Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139362e302f32332d3233203d3e2037353436.roa
File:                     3230332e372e3139362e302f32332d3233203d3e2037353436.roa (raw, json)
Hash identifier:          fkFkv4x2RJF8ikeWNYi3IpWqQO/j13TZnucB+1TubjI=
Subject key identifier:   F0:5C:A1:EA:BC:1C:D4:23:52:51:06:D8:5A:11:59:32:6F:6C:B5:0A
Certificate issuer:       /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial:       5306AC416D254CF1AADB0D57D50FC86822B6CD6C
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139362e302f32332d3233203d3e2037353436.roa
Signing time:             Thu 04 Jun 2026 02:27:17 +0000
ROA not before:           Thu 04 Jun 2026 02:22:17 +0000
ROA not after:            Thu 03 Jun 2027 02:27:17 +0000
asID:                     7546
IP address blocks:        203.7.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 11:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:06:ac:41:6d:25:4c:f1:aa:db:0d:57:d5:0f:c8:68:22:b6:cd:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
        Validity
            Not Before: Jun  4 02:22:17 2026 GMT
            Not After : Jun  3 02:27:17 2027 GMT
        Subject: CN=F05CA1EABC1CD423525106D85A1159326F6CB50A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5b:41:b8:d1:06:99:6e:b6:67:d9:72:15:90:
                    32:d7:f0:24:ae:81:20:97:f6:08:96:a5:a6:87:57:
                    a1:11:92:1a:f1:1d:5b:b6:a5:0f:3b:f1:ed:5b:34:
                    ad:a7:57:ab:2b:4c:ca:1c:3a:35:35:78:b5:c1:9a:
                    a5:0e:51:fd:55:80:c8:2e:0b:3d:88:36:d6:c3:9d:
                    73:a2:4f:4a:dc:a2:8d:fa:30:14:9c:fb:48:94:79:
                    f9:db:e1:ab:0c:dc:0c:ec:55:53:3e:45:25:d0:17:
                    f0:b4:40:9b:c0:73:36:44:d0:da:02:5b:77:a7:66:
                    78:97:e5:ee:4a:ea:74:52:6f:4c:1d:26:84:95:5d:
                    42:f9:67:d0:ab:bb:72:a0:e0:8a:3b:2b:b3:60:ce:
                    24:03:fe:b3:5f:96:18:ef:88:4d:fe:df:c9:29:60:
                    bf:e3:09:10:3e:a5:7f:c2:74:b4:d6:de:f1:37:6e:
                    d6:57:6d:b9:44:ad:ef:f0:be:31:af:b7:47:de:d4:
                    a9:2a:b2:9f:43:7f:f3:cc:57:82:f8:31:35:ee:58:
                    ac:39:20:01:4d:a9:f9:ae:83:e2:1e:ac:35:f0:e4:
                    7c:8a:1f:ff:98:9a:56:56:9c:3d:ae:4f:39:fc:76:
                    5f:0f:bc:b5:ef:78:8d:58:58:d1:39:65:bd:ea:4f:
                    f3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5C:A1:EA:BC:1C:D4:23:52:51:06:D8:5A:11:59:32:6F:6C:B5:0A
            X509v3 Authority Key Identifier:
                keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139362e302f32332d3233203d3e2037353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.7.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:a5:d3:26:91:d1:97:99:21:6f:fe:40:c4:88:55:9d:a8:04:
         e0:4f:9b:7b:ed:67:20:dc:c3:99:12:a6:66:87:1d:94:3a:69:
         39:e1:a5:82:21:09:2c:c1:cc:7c:ad:65:ba:a2:bd:37:bf:28:
         ac:e7:90:ed:cf:88:a5:66:bc:11:66:ca:58:d0:67:48:7a:dc:
         be:3b:4a:96:d9:20:66:e6:07:df:5d:4d:e8:74:a1:a3:3e:1c:
         7a:cd:6f:a9:e8:6e:a7:98:fe:4e:b4:d8:b3:68:d6:ea:41:a0:
         7c:5b:84:11:de:56:25:83:5f:f2:44:86:2f:1d:c3:60:1a:5b:
         88:60:f7:3d:7c:b1:2a:17:5c:47:a8:08:84:01:14:dd:4a:e3:
         56:cb:44:09:63:9f:e6:40:a8:b5:5a:84:44:76:86:f4:eb:cd:
         71:03:c0:fa:46:90:04:cf:62:1b:ba:29:13:cc:5f:08:c4:0b:
         b5:97:86:d4:06:4f:27:a8:c8:a3:f8:c3:4d:f9:bd:ae:1f:0f:
         0c:a0:7c:45:35:cf:5a:cd:91:0e:9b:3b:9b:84:4c:ba:eb:62:
         8d:54:0a:88:e4:16:cc:80:7f:78:66:11:2b:8d:0f:08:a6:64:
         31:9f:32:c1:f6:b9:04:3f:f4:9c:9a:69:9e:93:f9:2a:57:e4:
         d9:89:d9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:24:13 2026 by rpki-client