Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a313535333a3a2f34382d3438203d3e20313437303230.roa
File:                     323430313a323036303a313535333a3a2f34382d3438203d3e20313437303230.roa (raw, json)
Hash identifier:          p56jKGDnZy0odzuqRLDt6KGoRHxrntrEb2DvSnF7d9U=
Subject key identifier:   6B:51:19:F1:F4:8C:F8:7C:28:09:D2:D6:83:94:E3:46:B5:D1:2A:56
Certificate issuer:       /CN=A9150E4D0000/serialNumber=11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E
Certificate serial:       1DEC50B4DC64A9B5BC612ADABFD9D60E61FF9243
Authority key identifier: 11:F9:8F:3F:8D:D4:F5:5C:C7:FF:B7:A4:BA:CC:65:6E:0D:19:3D:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a313535333a3a2f34382d3438203d3e20313437303230.roa
Signing time:             Wed 04 Jun 2025 05:28:16 +0000
ROA not before:           Wed 04 Jun 2025 05:23:16 +0000
ROA not after:            Wed 03 Jun 2026 05:28:16 +0000
asID:                     147020
IP address blocks:        2401:2060:1553::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.crl
                          rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 11:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ec:50:b4:dc:64:a9:b5:bc:61:2a:da:bf:d9:d6:0e:61:ff:92:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E4D0000, serialNumber=11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E
        Validity
            Not Before: Jun  4 05:23:16 2025 GMT
            Not After : Jun  3 05:28:16 2026 GMT
        Subject: CN=6B5119F1F48CF87C2809D2D68394E346B5D12A56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:2a:e0:9d:a7:5c:fe:e5:52:94:1f:b2:94:8f:
                    53:a1:07:7a:fe:97:ba:c2:1d:07:fd:e2:14:75:2d:
                    09:47:24:03:a1:88:76:7d:31:56:10:8f:60:5f:ce:
                    45:d9:f0:26:4d:25:78:51:4f:87:a2:b6:da:fa:f3:
                    74:d7:6c:39:7b:0e:8a:29:d2:26:b4:42:50:91:7d:
                    cf:18:0b:d2:e9:47:cf:21:10:ac:00:cc:80:02:4c:
                    33:91:78:bc:31:04:3e:3a:af:4a:d1:c0:fd:64:60:
                    f8:72:35:30:2e:21:67:9a:62:65:58:bf:30:48:19:
                    49:d9:f2:8a:65:00:58:ee:81:2f:e2:de:d3:db:97:
                    23:4f:74:77:ab:86:84:6d:2a:f1:0c:3a:50:b3:28:
                    8b:1f:c6:4b:99:f5:3d:89:43:75:76:5c:2c:0c:4b:
                    b7:99:23:0b:d6:6b:41:58:15:98:53:0b:4f:8e:e7:
                    37:f6:60:62:8e:aa:79:13:2e:fe:fd:92:48:de:88:
                    95:89:55:eb:fb:4d:93:5f:5e:33:d0:39:54:74:24:
                    0e:31:3b:9d:bd:04:65:cb:40:4b:d3:3c:c4:6b:c9:
                    df:71:fa:bc:7d:da:a6:a5:e4:d1:9d:8f:49:01:59:
                    4f:b3:b3:f3:63:c8:cd:8e:c8:c6:76:95:f0:2b:74:
                    af:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:51:19:F1:F4:8C:F8:7C:28:09:D2:D6:83:94:E3:46:B5:D1:2A:56
            X509v3 Authority Key Identifier:
                keyid:11:F9:8F:3F:8D:D4:F5:5C:C7:FF:B7:A4:BA:CC:65:6E:0D:19:3D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a313535333a3a2f34382d3438203d3e20313437303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2060:1553::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:d6:8a:2f:7b:76:c1:79:11:ec:58:21:91:75:2b:ad:14:be:
         4d:7b:c6:a2:a5:a3:55:41:88:58:56:53:92:43:18:a6:3c:cf:
         59:97:f6:c3:77:ba:e6:d3:1b:9b:f0:05:d8:f0:87:92:5a:13:
         12:14:51:fe:c5:8f:3f:1d:5d:06:9e:75:b7:cc:26:a0:04:66:
         4b:27:64:33:1a:57:63:24:f2:74:30:c1:21:ce:75:cc:0b:48:
         60:97:ed:a6:50:48:92:5f:00:ad:2a:1f:d1:66:99:f8:9b:99:
         17:ef:ae:6f:6b:6f:5f:2b:7e:07:6b:39:ad:5f:73:ab:e2:ba:
         74:44:5e:a4:ee:30:56:f4:6a:11:b4:c3:2c:72:f2:21:ba:87:
         9d:2c:dc:e5:c4:92:58:12:01:ca:2f:e4:e3:b6:16:e5:38:57:
         30:2a:91:71:ce:9f:3e:a9:c9:92:1f:fc:90:8a:2b:8e:54:51:
         2f:a7:a2:7c:ea:07:2d:ca:7b:d7:bc:0f:52:4a:1a:97:72:59:
         a1:db:f9:0a:8e:c4:d6:fa:3e:b6:06:0a:c9:52:2e:8c:1c:e7:
         6b:5c:89:7b:62:45:04:a7:ab:50:9f:ac:bd:a2:59:be:3d:16:
         92:51:f7:bd:7f:b0:2c:6f:da:7d:69:71:ef:9d:a5:e6:6a:0f:
         cd:09:5b:d9
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgIUHexQtNxkqbW8YSrav9nWDmH/kkMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNTBFNEQwMDAwMTEwLwYDVQQFEygxMUY5OEYzRjhE
RDRGNTVDQzdGRkI3QTRCQUNDNjU2RTBEMTkzRDFFMB4XDTI1MDYwNDA1MjMxNloX
DTI2MDYwMzA1MjgxNlowMzExMC8GA1UEAxMoNkI1MTE5RjFGNDhDRjg3QzI4MDlE
MkQ2ODM5NEUzNDZCNUQxMkE1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKcq4J2nXP7lUpQfspSPU6EHev6XusIdB/3iFHUtCUckA6GIdn0xVhCPYF/O
RdnwJk0leFFPh6K22vrzdNdsOXsOiinSJrRCUJF9zxgL0ulHzyEQrADMgAJMM5F4
vDEEPjqvStHA/WRg+HI1MC4hZ5piZVi/MEgZSdnyimUAWO6BL+Le09uXI090d6uG
hG0q8Qw6ULMoix/GS5n1PYlDdXZcLAxLt5kjC9ZrQVgVmFMLT47nN/ZgYo6qeRMu
/v2SSN6IlYlV6/tNk19eM9A5VHQkDjE7nb0EZctAS9M8xGvJ33H6vH3apqXk0Z2P
SQFZT7Oz82PIzY7IxnaV8Ct0r7MCAwEAAaOCAiEwggIdMB0GA1UdDgQWBBRrURnx
9Iz4fCgJ0taDlONGtdEqVjAfBgNVHSMEGDAWgBQR+Y8/jdT1XMf/t6S6zGVuDRk9
HjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE1MEU0RDAwMDAvMC8xMUY5OEYz
RjhERDRGNTVDQzdGRkI3QTRCQUNDNjU2RTBEMTkzRDFFLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9FZm1QUDQzVTlW
ekhfN2VrdXN4bGJnMFpQUjQuY2VyMIGYBggrBgEFBQcBCwSBizCBiDCBhQYIKwYB
BQUHMAuGeXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkx
NTBFNEQwMDAwLzAvMzIzNDMwMzEzYTMyMzAzNjMwM2EzMTM1MzUzMzNhM2EyZjM0
MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMwMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQBIGAVUzAN
BgkqhkiG9w0BAQsFAAOCAQEAAtaKL3t2wXkR7FghkXUrrRS+TXvGoqWjVUGIWFZT
kkMYpjzPWZf2w3e65tMbm/AF2PCHkloTEhRR/sWPPx1dBp51t8wmoARmSydkMxpX
YyTydDDBIc51zAtIYJftplBIkl8ArSof0WaZ+JuZF++ub2tvXyt+B2s5rV9zq+K6
dERepO4wVvRqEbTDLHLyIbqHnSzc5cSSWBIByi/k47YW5ThXMCqRcc6fPqnJkh/8
kIorjlRRL6eifOoHLcp717wPUkoal3JZodv5Co7E1vo+tgYKyVIujBzna1yJe2JF
BKerUJ+svaJZvj0WklH3vX+wLG/afWlx752l5moPzQlb2Q==
-----END CERTIFICATE-----
Generated at Wed Jun 18 15:28:08 2025 by rpki-client