Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9148BF70000/0/3130332e3232332e3138342e302f32332d3234203d3e20313532313739.roa
File:                     3130332e3232332e3138342e302f32332d3234203d3e20313532313739.roa (raw, json)
Hash identifier:          m9U371o4+P2xsH5tkhL1xNSiQhQvUo8aoDLLj/aMIz0=
Subject key identifier:   5A:30:08:21:99:8A:A6:E7:43:29:7B:60:E1:4F:D5:15:A2:E7:EF:7C
Certificate issuer:       /CN=A9148BF70000/serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
Certificate serial:       488CA6DE366456AAFB8DDA55AA08F7913F573D7E
Authority key identifier: 33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/3130332e3232332e3138342e302f32332d3234203d3e20313532313739.roa
Signing time:             Fri 01 Aug 2025 07:38:13 +0000
ROA not before:           Fri 01 Aug 2025 07:33:13 +0000
ROA not after:            Fri 31 Jul 2026 07:38:13 +0000
asID:                     152179
IP address blocks:        103.223.184.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl
                          rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 12:12:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:8c:a6:de:36:64:56:aa:fb:8d:da:55:aa:08:f7:91:3f:57:3d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148BF70000, serialNumber=339FFA93357FAF26142829FABF225AEAE41737F0
        Validity
            Not Before: Aug  1 07:33:13 2025 GMT
            Not After : Jul 31 07:38:13 2026 GMT
        Subject: CN=5A300821998AA6E743297B60E14FD515A2E7EF7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4c:ec:1d:36:92:19:79:96:9a:2c:d0:50:f4:
                    ef:ce:95:8b:33:81:c0:48:9b:f3:24:95:fe:7a:b8:
                    e7:41:9b:07:b0:a2:58:61:47:55:f9:f1:98:84:00:
                    bd:64:4b:ba:9b:a9:43:25:ee:c5:d5:58:cb:2d:77:
                    47:9c:d5:75:d3:22:8e:45:e5:9a:fa:34:53:64:82:
                    67:25:c7:5f:97:22:a3:9e:47:70:f6:e2:4f:fd:f1:
                    d7:d9:3a:66:35:5f:61:6a:79:a5:72:c4:16:72:80:
                    91:e3:a1:88:fd:82:94:17:68:14:3a:ac:73:24:00:
                    48:6f:f3:61:16:1a:63:d8:d6:6f:94:e7:2b:8e:8b:
                    27:b8:00:58:d0:f3:68:84:ae:84:f4:53:bb:43:dd:
                    b5:27:5a:a4:4f:d8:ca:2d:b2:74:5e:23:24:c7:66:
                    b1:09:a3:eb:76:5a:e0:8a:90:5b:58:55:94:37:cc:
                    58:a9:b0:82:64:60:bb:6a:56:69:ba:04:51:50:01:
                    5f:5c:6a:c0:56:0e:d0:14:7f:5e:e4:24:ea:15:da:
                    c8:9e:e4:e9:ef:1d:51:c0:83:58:f7:6d:27:e2:9d:
                    4a:0c:52:4a:ce:ee:73:8f:88:58:b2:3a:d6:5f:07:
                    f4:6b:5c:ad:4a:15:ab:2a:c3:b0:af:84:2a:0c:eb:
                    a3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:30:08:21:99:8A:A6:E7:43:29:7B:60:E1:4F:D5:15:A2:E7:EF:7C
            X509v3 Authority Key Identifier:
                keyid:33:9F:FA:93:35:7F:AF:26:14:28:29:FA:BF:22:5A:EA:E4:17:37:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/339FFA93357FAF26142829FABF225AEAE41737F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5_6kzV_ryYUKCn6vyJa6uQXN_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9148BF70000/0/3130332e3232332e3138342e302f32332d3234203d3e20313532313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.223.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e5:46:9f:5a:11:2d:a3:4b:ed:58:37:20:94:83:e9:20:b3:3d:
         e7:bf:0e:1b:24:b5:ac:11:58:53:b9:a7:7e:e7:d7:17:25:06:
         66:f6:01:68:5a:89:13:56:f4:af:58:09:41:99:77:b8:52:cb:
         9c:00:05:0e:8d:7c:13:66:e7:d0:c8:f3:d9:0c:32:60:c7:7e:
         53:3c:58:53:81:a0:89:7e:76:31:ea:a1:2c:06:9b:95:0c:d6:
         cb:0a:a4:f6:a9:64:6b:f7:3e:1e:85:3d:db:5c:b5:a7:83:a1:
         f5:8e:a3:5d:a1:88:de:a9:47:89:3c:0e:3c:a1:58:28:c3:da:
         ef:3b:70:8c:a1:22:d6:b6:16:c0:90:f6:4f:a2:f1:f0:c7:c6:
         d5:13:87:12:41:e5:a7:9e:03:91:8d:56:6a:20:30:9c:60:be:
         06:75:a0:81:8f:9a:38:18:db:48:db:49:58:a1:ec:fa:ff:9f:
         77:22:f8:54:5f:2e:78:06:e1:de:f3:39:35:53:cf:f4:bd:95:
         93:4c:35:2a:d5:d1:20:1d:bd:ca:04:ee:23:dc:3a:b9:fa:c9:
         38:24:5a:ed:48:b6:6e:e5:ad:81:85:ee:35:75:d6:3c:0d:55:
         f1:7f:6f:d5:87:6a:43:df:62:1b:20:c3:8c:71:48:b4:27:38:
         bd:8e:aa:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:51:05 2025 by rpki-client