Route Origin Authorization

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/3/323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa
File:                     323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa (raw, json)
Hash identifier:          Sylf+6F0rs2iWRvKNrVjclZWIfF/tiqHfdrXOW0RiPo=
Subject key identifier:   21:91:52:E0:CB:89:EE:DD:39:7C:7F:8F:0F:27:5A:15:5E:1B:C6:57
Certificate issuer:       /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Certificate serial:       6D62A4F8A007655C7F0F9E357A979F9CA59127B4
Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/3/323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa
Signing time:             Sun 06 Sep 2026 05:56:54 +0000
ROA not before:           Sun 06 Sep 2026 05:51:54 +0000
ROA not after:            Sun 05 Sep 2027 05:56:54 +0000
asID:                     9449
IP address blocks:        2001:df0:206::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Sep 2026 02:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:62:a4:f8:a0:07:65:5c:7f:0f:9e:35:7a:97:9f:9c:a5:91:27:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AC370000, serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
        Validity
            Not Before: Sep  6 05:51:54 2026 GMT
            Not After : Sep  5 05:56:54 2027 GMT
        Subject: CN=219152E0CB89EEDD397C7F8F0F275A155E1BC657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7f:fb:aa:9f:07:7c:60:05:eb:c9:20:de:58:
                    d7:c8:cb:cd:c9:82:28:93:74:42:57:ff:e7:a0:a6:
                    8e:92:38:00:22:e4:28:87:d8:ae:e0:ee:a5:bf:9b:
                    55:ee:76:57:8b:8e:40:45:ad:7e:9f:ce:bd:52:5b:
                    68:df:5d:8c:e2:b8:16:07:cd:25:2b:87:f5:80:9c:
                    af:84:d4:e2:b6:c1:c9:bf:9f:0a:06:62:e1:8c:44:
                    4a:e5:64:6d:1b:37:6b:cb:96:e8:cf:9d:3e:31:87:
                    2e:7c:9a:63:48:47:e5:4b:a5:9d:8a:ce:1e:33:5d:
                    01:21:b5:72:a7:e8:bf:2c:11:04:11:30:2d:0e:97:
                    c8:3b:65:e9:d4:ec:a7:b2:27:6f:43:2e:ea:c4:10:
                    a0:b8:72:d9:e2:fc:25:7c:f1:cb:1a:fd:c2:f6:90:
                    17:9e:83:ac:bd:bf:53:e2:47:e9:50:00:29:64:af:
                    c8:d2:30:e5:90:2a:9a:09:8d:fc:3e:89:d2:95:00:
                    88:6c:a9:cc:ff:0a:59:f2:94:09:b4:fa:6d:95:57:
                    7f:9c:34:e3:fd:63:b6:ed:a6:19:a0:88:79:f6:51:
                    60:3b:3b:14:8d:da:20:7d:5f:2c:c8:5a:1b:53:21:
                    9e:56:dc:3a:49:65:5f:21:90:8a:74:47:27:19:6e:
                    ed:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:91:52:E0:CB:89:EE:DD:39:7C:7F:8F:0F:27:5A:15:5E:1B:C6:57
            X509v3 Authority Key Identifier:
                keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/323030313a6466303a3230363a3a2f34382d3438203d3e2039343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:206::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:0c:f5:4a:d2:48:f7:fe:29:9e:6b:b3:b2:0a:dd:cd:ff:3c:
         89:77:42:a5:22:b0:a6:a3:14:13:9f:c4:39:7a:b3:59:6b:44:
         ed:dc:b9:ea:47:97:10:e3:fd:5f:f2:fa:5d:68:bf:84:0f:d1:
         d0:d8:9e:c8:e0:39:d4:14:13:15:f9:15:42:0e:d4:65:36:52:
         74:f7:8d:5f:4c:a9:78:71:ff:8b:91:57:71:8a:1a:8c:f0:02:
         59:33:2f:94:61:04:9e:0d:2d:ba:c3:6e:1a:b9:c1:8a:d0:55:
         c4:58:76:a2:88:8c:fb:25:46:c1:db:ba:78:3a:48:a0:fa:b2:
         ba:24:21:c9:b2:92:50:89:7d:9e:46:10:6c:79:23:23:62:80:
         5b:e3:8d:13:9b:5c:02:de:c6:2c:e9:2c:55:48:47:d3:cb:01:
         1f:1d:c8:41:3e:05:3f:54:8d:f0:f9:4c:64:9c:22:ae:6c:a1:
         fe:38:f1:62:1a:80:93:a0:06:59:f9:51:ba:1d:cc:a5:fa:2f:
         6b:3c:64:18:2d:6b:de:45:39:12:c3:43:57:dc:1b:90:e8:a5:
         4a:56:7a:19:6e:30:37:ae:f6:3b:e8:69:4d:29:89:e3:ef:0e:
         d4:45:37:4e:e7:1d:81:93:25:6c:56:fc:64:c7:86:3b:a9:cf:
         b5:77:6f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:05:18 2026 by rpki-client