Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3133302e302f32332d3234203d3e20383334.roa
File:                     3130332e3233382e3133302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          x8Og/MM0VC8p7vLhIh3nCmqBrRFXe6bvi3OEjyEjNSk=
Subject key identifier:   DA:97:87:3C:D4:F7:F0:B4:5C:A7:DC:CC:3D:DB:EE:3C:E4:23:FF:62
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       3CE4A59936AB13EFEFD51082395EF1E2C073F7E9
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3133302e302f32332d3234203d3e20383334.roa
Signing time:             Tue 29 Jul 2025 00:03:02 +0000
ROA not before:           Mon 28 Jul 2025 23:58:02 +0000
ROA not after:            Tue 28 Jul 2026 00:03:02 +0000
asID:                     834
IP address blocks:        103.238.130.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 02:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e4:a5:99:36:ab:13:ef:ef:d5:10:82:39:5e:f1:e2:c0:73:f7:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: Jul 28 23:58:02 2025 GMT
            Not After : Jul 28 00:03:02 2026 GMT
        Subject: CN=DA97873CD4F7F0B45CA7DCCC3DDBEE3CE423FF62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cd:9f:8d:9b:f1:3b:8a:fc:22:a0:c7:1c:4a:
                    87:b9:37:ad:a9:b3:92:46:15:8d:46:42:3f:c5:c8:
                    ae:a8:fc:d1:b2:b2:9a:14:40:01:94:18:4a:9e:f3:
                    fe:62:76:fb:b6:68:1f:c5:7a:63:c8:41:92:6e:e9:
                    ac:ab:f9:9d:ca:5e:1a:21:a1:c2:c0:93:f8:e8:2d:
                    b3:97:b6:6a:bb:c5:03:9c:92:0c:12:3b:5f:76:9e:
                    9b:05:1f:1d:38:97:cf:31:e0:59:5c:83:05:c4:23:
                    c4:35:b9:75:62:5b:0e:6a:bb:9b:c2:86:9b:c8:63:
                    c8:f6:63:70:8a:20:4b:f5:e8:e1:17:f7:79:bd:46:
                    12:3f:46:58:c1:f4:f1:cb:5e:f2:8a:8b:9c:3e:34:
                    73:76:f6:fd:d3:cc:c5:58:52:75:25:b4:50:82:36:
                    21:77:a7:eb:2f:26:3f:1d:0d:0a:ea:22:f8:0d:4f:
                    aa:4a:9d:32:d2:35:4c:df:7e:35:6f:6b:3a:93:24:
                    93:61:cc:1a:2e:e2:93:2e:95:80:57:54:08:8e:3b:
                    2f:8e:11:92:50:be:7c:dd:d6:64:ec:aa:07:8e:90:
                    af:ae:ea:8e:f4:07:c2:56:d7:f5:03:de:bf:89:d9:
                    13:a5:dc:eb:79:f1:93:54:a7:49:4d:00:68:3a:93:
                    49:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:97:87:3C:D4:F7:F0:B4:5C:A7:DC:CC:3D:DB:EE:3C:E4:23:FF:62
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3133302e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:f5:a1:cc:f3:3f:e1:24:fc:97:23:5c:c2:2e:96:b0:eb:a5:
         2e:50:96:92:cd:7a:8a:0b:13:04:e6:eb:98:de:16:20:58:49:
         97:c1:c6:11:fc:2a:ca:f6:af:a7:8a:d1:07:4d:00:8d:35:b5:
         1b:ac:0e:de:c2:11:7d:5c:8a:ba:bf:ca:fa:62:71:24:07:d1:
         c0:10:b7:95:f4:01:6f:23:61:b2:68:63:a3:68:58:f1:ab:d6:
         da:91:75:0d:52:16:f6:68:22:73:c6:85:93:82:7c:47:3a:e2:
         42:33:26:33:d2:10:fb:17:6d:1b:2b:67:5a:56:b9:d7:1b:a9:
         a9:d4:e0:6a:e8:1e:3b:3f:a2:a4:f8:02:3a:3b:e0:c9:46:77:
         0e:60:b9:b1:8e:88:97:ec:80:cd:83:92:f0:e0:dd:02:10:4e:
         af:a1:54:38:64:92:a2:60:90:0a:ae:f8:95:59:bd:d7:41:1b:
         ad:05:ef:00:6b:5c:a5:ec:71:bd:9d:d2:7a:48:74:33:25:24:
         66:2b:21:6d:3c:93:3c:1a:66:d6:2d:fd:4e:25:f0:68:40:a3:
         aa:f8:9b:8a:61:e8:e8:3e:69:01:d9:31:1f:3d:4a:31:b9:ab:
         da:f2:e9:b8:54:fd:23:f3:e9:84:66:9c:fd:67:0d:ad:7c:b2:
         7f:ec:ac:a6
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIUPOSlmTarE+/v1RCCOV7x4sBz9+kwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4
NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI1MDcyODIzNTgwMloX
DTI2MDcyODAwMDMwMlowMzExMC8GA1UEAxMoREE5Nzg3M0NENEY3RjBCNDVDQTdE
Q0NDM0REQkVFM0NFNDIzRkY2MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMjNn42b8TuK/CKgxxxKh7k3ramzkkYVjUZCP8XIrqj80bKymhRAAZQYSp7z
/mJ2+7ZoH8V6Y8hBkm7prKv5ncpeGiGhwsCT+Ogts5e2arvFA5ySDBI7X3aemwUf
HTiXzzHgWVyDBcQjxDW5dWJbDmq7m8KGm8hjyPZjcIogS/Xo4Rf3eb1GEj9GWMH0
8cte8oqLnD40c3b2/dPMxVhSdSW0UII2IXen6y8mPx0NCuoi+A1PqkqdMtI1TN9+
NW9rOpMkk2HMGi7iky6VgFdUCI47L44RklC+fN3WZOyqB46Qr67qjvQHwlbX9QPe
v4nZE6Xc63nxk1SnSU0AaDqTSVMCAwEAAaOCAg8wggILMB0GA1UdDgQWBBTal4c8
1PfwtFyn3Mw92+485CP/YjAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64
ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4
QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2
dkhRY0JmTm1ITGV0cU91QUEuY2VyMIGJBggrBgEFBQcBCwR9MHsweQYIKwYBBQUH
MAuGbXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxQTYx
MzEwMDAwLzAvMzEzMDMzMmUzMjMzMzgyZTMxMzMzMDJlMzAyZjMyMzMyZDMyMzQy
MDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWfugjANBgkqhkiG9w0BAQsFAAOCAQEA
k/WhzPM/4ST8lyNcwi6WsOulLlCWks16igsTBObrmN4WIFhJl8HGEfwqyvavp4rR
B00AjTW1G6wO3sIRfVyKur/K+mJxJAfRwBC3lfQBbyNhsmhjo2hY8avW2pF1DVIW
9mgic8aFk4J8RzriQjMmM9IQ+xdtGytnWla51xupqdTgaugeOz+ipPgCOjvgyUZ3
DmC5sY6Il+yAzYOS8ODdAhBOr6FUOGSSomCQCq74lVm910EbrQXvAGtcpexxvZ3S
ekh0MyUkZishbTyTPBpm1i39TiXwaECjqvibimHo6D5pAdkxHz1KMbmr2vLpuFT9
I/PphGac/WcNrXyyf+yspg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 03:57:08 2025 by rpki-client