Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a313830303a3a2f33372d3337203d3e20313437303230.roa
File:                     323430313a323036303a313830303a3a2f33372d3337203d3e20313437303230.roa (raw, json)
Hash identifier:          dI9YZ5HtehBR+T9kErZjaVCUzl0Fzs/q66xnkWL0ZBU=
Subject key identifier:   3F:08:8D:8B:5A:A3:32:7F:44:16:D7:46:C3:05:26:F3:F1:A8:24:DB
Certificate issuer:       /CN=A9150E4D0000/serialNumber=11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E
Certificate serial:       423B8BDA88B175BEFFA5FA7F1CDE541286068A8C
Authority key identifier: 11:F9:8F:3F:8D:D4:F5:5C:C7:FF:B7:A4:BA:CC:65:6E:0D:19:3D:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a313830303a3a2f33372d3337203d3e20313437303230.roa
Signing time:             Wed 04 Jun 2025 05:28:20 +0000
ROA not before:           Wed 04 Jun 2025 05:23:20 +0000
ROA not after:            Wed 03 Jun 2026 05:28:20 +0000
asID:                     147020
IP address blocks:        2401:2060:1800::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.crl
                          rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 11:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:3b:8b:da:88:b1:75:be:ff:a5:fa:7f:1c:de:54:12:86:06:8a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E4D0000, serialNumber=11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E
        Validity
            Not Before: Jun  4 05:23:20 2025 GMT
            Not After : Jun  3 05:28:20 2026 GMT
        Subject: CN=3F088D8B5AA3327F4416D746C30526F3F1A824DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a3:47:99:7f:c4:98:39:0e:e1:47:10:9f:23:
                    e4:51:f7:c3:b5:e4:8e:8e:1a:f3:14:77:fd:d6:2f:
                    7c:83:be:bb:be:2d:80:68:f2:17:c2:a2:7c:c3:ea:
                    36:75:81:b9:fd:44:b4:0c:d6:00:b2:09:c4:21:d1:
                    f9:f5:bd:92:8d:11:09:1a:f3:45:1f:80:8f:5f:5b:
                    f3:2e:3d:f8:fd:90:ad:4a:4c:cc:7e:4f:2a:54:4c:
                    b8:f4:83:d5:77:75:06:55:4d:48:fe:bc:37:a6:67:
                    65:f5:d4:35:ba:ef:bd:a4:5c:64:41:eb:43:7e:36:
                    cb:8d:ed:e9:36:80:c4:91:d1:b2:cb:ab:86:dc:5e:
                    f4:69:4a:89:ff:6b:e2:04:44:32:b1:d1:46:e0:ec:
                    51:7c:53:47:43:55:de:96:5f:a1:c6:0d:8b:88:07:
                    c5:ab:91:dc:3f:b6:65:42:ab:a4:57:23:96:0f:99:
                    55:fb:04:92:31:5a:af:07:2f:c8:84:8f:3f:27:cf:
                    41:e2:4b:ef:53:0b:94:7e:b9:53:ca:02:f3:3f:46:
                    39:16:84:ed:4a:d8:ba:66:2e:a6:33:64:b5:3b:a1:
                    3b:67:b1:dc:68:58:b3:54:f0:f0:89:99:63:52:99:
                    f0:e0:5f:5e:63:4b:0c:ab:ba:c8:23:77:0b:ee:b7:
                    56:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:08:8D:8B:5A:A3:32:7F:44:16:D7:46:C3:05:26:F3:F1:A8:24:DB
            X509v3 Authority Key Identifier:
                keyid:11:F9:8F:3F:8D:D4:F5:5C:C7:FF:B7:A4:BA:CC:65:6E:0D:19:3D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a313830303a3a2f33372d3337203d3e20313437303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2060:1800::/37

    Signature Algorithm: sha256WithRSAEncryption
         8a:d3:25:3a:df:72:1c:d1:57:ad:43:2c:d4:00:76:4d:59:d3:
         b3:a2:6b:57:78:85:70:ea:bd:e2:f4:1a:b1:85:ab:fe:d3:36:
         37:f6:72:fd:97:1a:65:06:f8:7e:92:0c:55:50:7f:5d:29:1a:
         d3:c6:b3:22:7a:04:11:74:43:d7:93:ba:a0:8b:ec:cb:3a:1e:
         6e:e6:a1:b6:36:af:2a:fd:15:b6:69:74:b4:53:5e:93:dc:13:
         bc:bd:25:e3:a5:06:2a:41:ba:d4:13:42:77:e9:26:7f:10:31:
         b2:21:42:97:26:a9:4d:2f:38:a8:1f:b0:66:66:9c:f2:e4:1b:
         d3:47:d2:06:b4:c3:2b:67:16:34:b9:0a:7c:de:2d:a6:49:f6:
         5d:06:ca:83:15:75:84:ae:0d:e2:59:10:87:4a:79:2f:26:c4:
         6f:6a:8e:c0:6c:6c:94:39:11:f1:ac:80:52:be:14:22:5a:c2:
         07:a9:14:22:a8:ea:23:ec:70:23:77:86:b6:7d:96:14:e9:aa:
         ae:d1:71:bc:82:d6:09:34:3f:75:06:f1:55:80:9b:49:01:92:
         40:83:26:d7:cc:eb:ac:42:42:ea:0e:ae:b3:2e:eb:34:b9:2f:
         ef:d7:65:f2:71:80:34:74:2e:8a:f3:a8:88:56:ea:e0:a4:c9:
         e2:51:bb:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 15:27:39 2025 by rpki-client