Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235302e302f32342d3234203d3e203432393630.roa
File:                     31342e3133372e3235302e302f32342d3234203d3e203432393630.roa (raw, json)
Hash identifier:          FUU4WZKNT9Kz9jxR82UG2Jn5XTPAS6QB8n5eDpmGyj4=
Subject key identifier:   C9:6B:07:4F:10:41:93:CD:C5:73:46:EC:12:ED:B0:5D:1A:D3:C9:AC
Certificate issuer:       /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial:       143C01DE023B795E966913A0EE90202AD72B0D5F
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235302e302f32342d3234203d3e203432393630.roa
Signing time:             Sat 18 Apr 2026 11:42:58 +0000
ROA not before:           Sat 18 Apr 2026 11:37:58 +0000
ROA not after:            Sat 17 Apr 2027 11:42:58 +0000
asID:                     42960
IP address blocks:        14.137.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
                          rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 Apr 2026 07:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:3c:01:de:02:3b:79:5e:96:69:13:a0:ee:90:20:2a:d7:2b:0d:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
        Validity
            Not Before: Apr 18 11:37:58 2026 GMT
            Not After : Apr 17 11:42:58 2027 GMT
        Subject: CN=C96B074F104193CDC57346EC12EDB05D1AD3C9AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:dc:a5:4b:d9:95:72:09:c8:a0:dd:68:9f:f2:
                    e0:0c:ed:b1:af:e4:08:26:74:54:98:7d:f2:b4:1e:
                    97:fd:c4:b0:08:8d:ad:78:4b:0d:1d:99:22:d5:35:
                    2d:46:f4:88:d2:3f:e3:b6:4a:6f:2a:81:d4:81:5c:
                    16:60:2c:c8:80:71:9e:f7:b1:a6:41:df:a7:33:6d:
                    b8:81:bf:61:76:94:42:1b:25:77:c2:97:d9:fe:4e:
                    f1:de:3e:cc:76:f0:83:7d:15:71:db:f0:f2:70:98:
                    98:d9:ac:6b:50:65:38:6d:16:8d:ac:3c:56:f9:01:
                    90:60:a8:d5:7a:30:4d:87:06:e2:7a:db:ad:27:82:
                    36:2f:d2:8f:80:b4:5c:f3:21:fc:80:40:a1:3d:7a:
                    3a:4b:96:82:94:b0:d3:0b:72:54:7b:30:ad:84:d0:
                    95:31:b7:74:da:af:35:17:24:b6:ed:1e:b6:78:33:
                    ec:9f:6c:74:90:ab:17:2c:3f:c1:f0:1e:c2:ff:4f:
                    bd:6c:d4:32:c1:dd:56:a6:d0:53:00:39:55:c8:2f:
                    b6:16:48:e8:8f:39:ff:e8:61:37:a5:69:4b:98:ec:
                    b7:50:61:2b:22:70:81:09:0a:e0:47:27:4b:97:5c:
                    6f:b5:d0:3d:e8:26:20:96:bb:f7:f1:4a:1f:0a:14:
                    ef:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6B:07:4F:10:41:93:CD:C5:73:46:EC:12:ED:B0:5D:1A:D3:C9:AC
            X509v3 Authority Key Identifier:
                keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235302e302f32342d3234203d3e203432393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.137.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:9d:27:81:b2:b7:23:44:fd:e5:31:d5:a0:ef:c8:de:5c:ea:
         28:f2:b8:dc:54:e2:59:aa:be:5b:dc:30:f3:cd:da:3c:71:6b:
         8f:fc:52:06:4e:1c:45:dd:60:9c:28:bb:06:07:e6:83:59:7b:
         ae:93:c5:fe:87:bf:d6:72:51:80:f2:3f:ce:31:b4:51:3d:54:
         94:74:1a:52:b9:bb:83:b3:58:42:50:ad:c6:a6:70:d2:3f:6a:
         52:0f:5e:8c:93:5f:99:7b:1c:63:34:a6:bf:f9:83:36:f6:e1:
         fe:9a:11:d5:2a:e7:43:cd:cc:f7:6d:99:b8:dc:c1:74:4d:45:
         ad:ef:41:ca:e4:2b:dd:2e:4a:e2:4c:79:0a:0f:b9:25:40:46:
         eb:32:66:e7:8d:9c:80:cd:99:04:7c:6f:f2:04:5e:e5:c2:79:
         02:98:38:d9:e5:8f:a4:73:60:3e:d0:5d:12:bb:dd:c3:42:70:
         d3:8d:11:ba:33:8b:f2:c8:5f:23:14:9a:6d:20:41:be:63:16:
         76:1d:fd:ea:7e:f0:ef:98:46:7c:bb:4d:05:36:68:a2:e3:61:
         ee:50:40:f1:4a:f2:e4:21:19:79:d0:19:4b:0e:94:05:d2:94:
         cc:3b:07:d6:95:8e:26:a3:3b:b0:55:10:97:e3:18:47:dd:8e:
         1a:00:c7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:10:10 2026 by rpki-client