Route Origin Authorization

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A912C2530000/0/3136332e3132382e37322e302f32342d3234203d3e20323135353935.roa
File:                     3136332e3132382e37322e302f32342d3234203d3e20323135353935.roa (raw, json)
Hash identifier:          AzoVGDoVXc7PfAcyPOrIZIhy+uvDg8Wu5jeZx/BA/Xg=
Subject key identifier:   7F:5C:07:C4:11:DB:E2:4D:B9:15:E5:5B:D6:1E:F9:B5:D4:D0:49:A5
Certificate issuer:       /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial:       45D3EF4BADAD16A5667606F7F556569F9335750A
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A912C2530000/0/3136332e3132382e37322e302f32342d3234203d3e20323135353935.roa
Signing time:             Wed 16 Sep 2026 01:41:56 +0000
ROA not before:           Wed 16 Sep 2026 01:36:56 +0000
ROA not after:            Wed 15 Sep 2027 01:41:56 +0000
asID:                     215595
IP address blocks:        163.128.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
                          rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 02:47:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:d3:ef:4b:ad:ad:16:a5:66:76:06:f7:f5:56:56:9f:93:35:75:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
        Validity
            Not Before: Sep 16 01:36:56 2026 GMT
            Not After : Sep 15 01:41:56 2027 GMT
        Subject: CN=7F5C07C411DBE24DB915E55BD61EF9B5D4D049A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:56:c9:fc:42:ec:20:2d:5a:7b:1d:a2:e9:05:
                    a3:cd:3a:58:06:a4:47:eb:7c:9e:88:dc:d0:ca:77:
                    84:b2:d3:32:90:58:3d:9a:ec:3f:8b:43:25:88:41:
                    88:14:26:f6:c3:ef:c4:d9:0d:f0:59:31:11:86:27:
                    dd:0a:f4:2a:4e:b4:c0:27:68:f6:aa:67:1e:3b:be:
                    3b:e9:b3:bc:c5:29:ef:6d:b5:9d:3b:5f:0d:80:72:
                    ba:0e:ca:d7:ab:07:7f:31:87:39:d0:6a:23:f2:9f:
                    40:87:9d:73:d4:eb:2b:74:4e:d1:50:b1:04:c6:7b:
                    b0:48:2a:cd:9b:f6:0e:92:93:dc:e4:67:7f:4a:37:
                    83:01:c3:d6:0a:65:d2:c7:e7:90:fb:f3:14:32:57:
                    6a:2a:0d:53:cb:c4:61:57:0c:0c:26:a5:c8:d9:65:
                    b9:e6:19:fd:b0:67:31:41:4e:25:e4:bc:66:ba:cc:
                    4c:d4:60:79:3c:1d:30:c8:bb:b7:a9:33:5b:7b:64:
                    9e:03:4a:f3:dc:0e:49:17:94:81:ae:1f:82:4a:cc:
                    d6:3f:11:06:82:5f:c1:97:d5:7e:b8:84:ff:2a:ef:
                    46:84:3a:8b:f4:fb:bd:7b:38:77:03:82:37:5f:2b:
                    13:05:85:6a:ce:26:85:da:b1:cf:4a:c7:bf:75:08:
                    78:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5C:07:C4:11:DB:E2:4D:B9:15:E5:5B:D6:1E:F9:B5:D4:D0:49:A5
            X509v3 Authority Key Identifier:
                keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/3136332e3132382e37322e302f32342d3234203d3e20323135353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:59:31:65:60:7a:87:f0:11:9a:d8:e5:37:3d:a0:86:fa:bf:
         89:e3:12:79:fe:a5:a3:cd:32:ff:46:5b:71:00:60:80:1b:20:
         83:a5:03:75:a4:fb:d9:ad:14:e9:32:62:7f:cd:06:b2:fc:f6:
         32:43:72:b6:cb:b7:28:e9:ea:af:8d:07:dc:82:f7:4b:b2:ea:
         f5:aa:df:bd:5a:ca:a1:f9:ca:c4:9e:3b:e3:70:5f:11:16:1f:
         29:9e:94:f1:57:a3:57:af:4e:f3:4e:65:1b:83:19:35:3c:8e:
         c5:ad:a0:02:67:c7:dc:17:cd:f5:5d:81:9f:19:c4:f9:ef:95:
         96:52:95:0a:18:95:1c:79:c2:d7:74:95:9d:92:5a:d4:06:af:
         95:2b:6c:50:13:6f:60:08:3d:45:21:12:73:c1:6d:f8:ac:14:
         c8:8c:52:67:4d:48:85:98:eb:8d:32:d0:d7:61:19:61:f0:4f:
         3c:69:e9:09:ec:01:76:d5:ad:8b:63:05:b6:fd:0e:9e:ca:0f:
         b4:3d:78:7d:68:d4:ab:71:a8:3d:a1:6e:20:75:52:70:44:ee:
         7d:fb:94:e8:ce:d3:2c:b6:8a:7a:55:f2:c4:8b:24:ba:81:eb:
         95:ae:71:72:f0:ef:d4:cf:56:e1:52:ac:87:e6:05:c2:9d:2c:
         e6:3c:b9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:57:17 2026 by rpki-client