Route Origin Authorization

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/4/3230332e33302e36302e302f32342d3234203d3e2037353436.roa
File:                     3230332e33302e36302e302f32342d3234203d3e2037353436.roa (raw, json)
Hash identifier:          ouqx4LxaBgGUkmuXMINywcsMwqU0N6ifWFXfDupPMm0=
Subject key identifier:   8A:AC:79:2E:9A:F0:96:BA:ED:00:02:83:D8:CD:37:A3:20:1D:36:29
Certificate issuer:       /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial:       1A7C4FA6CF53787608E36C5C2DE194F3AD3DFFE0
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/4/3230332e33302e36302e302f32342d3234203d3e2037353436.roa
Signing time:             Sun 06 Sep 2026 05:56:55 +0000
ROA not before:           Sun 06 Sep 2026 05:51:55 +0000
ROA not after:            Sun 05 Sep 2027 05:56:55 +0000
asID:                     7546
IP address blocks:        203.30.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Sep 2026 07:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:7c:4f:a6:cf:53:78:76:08:e3:6c:5c:2d:e1:94:f3:ad:3d:ff:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
        Validity
            Not Before: Sep  6 05:51:55 2026 GMT
            Not After : Sep  5 05:56:55 2027 GMT
        Subject: CN=8AAC792E9AF096BAED000283D8CD37A3201D3629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b9:37:1a:7b:0e:e4:ad:07:49:b6:17:e2:f5:
                    06:13:a3:77:60:72:b8:ce:75:ac:19:47:8c:fc:ef:
                    20:fa:1a:98:19:c6:fb:09:40:16:1a:a5:43:99:8e:
                    29:d9:76:01:37:6b:0a:37:ad:bc:02:1f:54:d1:8b:
                    f8:73:cd:85:51:0a:ab:ee:6a:74:65:1f:65:f2:14:
                    9e:6b:1a:39:f2:96:f5:1e:de:c2:3f:e7:33:8b:6e:
                    fc:c9:4f:c1:3b:14:20:1a:f7:e3:d7:00:a3:81:29:
                    03:a4:b1:78:c3:5d:3a:e7:8b:5f:e0:eb:5d:86:d5:
                    87:59:10:93:40:73:d6:7a:99:25:5d:13:ac:59:74:
                    ce:6f:fd:13:0e:58:69:9b:e2:e7:c8:82:15:d5:21:
                    10:a8:2a:98:df:d0:c7:0c:b8:76:95:00:9a:94:20:
                    ae:99:67:4f:6e:d9:40:f2:78:07:67:81:dd:e5:d8:
                    36:16:53:33:70:27:ed:5f:cd:b8:2c:5b:be:04:59:
                    3d:eb:f3:66:2a:86:a6:1d:7a:04:bd:20:56:71:9f:
                    58:51:94:eb:85:87:c8:c9:ea:fa:b3:84:bb:c7:03:
                    86:ba:2c:c4:7f:38:2b:9a:f0:01:12:ba:33:76:d6:
                    47:3a:79:ee:c8:93:a5:6e:e5:2b:c5:26:f0:e7:96:
                    4d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:AC:79:2E:9A:F0:96:BA:ED:00:02:83:D8:CD:37:A3:20:1D:36:29
            X509v3 Authority Key Identifier:
                keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/3230332e33302e36302e302f32342d3234203d3e2037353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.30.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:06:5e:5f:80:19:7f:3a:2d:a0:35:08:32:d6:99:60:cb:29:
         d1:ff:57:05:83:69:c0:1d:81:11:55:f2:b5:8d:60:71:6f:ca:
         4b:89:72:dc:c1:18:79:43:65:04:db:64:e8:3d:fb:69:eb:e8:
         10:74:c1:3a:d0:c6:ab:8a:1f:01:0c:e5:df:06:19:e9:1a:bb:
         5c:f8:0d:26:8e:0a:57:ff:99:71:7b:07:ed:88:92:1f:15:e7:
         fc:4c:92:9d:4a:92:22:81:15:a9:12:ac:6d:53:a1:27:12:2d:
         78:d1:eb:a5:72:41:7a:46:79:27:d7:47:63:ce:7b:16:4c:6f:
         48:d9:27:3c:82:1e:30:fa:cd:29:d9:0e:8a:56:10:c9:62:89:
         95:11:7c:6a:11:c7:fa:51:c3:c3:f6:60:5a:34:31:83:1a:b3:
         25:d5:70:5a:96:3c:f5:e1:59:31:d2:0f:94:4b:b9:e7:9f:7e:
         c1:8c:e9:0c:62:44:25:b7:a4:ad:2b:ce:60:81:2d:b7:f0:fe:
         d1:55:97:af:ba:f6:14:c7:0d:34:39:33:60:35:af:00:ed:e8:
         61:da:28:d4:a3:b2:e3:85:2a:0a:1e:46:fe:38:80:c5:3b:c8:
         22:be:0e:7e:8f:1c:5b:96:24:db:9e:94:ce:22:da:38:4f:91:
         a9:9a:08:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:40:44 2026 by rpki-client