Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233342e302f32342d3234203d3e2032393134.roa
File:                     31342e3133372e3233342e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier:          gJr0pjVQyvQyp5UCE1BFzLOqqpm4UHNFKZwkbsNqY6Y=
Subject key identifier:   B7:C9:B8:3B:8D:45:56:67:56:87:48:CC:6D:90:7D:88:45:45:AC:9D
Certificate issuer:       /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial:       056C74EB0A3F2A1EAB22CE5B6AB9251D61AF69EB
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233342e302f32342d3234203d3e2032393134.roa
Signing time:             Thu 09 Apr 2026 05:27:16 +0000
ROA not before:           Thu 09 Apr 2026 05:22:16 +0000
ROA not after:            Thu 08 Apr 2027 05:27:16 +0000
asID:                     2914
IP address blocks:        14.137.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
                          rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 Apr 2026 15:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:6c:74:eb:0a:3f:2a:1e:ab:22:ce:5b:6a:b9:25:1d:61:af:69:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
        Validity
            Not Before: Apr  9 05:22:16 2026 GMT
            Not After : Apr  8 05:27:16 2027 GMT
        Subject: CN=B7C9B83B8D455667568748CC6D907D884545AC9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:67:e4:3a:3a:a4:78:88:7d:43:8f:ab:22:29:
                    2b:1a:52:d1:be:c8:c8:7f:1d:c2:2c:0f:06:eb:08:
                    e2:a0:33:46:41:27:d2:1c:8e:fe:9e:97:0a:12:e3:
                    3a:e8:a3:c3:3d:ef:f0:1e:df:5c:12:4f:d3:76:18:
                    ba:93:7a:93:b4:b2:a9:6f:0c:7d:4f:49:a7:f0:46:
                    93:9d:b2:c4:2d:41:e3:1f:f7:0a:10:da:c9:5c:40:
                    1f:56:1c:24:4e:81:23:6f:2b:84:8b:56:11:9c:21:
                    87:48:89:74:04:a7:7f:a5:99:c5:20:67:95:4e:b2:
                    a4:6a:a9:c0:a8:79:b9:76:0d:27:14:74:dc:d0:75:
                    e8:3c:06:a5:08:2a:c0:9a:c1:76:d1:3f:f8:f7:87:
                    55:f8:e3:03:af:27:d3:41:26:70:a8:e1:38:4b:3b:
                    27:b6:35:d7:88:b7:70:1b:da:e7:11:f2:e4:f2:31:
                    ae:fc:4e:06:b5:3f:12:5e:00:3e:64:de:54:79:54:
                    05:d7:33:46:ea:2f:93:80:8e:b9:0c:84:bb:a7:c9:
                    2a:2e:d0:2d:3d:52:b0:9e:ec:0a:28:19:80:0e:96:
                    30:11:a5:bf:f0:07:27:1d:ba:10:e8:30:da:f0:7e:
                    47:3c:de:8b:b2:5d:c6:a7:3f:9d:78:09:74:62:54:
                    80:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C9:B8:3B:8D:45:56:67:56:87:48:CC:6D:90:7D:88:45:45:AC:9D
            X509v3 Authority Key Identifier:
                keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3233342e302f32342d3234203d3e2032393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.137.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:1a:c4:15:82:94:80:11:27:aa:da:59:12:1b:ca:4d:99:89:
         fe:1c:ea:07:33:7b:eb:57:ef:66:c8:97:52:b3:b0:d6:c0:65:
         0e:8f:8a:17:fb:61:06:17:a1:55:8e:a0:c8:96:9e:64:30:99:
         89:06:b2:2f:8b:48:4e:de:40:30:6f:2e:88:57:cb:2b:74:e8:
         0b:ba:02:2a:44:af:04:9d:68:ce:3e:ed:4a:49:89:a7:d9:4f:
         49:ea:33:22:bc:3a:6c:65:46:30:0e:b9:ef:25:1d:13:5c:e4:
         98:52:77:17:ba:8f:44:f4:8b:ac:e0:d1:83:87:a2:b1:8b:d5:
         02:6a:bb:d6:91:c5:06:65:ff:ce:5c:2c:97:79:82:fe:fd:2a:
         67:43:c2:09:cd:0f:6f:d1:a1:82:de:72:e8:d3:d5:9c:a5:58:
         c3:20:c6:16:dd:41:15:e4:1c:0c:39:bd:85:76:11:8c:d7:46:
         0e:9a:b5:a8:3a:05:a0:6b:03:f7:ed:53:40:0f:c9:24:dd:e2:
         59:fe:99:18:8a:6e:f9:7e:75:6e:9f:c6:76:e0:64:47:a1:0d:
         81:5b:b8:c5:12:6f:74:47:bd:02:5b:bb:c9:3e:2f:71:7f:6c:
         e6:d3:49:9d:d0:49:36:ab:1b:e7:c3:c3:c7:8c:f3:95:34:f9:
         e1:90:89:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:02:04 2026 by rpki-client