Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139362e302f32332d3233203d3e20313334303930.roa
File:                     3230332e372e3139362e302f32332d3233203d3e20313334303930.roa (raw, json)
Hash identifier:          qaOra+xDLyRhqdf//j4nvjjhMuhgOEsIZ5B8fiKTKxU=
Subject key identifier:   72:4D:11:0B:A2:4D:B4:97:33:2E:29:5E:46:76:DC:8C:59:9A:48:CA
Certificate issuer:       /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial:       6A05BD28B01E5EFFF675811E44A603AD950606D0
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139362e302f32332d3233203d3e20313334303930.roa
Signing time:             Wed 10 Jun 2026 06:53:53 +0000
ROA not before:           Wed 10 Jun 2026 06:48:53 +0000
ROA not after:            Wed 09 Jun 2027 06:53:53 +0000
asID:                     134090
IP address blocks:        203.7.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 11:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:05:bd:28:b0:1e:5e:ff:f6:75:81:1e:44:a6:03:ad:95:06:06:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
        Validity
            Not Before: Jun 10 06:48:53 2026 GMT
            Not After : Jun  9 06:53:53 2027 GMT
        Subject: CN=724D110BA24DB497332E295E4676DC8C599A48CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ee:f8:b8:95:5e:b0:9b:32:94:0a:35:3e:93:
                    8a:5c:19:d5:a3:a8:0c:4e:63:90:83:a6:14:ec:ce:
                    af:e7:e7:05:88:3a:26:ef:52:6b:4c:c5:9d:9d:93:
                    1c:93:b2:2f:c9:f1:50:db:9a:6f:64:7e:e4:eb:53:
                    e0:b2:2b:58:b4:1a:15:85:3b:d2:f8:26:75:6f:db:
                    8b:bd:78:d7:0b:bd:23:02:71:7b:b0:87:be:ee:75:
                    bb:1b:c4:fe:e5:35:4d:0d:8d:42:23:c0:ee:3b:b7:
                    b5:d3:b1:53:81:8d:85:79:08:45:48:08:7a:1d:85:
                    6f:1b:5f:c7:43:42:69:ca:af:bc:a7:07:2a:ef:28:
                    09:97:3f:c7:62:10:d3:13:05:12:3b:fd:4d:db:d6:
                    e1:73:a8:06:80:77:90:ab:b2:b8:71:f4:66:d6:51:
                    d1:ec:19:75:15:6e:ea:8c:fe:cf:a4:b8:9b:f2:ea:
                    1e:05:75:35:2b:fe:b5:b0:b8:80:d3:2e:30:b5:09:
                    f5:6b:42:82:9c:68:f8:1f:2d:6c:92:b6:e4:c7:48:
                    98:3a:a1:69:89:3f:1c:05:61:f9:c8:4c:25:12:ea:
                    5b:84:37:14:37:3b:30:26:f5:0b:77:5d:0a:56:c0:
                    2f:52:65:00:23:33:10:6f:9d:d5:e8:96:65:05:65:
                    7e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:4D:11:0B:A2:4D:B4:97:33:2E:29:5E:46:76:DC:8C:59:9A:48:CA
            X509v3 Authority Key Identifier:
                keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139362e302f32332d3233203d3e20313334303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.7.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:5a:66:17:15:b6:c4:c2:90:23:a7:a6:34:80:c5:ec:ea:50:
         bd:4d:39:ea:44:66:ee:b9:c8:bb:07:95:05:2b:9e:98:80:a7:
         0f:7c:5f:98:fb:df:fa:4e:78:41:84:dd:f3:c4:90:ef:39:6c:
         62:4a:1c:6f:0c:25:70:09:5c:65:19:8a:7c:24:37:78:76:bb:
         cc:07:bc:49:7f:10:c4:17:80:3e:78:01:90:4f:7e:08:9a:37:
         de:5c:8f:1a:14:8e:96:0c:ee:4c:da:bc:c1:14:6e:01:fb:23:
         b2:48:ee:8c:c0:77:ec:d5:72:e3:5e:ef:c4:3e:ab:29:d6:7f:
         d5:c9:b0:1f:e1:cc:39:7e:fa:e8:a5:9f:d3:29:c9:dc:a5:53:
         86:55:70:05:dc:1a:91:f5:0a:58:da:3e:54:29:a9:23:f6:28:
         03:fa:24:1a:41:e5:80:be:62:e9:5d:f8:2c:dc:6c:47:a6:44:
         52:85:1b:c7:42:65:09:b9:6a:c5:52:30:60:0b:a3:45:09:9c:
         3c:a1:8e:3f:0f:d2:65:3e:5c:9d:ca:62:26:03:95:41:f5:e1:
         ee:28:5c:5d:4f:e2:40:0c:ff:47:16:47:fc:a3:d2:10:41:7c:
         15:e0:f3:9c:fc:10:27:45:ad:5d:92:a3:ee:46:9c:63:77:9e:
         6c:84:6b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:06:20 2026 by rpki-client