Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa
File:                     323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          6bUioHOiplX0nplUReMAUW/pmAQYfQERH31QOiWI09E=
Subject key identifier:   0C:9D:0C:0C:65:D2:91:C1:E4:6A:9E:CC:2A:14:32:25:7D:95:96:5D
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       72332AD0D348B04E383A6297F2FB50745B671438
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa
Signing time:             Thu 21 May 2026 11:15:48 +0000
ROA not before:           Thu 21 May 2026 11:10:48 +0000
ROA not after:            Thu 20 May 2027 11:15:48 +0000
asID:                     14618
IP address blocks:        2401:73c0:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Jun 2026 15:39:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:33:2a:d0:d3:48:b0:4e:38:3a:62:97:f2:fb:50:74:5b:67:14:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: May 21 11:10:48 2026 GMT
            Not After : May 20 11:15:48 2027 GMT
        Subject: CN=0C9D0C0C65D291C1E46A9ECC2A1432257D95965D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:e0:ba:7d:ed:ff:39:2d:d8:59:f6:98:04:
                    11:1e:77:71:b4:76:f0:08:ca:9b:46:15:cc:c0:80:
                    51:4a:10:30:a8:89:d9:91:94:23:9a:bc:b2:81:cc:
                    c6:52:cd:a5:2e:e3:58:60:1c:d2:95:b5:46:a8:37:
                    7a:2c:57:5a:61:bc:12:f3:01:52:de:f7:d6:6b:7b:
                    83:e6:d4:c5:3c:55:ed:85:18:8b:bc:4d:21:69:6c:
                    c6:ec:4b:32:4d:65:c5:63:92:1e:f3:5c:8d:11:ed:
                    34:07:29:d4:d8:b6:35:48:c4:6c:35:12:08:eb:6d:
                    1c:73:ee:79:fd:0f:a9:76:77:3a:26:78:cc:e7:57:
                    e6:8e:b5:5d:47:0d:32:94:7e:f8:37:60:3c:bb:56:
                    7c:75:93:f9:da:72:58:a7:e3:26:2f:21:c6:2b:b8:
                    16:94:aa:dd:b7:a6:c1:bd:6c:92:29:60:d7:e9:db:
                    20:5e:98:fc:31:ba:3b:a5:d9:ef:ae:f1:c5:f3:4a:
                    a6:b6:20:2e:05:c0:df:91:6c:ee:5b:de:7a:3d:d5:
                    a0:38:c4:45:c4:a2:bc:36:89:c0:85:87:83:26:e9:
                    54:c8:ed:a1:c8:fc:5f:a7:d4:8a:2b:23:40:13:f4:
                    0f:fa:a4:30:f6:fa:eb:2b:57:32:c1:72:85:28:59:
                    95:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:9D:0C:0C:65:D2:91:C1:E4:6A:9E:CC:2A:14:32:25:7D:95:96:5D
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:73c0:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:29:e0:de:c5:33:db:37:f9:54:35:cb:d6:ef:4c:a7:c1:1e:
         f7:a5:24:57:1a:cd:35:d5:26:8c:c0:bf:f0:1f:5e:ad:67:43:
         46:3d:7f:d3:fe:6f:0a:55:bf:9d:81:18:43:6f:5c:49:9f:62:
         1b:17:6e:2b:89:85:98:ef:28:b4:9a:57:b2:c3:e5:79:f9:54:
         35:5c:8d:f5:77:c6:5b:14:6a:1b:6c:48:44:23:19:fb:6c:b8:
         55:6d:88:05:4e:8b:62:19:0c:70:d8:99:e5:11:09:65:91:50:
         ab:87:18:77:52:46:8f:e6:f3:9c:6d:18:ef:d2:7a:63:de:44:
         17:97:39:5a:93:df:ae:93:d3:a9:1a:e6:43:88:20:ef:d4:b1:
         00:66:23:17:6c:a2:12:6c:4e:65:60:73:63:82:2e:a4:08:01:
         c0:61:37:93:7e:db:fe:1a:78:d8:50:66:e3:e5:92:44:b6:f5:
         2f:22:1e:b2:0f:93:95:8e:f6:ab:6b:3a:6d:97:8e:4d:be:5e:
         13:5b:a8:56:d1:fb:26:8f:82:73:7d:04:4f:fd:52:5a:ca:8a:
         ad:71:e5:cc:2b:61:3f:13:49:bb:3c:fe:db:fb:93:dc:59:94:
         9d:a8:57:ba:c3:17:4b:42:cb:b8:f7:97:ad:0c:b7:ff:e0:5a:
         a4:d9:35:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:51:05 2026 by rpki-client