Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32302e302f32342d3234203d3e20313336373932.roa
File:                     3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (raw, json)
Hash identifier:          Qyqwgt21fB6lpMY0G0qwQMSWktAoF99c4sTJOQKQlDk=
Subject key identifier:   89:75:9A:F5:5F:F8:79:EE:89:FC:F1:D0:2F:5E:3A:F5:87:BE:21:B5
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       2293CCEF4A057213D1D262B0AFA64D09BAC8A6E2
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32302e302f32342d3234203d3e20313336373932.roa
Signing time:             Fri 04 Jul 2025 12:05:03 +0000
ROA not before:           Fri 04 Jul 2025 12:00:03 +0000
ROA not after:            Fri 03 Jul 2026 12:05:03 +0000
asID:                     136792
IP address blocks:        103.96.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 12:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:93:cc:ef:4a:05:72:13:d1:d2:62:b0:af:a6:4d:09:ba:c8:a6:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Jul  4 12:00:03 2025 GMT
            Not After : Jul  3 12:05:03 2026 GMT
        Subject: CN=89759AF55FF879EE89FCF1D02F5E3AF587BE21B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5e:b1:43:67:dd:e0:3b:8c:30:5c:a9:24:f7:
                    00:bc:d5:e7:70:49:e9:7a:7e:bd:45:49:d5:de:de:
                    bd:e0:dc:67:82:c2:1f:4b:cb:a2:7c:32:df:be:72:
                    5f:31:7a:a6:69:aa:c3:10:85:59:3d:9c:75:f0:09:
                    09:a9:da:5a:aa:bc:ba:5a:e9:2d:2d:c3:27:d2:c7:
                    e3:20:8c:7b:e1:57:ea:dc:54:55:6f:ac:2a:34:d8:
                    f3:14:6c:5b:80:8c:cc:8b:f6:ef:aa:27:3f:1d:4e:
                    70:e4:39:fb:27:2a:39:16:33:3c:2e:a7:9e:89:df:
                    42:75:10:1f:fc:4e:8d:8b:f9:25:bc:9a:0c:92:02:
                    96:a5:11:41:9e:97:1e:f4:48:a7:7d:1f:02:c6:ad:
                    c9:b9:1d:5b:3c:eb:a7:92:ab:e6:f1:59:fa:2c:48:
                    f8:2c:c3:9a:3d:fb:b4:ec:22:a9:7b:e4:84:28:6a:
                    e0:20:4d:53:d9:14:62:75:53:ed:e4:39:24:b8:22:
                    3d:a1:2f:54:b5:8c:48:af:55:3e:45:27:df:12:55:
                    c8:db:86:76:19:19:cc:88:0f:86:a6:8e:ff:07:f2:
                    14:d7:a7:d6:0f:17:af:27:d2:4e:66:02:55:57:01:
                    43:88:6d:29:ec:4f:08:5d:b3:1f:31:c7:79:a8:24:
                    1d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:75:9A:F5:5F:F8:79:EE:89:FC:F1:D0:2F:5E:3A:F5:87:BE:21:B5
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32302e302f32342d3234203d3e20313336373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:33:c5:08:35:21:c9:3d:77:7e:0d:6d:f0:b8:60:e7:e5:64:
         dd:02:83:66:58:ad:c6:ab:d4:e8:cb:eb:28:e9:23:6f:0b:da:
         a9:e4:55:2d:57:62:56:82:27:2b:80:ba:f5:5b:e2:37:fc:0e:
         40:23:2e:4e:f9:ab:3e:50:21:41:56:4f:00:ec:67:fb:17:b5:
         d1:1a:d2:df:87:07:3b:8a:7b:b1:d2:74:80:d2:2b:a7:d4:fe:
         cb:68:4a:44:81:fe:35:1c:e3:47:05:55:a4:61:1d:6a:f8:1b:
         ac:9d:bf:f3:18:9a:e8:17:12:fc:7d:4a:7d:48:12:82:1f:b0:
         8d:e2:3f:42:69:b0:6f:66:9f:af:21:03:ea:da:79:d8:60:94:
         8e:6e:64:04:c9:a0:03:20:98:bf:22:bf:9b:1e:30:a3:cd:06:
         48:09:e7:db:4a:1b:18:ef:88:f0:89:7f:93:39:2e:7d:2b:55:
         60:b5:8e:8d:9d:f4:91:8d:90:c9:ce:1b:9b:68:fc:80:0d:86:
         1e:58:e5:0f:ac:ed:77:01:1d:fb:0e:8e:5c:af:c9:75:54:ad:
         2e:b4:65:e7:24:1d:62:3f:f2:58:6d:64:28:34:78:3c:85:84:
         c1:f1:13:21:ad:55:d3:c3:30:56:d8:19:90:9e:66:64:b1:f9:
         7a:de:8b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 15:43:17 2025 by rpki-client