Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a313030303a3a2f33372d3337203d3e20313437303230.roa
File:                     323430313a323036303a313030303a3a2f33372d3337203d3e20313437303230.roa (raw, json)
Hash identifier:          8OZ5uimSQhMcw5M/9HtEUketNAUaq1er5Yc08KxF23U=
Subject key identifier:   99:9F:E0:6E:29:AD:C8:91:D4:86:88:D7:83:9F:76:A2:D2:24:8E:8B
Certificate issuer:       /CN=A9150E4D0000/serialNumber=11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E
Certificate serial:       48841033AC613A5E5BE6C57726B702C3D965C0DB
Authority key identifier: 11:F9:8F:3F:8D:D4:F5:5C:C7:FF:B7:A4:BA:CC:65:6E:0D:19:3D:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a313030303a3a2f33372d3337203d3e20313437303230.roa
Signing time:             Wed 04 Jun 2025 05:28:05 +0000
ROA not before:           Wed 04 Jun 2025 05:23:05 +0000
ROA not after:            Wed 03 Jun 2026 05:28:05 +0000
asID:                     147020
IP address blocks:        2401:2060:1000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.crl
                          rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 18 Jun 2025 18:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:84:10:33:ac:61:3a:5e:5b:e6:c5:77:26:b7:02:c3:d9:65:c0:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E4D0000, serialNumber=11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E
        Validity
            Not Before: Jun  4 05:23:05 2025 GMT
            Not After : Jun  3 05:28:05 2026 GMT
        Subject: CN=999FE06E29ADC891D48688D7839F76A2D2248E8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:82:41:8d:62:c0:20:a1:e6:27:17:c8:23:4b:
                    19:0d:5a:ae:a6:f4:b5:3e:78:3f:b6:6d:3c:87:4f:
                    97:af:33:b6:16:dc:ab:e5:ab:d0:d6:a2:b2:df:e7:
                    6b:e7:4c:6a:17:1c:e0:ca:78:ad:d3:af:47:8d:91:
                    47:ca:85:35:a8:e9:b4:2f:60:f5:59:28:0e:ff:54:
                    cf:9c:ec:eb:72:a8:8a:24:dd:70:a4:d3:38:9d:02:
                    f6:ee:8f:f0:3b:66:8b:51:4c:97:2b:f0:41:9a:f9:
                    48:f3:d7:1b:7d:cc:a3:72:f5:3f:bd:b6:60:19:d2:
                    62:b7:b1:d9:16:66:d6:c4:fd:e6:96:23:6f:d2:55:
                    cb:ef:e4:13:00:7b:ac:ce:61:df:1b:b7:1e:67:ac:
                    dd:bc:be:25:e4:51:3e:12:25:0d:dc:e3:87:c4:24:
                    0c:50:f0:18:11:eb:1d:7c:69:92:83:c1:fd:26:73:
                    96:c0:43:b2:90:15:60:00:f1:5f:17:80:18:da:33:
                    db:e9:2b:16:2f:c7:f0:15:4b:dc:ec:ee:5d:65:ed:
                    9d:b4:b2:b9:87:27:36:cd:13:b0:44:83:61:23:db:
                    23:55:81:56:6e:58:25:44:b1:8d:42:b6:af:4a:e8:
                    b7:5b:33:75:af:0a:20:0a:37:8f:ea:9f:9a:d7:e4:
                    3a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9F:E0:6E:29:AD:C8:91:D4:86:88:D7:83:9F:76:A2:D2:24:8E:8B
            X509v3 Authority Key Identifier:
                keyid:11:F9:8F:3F:8D:D4:F5:5C:C7:FF:B7:A4:BA:CC:65:6E:0D:19:3D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a313030303a3a2f33372d3337203d3e20313437303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2060:1000::/37

    Signature Algorithm: sha256WithRSAEncryption
         93:62:ca:50:87:bc:00:70:55:2c:22:9e:ed:f2:41:94:f7:29:
         13:91:b8:82:8e:83:3a:6b:a5:2b:54:df:e7:c7:b5:91:4e:e9:
         4a:21:e9:46:78:46:dd:ca:ee:04:eb:c3:ee:03:11:e8:5f:5e:
         e7:14:ac:95:a7:f8:45:47:54:42:88:2e:d8:39:80:05:80:29:
         f3:d2:2a:da:1f:38:89:df:a0:03:2e:9a:b2:9c:74:79:95:82:
         19:00:91:f1:72:4e:95:20:63:b6:ce:95:c2:45:67:04:19:d7:
         a5:90:4c:91:6f:dd:b4:3b:2d:66:3a:83:5d:c6:c7:11:b4:66:
         94:ba:97:8d:2a:5f:b2:e3:bd:88:ae:12:1a:63:55:fa:0d:c7:
         30:c0:c5:c9:24:79:e0:3f:47:a8:4d:eb:99:7b:6c:27:2d:2f:
         ef:20:ed:af:c5:5f:fd:01:0b:59:07:c7:b8:35:72:fc:4a:9c:
         24:c8:83:14:4c:a3:eb:fb:16:46:91:18:8d:f0:43:51:06:b1:
         5d:45:93:be:fe:19:24:c0:da:a0:98:1e:4f:c5:00:06:35:ae:
         ca:ba:e3:d0:ab:74:47:e3:84:ad:eb:c3:eb:fd:6f:8b:49:ab:
         65:d1:b8:ee:b8:7d:e5:d1:09:86:aa:98:84:e2:c5:b0:6f:00:
         e1:bd:a4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:36:46 2025 by rpki-client