Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa
File:                     323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (raw, json)
Hash identifier:          wD2X/rnLvjYX7xyPB9Jt+GcW/s8Zi1WkDFOO2rKFbBY=
Subject key identifier:   F1:5B:0C:55:5D:56:A8:AB:0B:23:C3:43:97:03:06:3B:F0:DB:12:73
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       075143FF288334DDDAEA730676FF017ABB0D20F2
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa
Signing time:             Fri 05 Jun 2026 12:30:56 +0000
ROA not before:           Fri 05 Jun 2026 12:25:56 +0000
ROA not after:            Fri 04 Jun 2027 12:30:56 +0000
asID:                     136792
IP address blocks:        2401:73c0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 15:39:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:51:43:ff:28:83:34:dd:da:ea:73:06:76:ff:01:7a:bb:0d:20:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Jun  5 12:25:56 2026 GMT
            Not After : Jun  4 12:30:56 2027 GMT
        Subject: CN=F15B0C555D56A8AB0B23C3439703063BF0DB1273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:26:1e:45:a3:6d:14:77:70:9b:bd:96:3c:01:
                    99:27:2c:c6:12:c6:af:6e:53:20:b9:e5:c9:29:eb:
                    da:e0:57:26:dc:19:fb:3c:14:0a:5d:56:e3:ac:af:
                    e0:98:62:a0:c5:96:95:b6:ee:ad:33:34:94:51:a6:
                    5c:cd:3d:f1:ce:61:69:61:c4:3b:6c:5c:8f:78:49:
                    09:26:70:13:4a:6e:4c:c9:cd:f8:6a:8d:9c:49:b6:
                    04:1e:7d:77:ef:a6:ed:e8:6b:91:0c:ab:bc:e8:dc:
                    76:87:50:f0:7b:60:ee:b2:16:cf:b5:50:45:3a:16:
                    bb:c3:73:c1:5d:cd:f2:85:05:f0:0f:6e:35:e5:49:
                    d6:7c:d8:1d:e1:38:38:a3:69:c1:9b:b4:27:c3:f1:
                    f4:34:63:3b:0d:fb:39:46:0c:92:77:41:00:a1:fc:
                    78:9e:84:57:0c:2b:73:bb:1a:fa:78:21:4e:a7:e2:
                    7b:70:09:fc:a6:01:13:3d:d7:d1:78:6e:fa:03:43:
                    57:e1:e1:4f:d9:78:01:bf:52:07:40:bf:f3:6e:e7:
                    7a:ff:06:7d:27:83:9c:db:3c:85:92:72:db:d0:e2:
                    e5:cc:f8:61:e3:69:fc:a3:32:e1:df:e4:2b:ae:bf:
                    75:f7:69:a2:b2:18:e6:db:e7:ac:92:66:d9:ed:99:
                    48:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5B:0C:55:5D:56:A8:AB:0B:23:C3:43:97:03:06:3B:F0:DB:12:73
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:73c0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:75:bf:76:29:f3:e0:7e:f9:5b:72:f2:01:59:3b:e3:f1:a3:
         dd:10:11:d5:4f:72:47:b4:a6:a5:35:ba:8a:f6:b7:59:67:49:
         9e:5a:ee:26:bf:73:02:f5:d3:2e:1d:08:25:63:75:b9:3f:41:
         37:9c:06:bd:8d:aa:9a:64:b7:53:5d:f5:30:99:f8:4a:84:d8:
         c6:6f:f9:83:f8:39:e5:02:89:b4:72:81:ab:9d:5c:36:43:cc:
         49:bf:67:39:b8:0a:29:0f:c6:0e:fa:92:f1:aa:a5:e6:86:a0:
         62:c4:dc:ad:39:91:ca:bb:c0:28:f1:9a:49:83:bf:25:41:d9:
         3c:1f:e2:67:61:c6:aa:2b:f6:6d:7b:43:d8:0c:48:96:f6:67:
         62:b1:1b:a4:fe:19:9a:85:ad:a2:62:b1:9e:48:36:7d:be:66:
         6c:61:23:57:36:19:be:1f:ba:f2:24:26:c3:97:a7:a5:f8:6f:
         95:dc:20:2b:71:4a:5c:98:9d:bf:a6:c2:b2:92:f6:3d:c6:4e:
         84:bb:3c:fb:6f:9f:42:7d:13:93:c2:0f:86:2b:38:93:d0:97:
         86:87:f9:e6:52:76:cf:c9:cd:bd:44:43:db:0b:a8:3e:ad:78:
         71:28:de:b4:af:0f:0b:21:84:e4:85:c4:42:14:0d:67:dc:2e:
         52:24:74:fb
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIUB1FD/yiDNN3a6nMGdv8BersNIPIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOTJBOTgwMDAwMTEwLwYDVQQFEyg5ODlEMzJENUI2
MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyMB4XDTI2MDYwNTEyMjU1NloX
DTI3MDYwNDEyMzA1NlowMzExMC8GA1UEAxMoRjE1QjBDNTU1RDU2QThBQjBCMjND
MzQzOTcwMzA2M0JGMERCMTI3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANsmHkWjbRR3cJu9ljwBmScsxhLGr25TILnlySnr2uBXJtwZ+zwUCl1W46yv
4JhioMWWlbburTM0lFGmXM098c5haWHEO2xcj3hJCSZwE0puTMnN+GqNnEm2BB59
d++m7ehrkQyrvOjcdodQ8Htg7rIWz7VQRToWu8NzwV3N8oUF8A9uNeVJ1nzYHeE4
OKNpwZu0J8Px9DRjOw37OUYMkndBAKH8eJ6EVwwrc7sa+nghTqfie3AJ/KYBEz3X
0Xhu+gNDV+HhT9l4Ab9SB0C/827nev8GfSeDnNs8hZJy29Di5cz4YeNp/KMy4d/k
K66/dfdporIY5tvnrJJm2e2ZSNkCAwEAAaOCAhowggIWMB0GA1UdDgQWBBTxWwxV
XVaoqwsjw0OXAwY78NsSczAfBgNVHSMEGDAWgBSYnTLVtirJOJKGwXylB4vQBm8e
EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5ODAwMDAvMC85ODlEMzJE
NUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9tSjB5MWJZcXlU
aVNoc0Y4cFFlTDBBWnZIaEkuY2VyMIGRBggrBgEFBQcBCwSBhDCBgTB/BggrBgEF
BQcwC4ZzcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5
MkE5ODAwMDAvMC8zMjM0MzAzMTNhMzczMzYzMzAzYTMxM2EzYTJmMzQzODJkMzQz
ODIwM2QzZTIwMzEzMzM2MzczOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAFzwAABMA0GCSqGSIb3
DQEBCwUAA4IBAQAedb92KfPgfvlbcvIBWTvj8aPdEBHVT3JHtKalNbqK9rdZZ0me
Wu4mv3MC9dMuHQglY3W5P0E3nAa9jaqaZLdTXfUwmfhKhNjGb/mD+DnlAom0coGr
nVw2Q8xJv2c5uAopD8YO+pLxqqXmhqBixNytOZHKu8Ao8ZpJg78lQdk8H+JnYcaq
K/Zte0PYDEiW9mdisRuk/hmaha2iYrGeSDZ9vmZsYSNXNhm+H7ryJCbDl6el+G+V
3CArcUpcmJ2/psKykvY9xk6Euzz7b59CfROTwg+GKziT0JeGh/nmUnbPyc29REPb
C6g+rXhxKN60rw8LIYTkhcRCFA1n3C5SJHT7
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:00:21 2026 by rpki-client