Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233332e302f32342d3234203d3e2032393134.roa
File:                     31342e3133372e3233332e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier:          SulJzptK2JEPE0Thesfx0ENQS1MfkIJSrpjxYKm8Rxs=
Subject key identifier:   36:E4:12:41:58:F8:4C:69:FB:03:19:99:EE:7A:24:A7:B2:BE:9A:1F
Certificate issuer:       /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial:       492B53EBAF14AAE283D5EE2EE32183D5155BD31D
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233332e302f32342d3234203d3e2032393134.roa
Signing time:             Thu 09 Apr 2026 05:27:16 +0000
ROA not before:           Thu 09 Apr 2026 05:22:16 +0000
ROA not after:            Thu 08 Apr 2027 05:27:16 +0000
asID:                     2914
IP address blocks:        14.137.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
                          rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 Apr 2026 14:58:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:2b:53:eb:af:14:aa:e2:83:d5:ee:2e:e3:21:83:d5:15:5b:d3:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
        Validity
            Not Before: Apr  9 05:22:16 2026 GMT
            Not After : Apr  8 05:27:16 2027 GMT
        Subject: CN=36E4124158F84C69FB031999EE7A24A7B2BE9A1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:ff:dc:93:06:24:28:3b:61:22:19:f8:b7:
                    7a:85:38:2c:ce:11:7f:b6:a2:a7:91:ae:48:b6:0e:
                    e1:c0:f6:00:f7:cd:fa:08:48:c9:7f:ac:d5:8e:3c:
                    ef:ce:33:1d:65:64:90:39:4d:48:a7:bc:5d:63:e2:
                    98:67:e0:ac:d8:a2:32:3b:41:f1:39:44:79:ef:4c:
                    13:ca:5b:19:09:0f:e9:bb:77:2a:b3:92:98:17:58:
                    13:db:e7:b5:7d:b5:fe:44:49:28:66:0b:b7:ce:fb:
                    4e:05:30:e7:e0:d2:ac:2d:df:0e:e4:b3:b0:bd:a5:
                    88:9d:cf:dc:98:c5:90:55:4b:c4:ab:ad:7d:7d:f2:
                    a3:29:99:dc:c8:e1:a9:59:c3:88:bb:5c:e8:ff:1f:
                    88:ed:ee:eb:f9:40:9c:e9:cf:4f:2f:4d:a6:59:59:
                    ed:52:2b:93:06:70:ba:8a:a2:17:f6:a5:fa:59:cf:
                    68:3f:e0:d8:86:06:24:86:19:a7:55:b5:83:82:32:
                    35:85:a6:2a:14:e6:3d:32:25:34:4c:8c:37:44:14:
                    91:2f:d5:b2:0e:46:d0:3b:19:99:0f:29:36:c0:12:
                    ba:dd:6a:58:6f:db:2d:7b:9b:72:65:ab:b0:7b:ba:
                    45:a1:36:d6:75:02:d0:61:a2:70:bc:e7:99:49:93:
                    22:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E4:12:41:58:F8:4C:69:FB:03:19:99:EE:7A:24:A7:B2:BE:9A:1F
            X509v3 Authority Key Identifier:
                keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233332e302f32342d3234203d3e2032393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.137.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:e3:a4:2b:ae:52:0a:8a:33:17:05:c8:9f:e4:d0:f7:f6:22:
         81:ed:7d:98:49:7c:6b:3a:04:4c:2b:7a:45:22:c0:f8:5f:39:
         7c:67:3e:cb:2c:32:5d:43:f0:d4:26:da:f6:47:50:eb:7c:26:
         49:27:f7:0f:31:b6:16:cd:b2:85:10:0c:3b:31:d7:f3:b2:4a:
         c3:49:b9:0f:a6:3c:bb:5d:70:b4:3f:35:39:e9:84:ff:02:31:
         48:d0:73:2a:06:52:98:51:ab:56:72:78:f4:6a:77:d0:54:94:
         8e:45:11:fa:ac:eb:63:09:06:7d:cc:dc:0b:b6:cf:1f:2d:05:
         91:db:f4:bc:4e:1a:94:29:6a:9f:e3:96:b4:63:fd:b6:83:98:
         c6:51:a0:a9:ab:8d:a8:e1:87:a2:56:1c:a7:11:04:de:ed:da:
         bf:22:77:3e:93:87:cf:33:6d:20:68:c4:cc:09:a8:93:b7:40:
         97:64:13:e3:ea:2f:1f:91:6f:4a:74:ea:53:a6:d8:9a:b5:69:
         fa:c7:f0:ad:20:3a:76:23:90:10:aa:e7:ef:f8:62:c0:eb:22:
         76:a7:11:6d:19:dd:6b:bd:fd:b2:0d:6c:0a:11:bb:f8:d8:3c:
         6f:3e:f0:42:6c:d3:1b:50:71:3a:42:a4:a2:8a:e2:8b:9a:64:
         8a:ca:c5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:51 2026 by rpki-client