Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a313430303a3a2f33392d3339203d3e20313437303230.roa
File:                     323430313a323036303a313430303a3a2f33392d3339203d3e20313437303230.roa (raw, json)
Hash identifier:          RjYCBKxZFNxUfiGPhehp3rBcB1aAaC6e1z+F6aSbVVM=
Subject key identifier:   15:EA:45:6A:31:26:94:76:AD:C2:69:F0:36:B1:07:11:CC:2D:9C:1E
Certificate issuer:       /CN=A9150E4D0000/serialNumber=11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E
Certificate serial:       6EB376F4AAAD77EB7F8E7255507391A598BF64E4
Authority key identifier: 11:F9:8F:3F:8D:D4:F5:5C:C7:FF:B7:A4:BA:CC:65:6E:0D:19:3D:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a313430303a3a2f33392d3339203d3e20313437303230.roa
Signing time:             Wed 04 Jun 2025 05:28:11 +0000
ROA not before:           Wed 04 Jun 2025 05:23:11 +0000
ROA not after:            Wed 03 Jun 2026 05:28:11 +0000
asID:                     147020
IP address blocks:        2401:2060:1400::/39 maxlen: 39
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.crl
                          rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 07:14:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b3:76:f4:aa:ad:77:eb:7f:8e:72:55:50:73:91:a5:98:bf:64:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E4D0000, serialNumber=11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E
        Validity
            Not Before: Jun  4 05:23:11 2025 GMT
            Not After : Jun  3 05:28:11 2026 GMT
        Subject: CN=15EA456A31269476ADC269F036B10711CC2D9C1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:bc:11:c5:52:ea:aa:ff:8a:c2:20:8d:40:b4:
                    1a:30:92:ee:64:57:b2:8f:3f:22:dc:4c:2c:dd:74:
                    48:f9:13:e2:8d:6d:ab:b7:a4:ac:ea:b9:f5:56:bc:
                    1c:bc:31:dd:ab:81:5b:42:fb:37:22:8d:e2:a4:8d:
                    a0:76:6f:e3:e1:a1:95:20:2c:2b:3b:17:c6:ba:c9:
                    e0:4f:4e:5b:c9:9d:32:50:d4:ca:ff:d2:de:b5:55:
                    26:f1:59:fe:d1:25:8e:be:36:98:52:b0:16:d3:54:
                    db:f3:bd:f0:c3:8e:60:d6:0e:bf:d6:75:51:28:5a:
                    06:c7:f2:ba:4a:59:c3:c6:6f:1a:73:12:8f:15:a6:
                    e2:59:77:25:44:81:b6:71:d5:3e:04:25:b5:56:cc:
                    b6:fd:dc:1e:1f:24:52:33:11:8d:64:ce:44:44:3d:
                    e6:8f:8b:84:32:b1:89:5f:4d:22:22:12:fc:c4:35:
                    87:de:82:0e:e8:d5:33:0a:a9:97:32:4d:a5:df:dd:
                    b6:7e:cf:8f:30:48:fa:80:cd:87:38:95:95:31:bd:
                    7a:18:52:54:9b:83:e6:63:a6:a2:c3:ba:21:78:df:
                    a3:d8:6b:31:1a:c8:f5:f8:a9:ce:35:d6:d6:db:4a:
                    37:38:7d:64:0b:7b:45:72:78:c0:8f:ff:2b:2f:e6:
                    16:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:EA:45:6A:31:26:94:76:AD:C2:69:F0:36:B1:07:11:CC:2D:9C:1E
            X509v3 Authority Key Identifier:
                keyid:11:F9:8F:3F:8D:D4:F5:5C:C7:FF:B7:A4:BA:CC:65:6E:0D:19:3D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a313430303a3a2f33392d3339203d3e20313437303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2060:1400::/39

    Signature Algorithm: sha256WithRSAEncryption
         95:73:e6:b4:f1:d8:73:d2:cd:e4:fe:a5:8f:e5:98:36:0e:dd:
         92:ef:39:9e:94:7d:da:20:99:03:f1:cc:43:82:c7:6a:0d:35:
         74:5e:43:f8:9d:a8:90:68:9f:bb:6a:59:f3:69:9e:d0:15:82:
         6b:97:62:d8:fa:82:e8:5a:3f:d4:b3:88:44:83:b5:39:de:13:
         b3:8b:e4:b7:db:83:3e:ea:bb:76:36:37:38:f4:6f:b3:8d:be:
         c2:38:db:37:eb:ec:d8:cb:9c:e6:57:b3:61:12:d5:68:8a:3a:
         b9:95:a0:c1:67:f7:0f:09:59:43:e1:7b:cf:07:66:50:aa:cd:
         26:ae:b2:00:64:c7:72:d9:88:5f:b6:a9:3e:75:b2:01:58:5b:
         87:90:74:67:c6:7e:ca:c1:c3:3e:e2:64:11:1e:08:12:66:2a:
         e2:7f:aa:9b:43:2e:b1:d2:8e:fe:9c:20:1e:88:64:88:78:90:
         68:63:69:71:b6:d8:2a:b0:78:40:e3:7b:aa:97:ef:fc:d3:d1:
         c9:28:f4:24:83:67:de:ec:1a:8f:61:fe:97:f9:11:0d:a5:d5:
         8b:19:27:c2:c0:93:91:40:c1:b5:6f:71:9e:44:14:92:32:d7:
         b3:1b:5f:cb:66:8b:ad:a5:2f:03:46:fa:19:f1:48:26:0d:86:
         12:6d:a3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 15:09:55 2025 by rpki-client