Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235312e302f32342d3234203d3e20323132323539.roa
File:                     31342e3133372e3235312e302f32342d3234203d3e20323132323539.roa (raw, json)
Hash identifier:          CxegjX7Xj2f6hMreza0ap+cuQuB5I7S4wlmloleMgNs=
Subject key identifier:   CB:D0:E8:FE:F7:C2:29:A5:95:9B:B1:C9:9E:A3:50:DF:E1:63:98:7F
Certificate issuer:       /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial:       01E1AFB2D0A1CD061BFD31121F5CD8D4A9FAA0EC
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235312e302f32342d3234203d3e20323132323539.roa
Signing time:             Thu 19 Feb 2026 11:05:04 +0000
ROA not before:           Thu 19 Feb 2026 11:00:04 +0000
ROA not after:            Thu 18 Feb 2027 11:05:04 +0000
asID:                     212259
IP address blocks:        14.137.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
                          rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Mar 2026 14:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e1:af:b2:d0:a1:cd:06:1b:fd:31:12:1f:5c:d8:d4:a9:fa:a0:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
        Validity
            Not Before: Feb 19 11:00:04 2026 GMT
            Not After : Feb 18 11:05:04 2027 GMT
        Subject: CN=CBD0E8FEF7C229A5959BB1C99EA350DFE163987F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f3:56:b5:46:37:47:ed:e9:19:cf:cc:30:ab:
                    9a:46:e9:02:7d:df:9d:59:0a:be:ba:5c:27:98:44:
                    aa:ad:84:59:05:3e:85:ec:7d:28:61:88:22:62:98:
                    8b:a5:09:af:3c:2f:d3:bc:5a:53:cf:2c:38:8e:d4:
                    73:e2:c4:53:61:91:1f:db:a5:05:4d:06:1a:c0:f6:
                    20:a9:a8:fa:63:5a:8c:43:0d:4d:9d:6f:a0:2a:de:
                    bd:a1:af:05:a9:10:6d:14:97:56:5e:a0:46:29:26:
                    96:2b:6d:d7:a9:2e:91:96:56:60:fa:22:d6:34:e9:
                    49:27:0b:61:e1:5b:43:11:ab:11:10:f2:71:fd:3d:
                    1f:c7:79:76:ba:25:7e:83:de:5b:5d:93:d0:b5:7d:
                    d1:29:5d:1d:67:b2:20:e8:95:87:28:e4:af:e1:8d:
                    ce:d6:ac:8f:7c:6e:a2:7a:0b:35:4e:c0:20:39:69:
                    9c:03:bc:28:ed:fb:88:f9:83:ce:67:03:0f:e4:0e:
                    9b:bd:47:0c:2f:a4:07:fb:fa:bf:d4:eb:35:4f:c1:
                    06:47:25:7e:c9:26:8e:36:db:b6:85:bd:89:b5:d3:
                    a6:50:fe:c0:5a:46:b6:e2:33:75:63:02:83:57:13:
                    38:0f:f9:88:8d:71:dd:ec:3a:0c:61:42:f6:73:fe:
                    56:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D0:E8:FE:F7:C2:29:A5:95:9B:B1:C9:9E:A3:50:DF:E1:63:98:7F
            X509v3 Authority Key Identifier:
                keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3235312e302f32342d3234203d3e20323132323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.137.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:f1:d3:8d:b7:a3:33:ca:c5:89:b3:c9:80:51:73:f2:0e:84:
         aa:79:c3:d8:ae:3f:4a:83:b9:75:20:a6:ea:b7:52:2e:71:38:
         cc:f1:d5:e1:d5:be:88:e6:b3:fe:e9:a5:ad:e1:91:a8:3d:cc:
         be:b8:ba:57:0f:dc:b4:fb:a7:6a:11:01:a0:03:1d:33:ee:65:
         bc:74:3a:69:4e:8e:88:c7:d2:8c:df:98:b2:9e:07:fd:f7:d3:
         47:d9:75:fe:7c:4a:53:d1:21:f9:2f:14:0d:1b:61:15:85:3d:
         b9:38:02:1a:5e:27:84:43:c2:23:eb:b0:3d:5f:14:38:0a:b0:
         6a:04:fe:bb:c9:72:34:fb:96:58:58:fa:1c:83:f9:91:d6:96:
         ba:1a:83:9b:13:e8:63:4e:81:16:44:8e:63:65:da:6a:9e:3d:
         e1:8a:5e:38:21:77:70:97:d2:09:07:4d:cc:3a:ad:74:97:a2:
         62:23:bd:6c:3e:69:8d:d1:ff:c7:17:71:f9:1a:ec:51:ce:7d:
         8f:ec:d1:e8:a8:9c:8c:e1:fa:8b:91:17:48:22:9d:74:b5:4e:
         88:43:ac:25:ba:8f:fe:c2:b9:81:af:c9:4d:4f:8f:0c:0c:ab:
         e1:6b:95:b9:a2:dd:55:b5:66:c3:70:d6:26:08:37:3b:f5:4d:
         50:a1:a5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:31:26 2026 by rpki-client