Route Origin Authorization

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235302e302f32342d3234203d3e20383334.roa
File:                     31342e3133372e3235302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          wmeKzaOs7l8QxfkegFUZLtXfw/Nb7fnu7mpvRa+Bcfk=
Subject key identifier:   3D:43:0F:6F:AC:EF:5B:72:5B:B1:02:00:F2:08:CE:6A:A1:72:1D:99
Certificate issuer:       /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial:       311C5B9048EE3F0E2043FC6FB165568F37C9814B
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235302e302f32342d3234203d3e20383334.roa
Signing time:             Fri 18 Sep 2026 00:07:44 +0000
ROA not before:           Fri 18 Sep 2026 00:02:44 +0000
ROA not after:            Fri 17 Sep 2027 00:07:44 +0000
asID:                     834
IP address blocks:        14.137.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
                          rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 07:50:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:1c:5b:90:48:ee:3f:0e:20:43:fc:6f:b1:65:56:8f:37:c9:81:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
        Validity
            Not Before: Sep 18 00:02:44 2026 GMT
            Not After : Sep 17 00:07:44 2027 GMT
        Subject: CN=3D430F6FACEF5B725BB10200F208CE6AA1721D99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e9:17:fc:03:e8:a9:79:d3:fb:7b:e5:f4:02:
                    75:85:3d:ab:21:ad:86:fa:8f:83:c4:97:b1:95:e3:
                    ab:b2:31:ef:40:77:34:37:32:9a:56:81:f2:78:f8:
                    9f:22:1f:7b:25:bc:0b:c5:b2:47:1b:bb:29:ab:e8:
                    d0:68:31:a4:63:5e:4b:eb:93:ac:0f:71:6c:c0:57:
                    eb:6b:e3:a0:49:6e:8c:73:bd:97:bb:04:6e:ab:21:
                    f5:fe:9b:a2:c4:e6:0f:c9:d0:e5:a2:6f:cd:a7:f3:
                    e7:0d:65:46:2c:2c:65:ff:0e:c6:7d:53:68:e8:e7:
                    dc:67:48:51:b1:98:a4:8d:37:43:00:2d:be:76:4d:
                    29:df:32:54:b2:0b:e3:03:95:b8:a9:f9:02:28:30:
                    34:6f:42:a5:f6:f9:2f:e5:46:f4:2c:5e:ab:7f:b6:
                    4d:79:98:f0:6b:45:48:e8:75:35:cd:14:49:13:4c:
                    83:df:a9:a5:71:ff:a0:cf:17:a0:6f:62:5c:17:bf:
                    2d:07:33:4b:52:f5:4a:51:d5:8e:04:42:dd:97:65:
                    37:57:e9:bd:c4:0e:44:f6:ec:ba:2b:e1:2b:42:97:
                    8b:29:d3:67:5c:6f:87:dd:a9:3a:3e:ce:78:ae:1c:
                    c4:47:a2:69:84:30:6f:0a:33:a4:33:de:74:3e:a9:
                    d5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:43:0F:6F:AC:EF:5B:72:5B:B1:02:00:F2:08:CE:6A:A1:72:1D:99
            X509v3 Authority Key Identifier:
                keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.137.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:67:69:55:8f:5c:6e:21:48:d0:89:58:a5:ed:1b:b8:f2:21:
         fd:6c:f6:0b:04:49:b9:97:1b:6c:8d:4a:06:08:09:29:d1:ce:
         d6:f2:65:e7:8d:d5:18:b5:67:54:a3:0d:ba:c7:eb:49:f5:e6:
         7d:fb:78:8d:c9:10:66:a7:5c:41:0b:2b:fa:7f:bb:b2:ee:12:
         02:c4:4d:22:a1:f3:d2:9c:a1:57:be:7f:01:02:52:73:d4:55:
         e2:66:7c:91:5a:b4:45:97:b9:e3:d3:09:b8:47:5a:7b:b3:10:
         13:61:88:ac:8a:c8:b0:ec:93:c1:d5:5e:cd:2c:e9:50:90:14:
         24:1a:6b:fa:3d:56:a7:06:23:f2:6a:a4:f0:67:c3:a7:88:81:
         e4:70:a6:d9:1b:bd:36:71:98:32:08:a7:54:43:e7:91:21:28:
         cd:76:5f:6c:72:db:0e:e0:0e:c1:59:58:d7:dc:df:9f:c8:35:
         cb:7b:95:4b:fe:f6:b9:25:7c:a9:1b:7b:29:aa:8f:c2:56:45:
         b2:e7:75:10:35:b2:03:80:c7:25:bd:e1:4b:23:15:87:2a:63:
         b5:a6:e6:cc:c7:06:44:b1:43:3a:93:cf:77:a6:3e:02:b5:46:
         6c:b1:a4:1a:de:95:75:e8:c6:81:99:b8:49:84:1f:82:44:68:
         57:02:8b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:50:23 2026 by rpki-client