Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32312e302f32342d3234203d3e20313336373932.roa
File:                     3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (raw, json)
Hash identifier:          wx7mDDVDVvssyRRRK7qXWbAqlJxXiOpWt5/RcILxYjM=
Subject key identifier:   B9:0A:2A:A9:5C:A7:63:37:29:8D:99:67:B0:B8:12:8A:19:24:95:AA
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       58DBCD6D436699D4801440648512B938B39B9D90
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32312e302f32342d3234203d3e20313336373932.roa
Signing time:             Fri 05 Jun 2026 12:30:56 +0000
ROA not before:           Fri 05 Jun 2026 12:25:56 +0000
ROA not after:            Fri 04 Jun 2027 12:30:56 +0000
asID:                     136792
IP address blocks:        103.96.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Jun 2026 10:28:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:db:cd:6d:43:66:99:d4:80:14:40:64:85:12:b9:38:b3:9b:9d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Jun  5 12:25:56 2026 GMT
            Not After : Jun  4 12:30:56 2027 GMT
        Subject: CN=B90A2AA95CA76337298D9967B0B8128A192495AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:42:9a:2f:13:ae:9e:06:05:af:de:59:9b:6f:
                    b2:fa:97:e9:48:5d:50:87:53:ef:bd:50:5b:e9:66:
                    3e:fb:b3:03:78:77:98:cc:a7:1a:85:44:a9:4e:a6:
                    b8:eb:b5:ee:16:6a:20:dd:e6:23:7c:05:9c:0e:43:
                    2b:69:3e:7d:04:75:e4:65:6c:e8:c5:c9:0b:00:7a:
                    8b:43:78:3c:ff:5c:38:18:22:31:2a:93:94:f9:ad:
                    37:f4:f4:87:f9:77:57:f8:fe:e9:55:2e:e6:40:d4:
                    34:88:df:0c:42:e8:e3:ce:b9:d8:4c:ea:61:9c:27:
                    b5:88:fe:36:9e:77:cc:82:5a:71:c2:65:cf:df:e9:
                    49:3c:3a:ca:fc:4b:fe:f0:ca:1f:c2:99:f6:86:2e:
                    28:8c:9e:90:db:e2:b9:e3:fe:8f:da:be:e3:89:20:
                    2c:c1:ec:49:02:0e:93:3d:79:f8:bf:8d:f7:b2:46:
                    7f:89:33:cb:b7:65:7e:1e:ad:6c:aa:f6:88:db:ff:
                    c7:60:85:a9:f8:fa:7a:01:a7:b5:63:68:4a:9b:4d:
                    63:6d:0a:8d:20:d8:82:70:4d:7c:c7:8e:8b:d0:28:
                    6a:ec:eb:15:37:c3:f6:29:ae:6a:a4:c2:ce:47:b6:
                    6f:39:05:d8:eb:d5:59:c4:a4:52:bb:60:5f:9f:41:
                    cb:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0A:2A:A9:5C:A7:63:37:29:8D:99:67:B0:B8:12:8A:19:24:95:AA
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32312e302f32342d3234203d3e20313336373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:c6:76:7a:73:1f:d7:14:53:1e:82:27:25:0d:b1:34:24:27:
         00:69:09:af:88:cc:f0:15:1a:44:73:cc:02:28:69:dc:d8:1e:
         eb:f0:c0:63:d2:92:d3:0d:9f:f5:19:4d:f1:5a:5e:ee:7e:5f:
         81:06:03:f4:52:56:40:9a:ae:1c:30:92:87:53:fe:24:ab:2e:
         18:79:9f:39:a2:12:66:8c:1d:ae:cd:60:d4:22:e5:b5:b1:58:
         9e:ab:b5:a6:a1:0e:77:de:5e:17:da:5b:87:6f:31:6d:23:73:
         c9:f2:71:0b:7c:57:69:c4:3a:09:96:9c:aa:54:0a:09:40:fe:
         17:83:e9:30:df:97:d9:1e:6a:d4:25:6d:27:73:92:7c:1a:2c:
         0c:18:a0:4d:59:60:75:73:8e:05:f3:5c:4d:36:e5:56:28:28:
         34:9d:c3:79:dd:8f:41:ec:2c:9f:fd:79:ab:e7:cd:57:19:4a:
         6a:2f:23:ae:32:21:5c:56:cb:5b:4a:c8:6a:96:6f:27:2e:d9:
         33:26:93:63:24:df:e4:e7:50:86:2f:99:1f:5d:28:2f:92:3d:
         42:55:f7:42:b1:e4:0f:cc:67:24:d5:17:ce:f2:0b:a6:21:e5:
         1e:7e:1c:d0:77:c4:25:32:43:83:bc:c7:aa:6b:81:77:40:08:
         30:31:b4:f6
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUWNvNbUNmmdSAFEBkhRK5OLObnZAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOTJBOTgwMDAwMTEwLwYDVQQFEyg5ODlEMzJENUI2
MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyMB4XDTI2MDYwNTEyMjU1NloX
DTI3MDYwNDEyMzA1NlowMzExMC8GA1UEAxMoQjkwQTJBQTk1Q0E3NjMzNzI5OEQ5
OTY3QjBCODEyOEExOTI0OTVBQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMNCmi8Trp4GBa/eWZtvsvqX6UhdUIdT771QW+lmPvuzA3h3mMynGoVEqU6m
uOu17hZqIN3mI3wFnA5DK2k+fQR15GVs6MXJCwB6i0N4PP9cOBgiMSqTlPmtN/T0
h/l3V/j+6VUu5kDUNIjfDELo48652EzqYZwntYj+Np53zIJaccJlz9/pSTw6yvxL
/vDKH8KZ9oYuKIyekNviueP+j9q+44kgLMHsSQIOkz15+L+N97JGf4kzy7dlfh6t
bKr2iNv/x2CFqfj6egGntWNoSptNY20KjSDYgnBNfMeOi9AoauzrFTfD9imuaqTC
zke2bzkF2OvVWcSkUrtgX59By6MCAwEAAaOCAhEwggINMB0GA1UdDgQWBBS5Ciqp
XKdjNymNmWewuBKKGSSVqjAfBgNVHSMEGDAWgBSYnTLVtirJOJKGwXylB4vQBm8e
EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5ODAwMDAvMC85ODlEMzJE
NUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9tSjB5MWJZcXlU
aVNoc0Y4cFFlTDBBWnZIaEkuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUH
MAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTJB
OTgwMDAwLzAvMzEzMDMzMmUzOTM2MmUzMjMxMmUzMDJmMzIzNDJkMzIzNDIwM2Qz
ZTIwMzEzMzM2MzczOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2AVMA0GCSqGSIb3DQEBCwUAA4IB
AQAuxnZ6cx/XFFMegiclDbE0JCcAaQmviMzwFRpEc8wCKGnc2B7r8MBj0pLTDZ/1
GU3xWl7ufl+BBgP0UlZAmq4cMJKHU/4kqy4YeZ85ohJmjB2uzWDUIuW1sVieq7Wm
oQ533l4X2luHbzFtI3PJ8nELfFdpxDoJlpyqVAoJQP4Xg+kw35fZHmrUJW0nc5J8
GiwMGKBNWWB1c44F81xNNuVWKCg0ncN53Y9B7Cyf/Xmr581XGUpqLyOuMiFcVstb
Sshqlm8nLtkzJpNjJN/k51CGL5kfXSgvkj1CVfdCseQPzGck1RfO8gumIeUefhzQ
d8QlMkODvMeqa4F3QAgwMbT2
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:20:42 2026 by rpki-client