Route Origin Authorization

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/0/323430363a653934303a3a2f33322d3536203d3e2039343439.roa
File:                     323430363a653934303a3a2f33322d3536203d3e2039343439.roa (raw, json)
Hash identifier:          iW/Pe5Cqp3aiKoMmZoO7B7Qp0dEF2rMCnFsMeO07vy8=
Subject key identifier:   E9:BA:04:48:2F:0B:4B:F9:B1:A7:9D:74:D9:A2:EA:0E:46:74:72:52
Certificate issuer:       /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial:       14FB6CE4BD746B03A40BC88529238ECDEB5AAB9A
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/0/323430363a653934303a3a2f33322d3536203d3e2039343439.roa
Signing time:             Sun 06 Sep 2026 05:56:54 +0000
ROA not before:           Sun 06 Sep 2026 05:51:54 +0000
ROA not after:            Sun 05 Sep 2027 05:56:54 +0000
asID:                     9449
IP address blocks:        2406:e940::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 23 Sep 2026 23:57:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fb:6c:e4:bd:74:6b:03:a4:0b:c8:85:29:23:8e:cd:eb:5a:ab:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91905300000, serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
        Validity
            Not Before: Sep  6 05:51:54 2026 GMT
            Not After : Sep  5 05:56:54 2027 GMT
        Subject: CN=E9BA04482F0B4BF9B1A79D74D9A2EA0E46747252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:25:2b:f8:aa:cb:aa:7c:cd:0d:f7:a3:67:c4:
                    59:b0:35:1a:ea:e3:18:bf:2b:5f:54:9a:92:a7:1a:
                    5d:d5:c5:e2:ed:46:c6:a7:c6:76:09:c0:de:b5:0a:
                    c4:76:f9:9e:fe:d2:da:b8:e4:71:fd:34:a3:39:12:
                    13:de:69:04:27:cf:86:0d:47:e0:b0:d3:63:48:22:
                    cc:fc:29:05:ec:32:cc:fd:2f:29:eb:75:5d:ff:1c:
                    d8:71:f3:75:ba:31:bb:66:dd:03:0c:bd:12:da:ae:
                    9b:ed:6c:7d:1d:2b:b3:53:5b:7a:bd:b8:87:44:4f:
                    4f:c5:63:c3:a0:7a:e4:58:97:6c:38:92:b6:d8:b9:
                    43:12:f9:a8:71:35:f1:3f:1b:13:d5:1e:15:b2:83:
                    22:3d:77:1f:53:65:df:b1:b6:0d:14:83:98:59:44:
                    5f:7f:65:96:8d:69:1b:f8:4b:bb:ec:58:cd:28:73:
                    ac:33:06:d7:f7:d2:3e:a9:35:46:10:61:6d:7a:ee:
                    99:3f:6b:6b:be:34:c5:32:72:b9:8b:22:36:3a:16:
                    67:27:3d:9b:62:e3:3d:57:34:7c:86:67:b9:a0:9f:
                    f0:1a:45:74:ee:4e:16:a5:37:ff:ab:3b:02:d8:ac:
                    b5:68:07:1d:ef:f3:d0:64:fb:53:a1:e1:1e:ad:74:
                    7b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BA:04:48:2F:0B:4B:F9:B1:A7:9D:74:D9:A2:EA:0E:46:74:72:52
            X509v3 Authority Key Identifier:
                keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/323430363a653934303a3a2f33322d3536203d3e2039343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:e940::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:f2:19:cc:1b:d9:0c:7e:3e:04:1e:2b:ef:3b:9e:3b:31:94:
         81:86:84:63:6e:0f:ca:a9:ef:b4:67:4a:21:f2:9d:79:be:c1:
         5f:50:0d:06:67:25:bf:23:9b:7e:e5:00:eb:46:34:78:d2:19:
         82:ed:a0:19:bb:52:3b:e2:91:46:46:b0:38:ca:2d:8c:99:c6:
         14:7a:6a:e5:70:46:16:7a:f7:58:1f:7e:ce:f3:0a:42:75:97:
         4f:d3:e0:09:33:86:66:af:1f:5c:57:03:fb:4f:3e:2e:34:a3:
         3e:4d:c5:f8:2d:38:2d:34:37:b6:f1:21:52:cd:8e:8d:ee:51:
         ba:07:77:e7:3b:17:e0:73:18:7e:d2:45:21:5f:0d:84:e8:26:
         76:19:72:a2:59:d2:e7:e9:6e:e1:1b:8a:8c:10:04:25:74:78:
         bd:9a:ce:cf:01:36:e6:63:b6:94:b8:2a:6a:0c:29:a6:09:a1:
         88:01:80:86:07:fe:e5:83:0c:7c:ce:d4:cf:a8:2e:50:82:44:
         5a:26:d8:b2:ed:39:e9:6f:2e:09:e7:a4:c6:f8:3b:13:b1:e3:
         e6:de:43:f5:e0:1a:2e:e7:51:4b:cd:be:fd:2b:65:d4:54:a5:
         72:b4:a2:64:b8:44:c7:71:55:05:0b:54:dd:9e:7d:f6:ef:0f:
         ee:b3:3b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:02:21 2026 by rpki-client