Route Origin Authorization

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/4/3130332e36302e3230302e302f32322d3234203d3e2037353436.roa
File:                     3130332e36302e3230302e302f32322d3234203d3e2037353436.roa (raw, json)
Hash identifier:          aNPv9QWVtH9n+gnLXuZ6dzxPw4I7fQPByYNoN2wj0vw=
Subject key identifier:   CC:53:AE:39:01:7B:95:F9:BE:4C:45:38:F7:A3:70:49:8A:F0:BF:69
Certificate issuer:       /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial:       46C38D79C91332DFEC98B0E822DA5B279FB64E36
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/4/3130332e36302e3230302e302f32322d3234203d3e2037353436.roa
Signing time:             Sun 06 Sep 2026 05:56:55 +0000
ROA not before:           Sun 06 Sep 2026 05:51:55 +0000
ROA not after:            Sun 05 Sep 2027 05:56:55 +0000
asID:                     7546
IP address blocks:        103.60.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 07:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:c3:8d:79:c9:13:32:df:ec:98:b0:e8:22:da:5b:27:9f:b6:4e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
        Validity
            Not Before: Sep  6 05:51:55 2026 GMT
            Not After : Sep  5 05:56:55 2027 GMT
        Subject: CN=CC53AE39017B95F9BE4C4538F7A370498AF0BF69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:57:5b:5b:0d:92:e3:de:14:7e:63:9e:ae:1c:
                    12:b5:22:c2:4e:09:01:33:88:f3:db:ad:a8:46:c7:
                    f7:eb:08:7d:fb:0b:3c:ac:fd:99:35:d0:e1:28:c4:
                    73:ee:0d:f4:ed:13:4e:80:d4:18:bd:cb:b4:de:cb:
                    49:12:d4:3a:83:bb:ed:cd:2e:9b:b1:ce:f3:23:c2:
                    bd:14:a8:d6:85:c4:72:bb:a2:e8:9d:05:78:cb:06:
                    ef:f9:5f:ae:04:04:68:12:c6:15:26:c3:f2:69:3a:
                    68:32:98:75:3c:91:d9:bc:14:c6:49:1a:88:e4:fc:
                    f4:ca:1f:26:6d:85:ef:88:bb:fd:1e:59:1c:98:ec:
                    a9:4a:62:87:95:1c:c5:d2:ea:22:82:b8:dc:8b:a1:
                    77:a0:86:93:df:18:72:ad:68:a1:20:4e:0b:7b:9d:
                    2d:c7:99:5f:9c:fa:21:24:fc:35:70:2f:09:48:10:
                    c4:ed:6c:f9:05:a2:e5:ce:6d:8b:10:d3:d5:d0:cc:
                    dd:a2:31:b4:61:a5:1c:22:8f:3d:5b:0a:57:09:81:
                    12:46:9b:a2:53:15:1b:5a:59:8b:40:09:6e:49:ef:
                    ef:71:5a:10:f0:95:76:d0:d5:df:2c:cf:38:f6:6e:
                    89:6f:91:ab:49:73:ac:61:8f:9d:4c:1e:9f:e2:80:
                    f4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:53:AE:39:01:7B:95:F9:BE:4C:45:38:F7:A3:70:49:8A:F0:BF:69
            X509v3 Authority Key Identifier:
                keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/3130332e36302e3230302e302f32322d3234203d3e2037353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:64:af:e4:63:45:c4:5e:94:01:f3:2f:48:c3:16:f6:0a:1c:
         59:09:f8:db:ee:ac:89:e2:2d:8d:8a:b9:ed:6c:11:13:04:02:
         f5:1c:6a:8d:e5:48:0d:01:ea:ce:a5:9f:ef:e4:cf:41:33:c0:
         7f:0a:c6:5a:61:9a:9d:a8:d3:fa:b0:26:f7:d6:9a:ab:85:23:
         55:79:3b:67:f7:a8:c9:d6:47:1f:99:b1:b8:b9:1a:f1:f9:8d:
         20:59:0d:3c:47:13:a3:f8:6c:27:a7:bf:1d:a4:75:1e:0f:77:
         de:3d:f7:35:59:c8:2e:7b:76:0a:be:60:36:ae:64:c6:10:35:
         90:14:83:af:4f:a1:8b:74:e9:41:f9:2e:cd:50:08:60:6f:29:
         42:9e:4f:7e:f0:da:13:b1:e0:f5:4f:31:b7:35:65:bd:97:c9:
         89:95:d4:c2:64:14:66:bf:94:b7:06:bd:bb:08:97:4b:f6:ca:
         01:65:ed:17:cc:e3:36:59:d1:84:56:b3:ef:fe:8c:4c:30:c3:
         46:8f:44:c6:d6:17:d1:ab:08:6f:e5:e8:fc:51:bc:1c:c3:a2:
         aa:e1:2f:99:60:36:fb:ad:2d:b0:a7:27:aa:6b:ab:be:82:99:
         74:e3:f0:e6:31:43:35:95:1a:83:45:53:bd:3d:67:5b:1b:7d:
         ce:cf:9c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:42:21 2026 by rpki-client