Route Origin Authorization

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa
File:                     3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa (raw, json)
Hash identifier:          mRp4vY4H0by9mj0sSASpANHm18slHi1+kwE1GgClbCA=
Subject key identifier:   57:A9:5A:30:7F:E2:E0:CB:72:F3:E0:D9:6E:C9:C5:9D:F3:35:4D:C2
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       0B8A93C7E68F1E919FC705F9941A8CE5BE267A3F
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa
Signing time:             Thu 10 Sep 2026 14:03:55 +0000
ROA not before:           Thu 10 Sep 2026 13:58:55 +0000
ROA not after:            Thu 09 Sep 2027 14:03:55 +0000
asID:                     401443
IP address blocks:        103.238.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Sep 2026 09:18:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:8a:93:c7:e6:8f:1e:91:9f:c7:05:f9:94:1a:8c:e5:be:26:7a:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: Sep 10 13:58:55 2026 GMT
            Not After : Sep  9 14:03:55 2027 GMT
        Subject: CN=57A95A307FE2E0CB72F3E0D96EC9C59DF3354DC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0a:ac:a9:b4:c8:71:ac:96:7c:3d:bd:82:21:
                    4e:ef:0b:6f:61:a3:e3:ea:64:85:e7:0e:ab:a4:08:
                    62:d9:cc:4c:a3:14:c7:11:3a:3b:87:48:72:e6:79:
                    3d:5f:da:07:0e:2b:bd:3d:90:e3:4b:15:53:ef:0d:
                    54:b5:f7:65:6c:de:e9:19:6d:0a:8d:fe:be:27:f5:
                    32:3e:61:c6:70:7a:24:38:b1:d8:6e:96:b8:01:c3:
                    63:d5:55:29:fb:71:d8:f4:48:90:27:82:e1:7a:a4:
                    17:8c:01:88:9f:95:16:92:89:c9:41:21:57:a4:44:
                    7d:fa:55:eb:8b:5f:35:89:bb:62:03:74:8e:a5:a3:
                    89:1a:1c:05:8e:d5:3e:eb:78:75:00:f5:a3:24:ae:
                    d9:a0:a0:ed:7b:57:f1:78:59:0b:cc:62:cb:ed:bc:
                    6c:6f:7d:d1:74:af:b8:46:c9:d8:e1:c1:37:10:bd:
                    c3:da:c2:0e:a1:b8:b8:40:a4:8d:86:c5:ab:9d:cc:
                    b3:c3:b1:df:1a:23:18:77:15:4b:24:20:d4:33:4a:
                    f7:e7:5a:0b:18:7d:00:56:ab:f3:f7:65:1d:dc:82:
                    0c:d1:a3:b6:3f:02:57:8a:96:88:25:fe:46:82:35:
                    ab:94:e3:13:7d:ab:a0:3c:ed:a6:aa:6d:ca:f1:8a:
                    7f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A9:5A:30:7F:E2:E0:CB:72:F3:E0:D9:6E:C9:C5:9D:F3:35:4D:C2
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:cb:39:d5:5c:8a:7a:f2:6d:d1:d9:59:a6:4d:a1:f3:97:3c:
         34:77:78:7d:1f:90:5d:6d:6b:b2:9e:f5:a7:40:38:9f:60:87:
         37:f1:10:59:11:ad:dc:8e:a0:89:30:2e:32:c5:60:99:b4:43:
         c2:45:dc:77:7a:52:31:c4:93:7d:f4:a1:33:2c:aa:4f:9f:5f:
         f8:6b:35:c2:67:d4:55:ce:2c:6b:4a:da:f0:7a:01:a5:59:f0:
         d8:c7:9e:f9:90:94:2b:09:b6:90:df:d0:d0:f8:40:85:b9:74:
         13:ef:8a:fc:7c:ce:91:a8:63:f1:fe:d3:2f:ef:b0:6d:4c:61:
         c5:84:3d:4a:08:33:54:f6:c6:94:e1:f7:bc:51:9d:d8:bd:51:
         6b:e1:8a:e8:a1:a6:ac:8c:79:c1:14:95:3c:27:4e:b1:93:30:
         5e:05:ce:7e:15:1b:2d:8f:c7:ac:54:e1:26:96:6d:03:5b:8f:
         8b:6b:2d:7d:09:fd:a8:38:b7:81:2b:45:a1:8e:ce:0e:15:86:
         bd:e7:7e:6f:4b:a7:a8:12:9f:3c:ab:8e:60:9c:ab:7d:4d:51:
         e4:20:55:3c:ef:a2:9a:ce:cd:be:f1:10:09:e4:c6:da:cb:b1:
         f2:c0:03:37:1f:80:43:93:cb:87:a0:84:c2:ca:4c:b9:c5:b4:
         1e:88:ab:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 15:56:04 2026 by rpki-client