83:70:dc:45:
                    c2:dc:4b:3e:6c:dc:e9:23:b9:cc:89:d1:86:9f:24:
                    42:27:78:71:94:f0:76:0e:34:f0:01:a6:7d:58:0b:
                    2c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B7:85:3E:CD:CB:73:0D:48:87:2D:F3:2B:63:78:64:BA:A4:86:87
            X509v3 Authority Key Identifier:
                keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233302e302f32342d3234203d3e203138363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.137.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:8f:e7:dd:f2:c6:06:03:8a:7e:03:f7:93:26:82:19:59:dc:
         f5:15:ad:6d:c1:11:90:04:1f:92:61:58:c9:0c:e9:d3:30:51:
         bb:f2:1d:41:7e:4a:47:f2:04:73:3b:06:27:b8:cd:e4:52:81:
         23:ea:a0:8e:77:80:3d:27:7e:14:9b:31:7f:41:25:df:93:1c:
         8f:89:1f:bb:7c:d7:d1:8e:ec:7f:08:71:bd:35:6b:6f:61:b4:
         25:bb:a3:88:b4:19:5b:d8:4a:28:b8:0b:1f:08:1f:45:7c:f2:
         79:e1:dc:10:3b:a2:92:bb:6f:25:35:c5:19:6e:5f:03:54:71:
         2a:4d:b2:16:89:16:33:36:3e:cb:07:bb:1c:d5:20:83:18:fa:
         75:0a:55:0c:13:a0:a1:b1:3b:a2:ac:4f:1e:c1:c9:10:fe:d7:
         c0:07:5b:07:90:ed:64:f8:ad:fb:46:d6:93:cc:55:a6:94:db:
         fe:6e:48:bd:fa:ae:f8:52:d3:00:87:ed:b3:39:94:62:0a:0b:
         8a:54:1a:0e:3e:33:5d:7e:7d:d8:c6:95:c1:32:37:35:21:b5:
         51:fd:31:92:c9:9b:48:b5:55:77:2b:75:78:d7:f8:3c:93:16:
         02:b1:54:85:c7:79:82:2f:fb:ed:cc:fb:bf:8f:18:bc:16:3d:
         40:f9:2f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:46:02 2026 by rpki-client