Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32312e302f32342d3234203d3e20313336373932.roa
File:                     3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (raw, json)
Hash identifier:          USSBQ0KO8gaMDlA+GDV+aFp9hJq0b5KVRef+eZuxDns=
Subject key identifier:   D5:B2:F7:C0:58:9B:14:38:A2:23:E8:BB:EB:49:C2:36:06:84:39:AB
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       79928578215AAD2728088329CA9B6C6F60B35F0E
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32312e302f32342d3234203d3e20313336373932.roa
Signing time:             Fri 04 Jul 2025 12:05:03 +0000
ROA not before:           Fri 04 Jul 2025 12:00:03 +0000
ROA not after:            Fri 03 Jul 2026 12:05:03 +0000
asID:                     136792
IP address blocks:        103.96.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 06:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:92:85:78:21:5a:ad:27:28:08:83:29:ca:9b:6c:6f:60:b3:5f:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Jul  4 12:00:03 2025 GMT
            Not After : Jul  3 12:05:03 2026 GMT
        Subject: CN=D5B2F7C0589B1438A223E8BBEB49C236068439AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a8:fb:a4:ae:f7:51:50:1b:d0:a0:6c:18:d4:
                    79:7a:2a:df:55:8f:4f:31:8c:33:f5:8b:c0:ff:be:
                    20:7c:47:5e:d3:89:a6:aa:b8:3b:c6:99:7d:d9:4d:
                    99:ef:a1:36:fc:3f:20:1c:e0:13:b1:be:52:b9:69:
                    e1:15:89:90:67:2a:ec:f0:aa:4e:8f:8d:42:e9:74:
                    16:01:c1:ea:57:ed:ac:97:15:d8:37:8c:15:c3:eb:
                    17:b2:dd:70:e1:b5:d4:df:51:32:cf:c1:66:d7:66:
                    8d:2e:e0:18:18:4a:90:fc:52:dc:ce:de:4e:0d:b1:
                    96:0e:8c:76:c8:b7:a9:68:20:81:63:d5:6c:3c:ce:
                    1e:cb:e6:07:d2:ad:d5:71:cd:46:3d:50:26:9d:84:
                    86:67:b4:41:93:21:a2:06:65:85:3e:e7:ed:ec:3a:
                    0b:a7:ed:6a:75:72:f1:70:7d:18:ae:a0:c6:4a:ab:
                    33:06:b8:93:4b:39:22:a8:fe:e7:06:7e:38:09:85:
                    fe:37:fc:78:61:9e:95:c0:37:ac:3e:1a:26:49:e5:
                    65:41:b5:0f:3b:bd:e4:f4:7b:62:c9:aa:b3:b7:da:
                    36:e6:d1:8e:a7:21:f5:fd:28:09:38:3c:b8:59:0f:
                    9f:f0:04:cb:68:06:a9:44:a1:48:de:ba:1c:a9:e2:
                    b5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B2:F7:C0:58:9B:14:38:A2:23:E8:BB:EB:49:C2:36:06:84:39:AB
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32312e302f32342d3234203d3e20313336373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:30:5e:f0:1e:eb:71:a3:36:77:24:c4:bd:48:3c:9f:70:60:
         e5:69:55:22:07:dd:3b:df:64:e8:55:c7:d0:47:cc:b1:51:d6:
         4b:40:62:55:13:dd:69:ff:47:6d:29:4b:9d:92:0c:44:52:99:
         32:0e:78:63:de:fc:25:fe:a4:a1:bf:c9:6c:b0:ba:94:b4:d6:
         8b:90:6d:9e:b4:40:df:36:24:f5:ae:47:30:e8:4c:f6:c9:d8:
         01:aa:dc:7d:02:1c:01:8a:69:ca:7a:43:64:21:f9:97:26:6f:
         9d:2d:63:ef:40:18:93:e0:65:0b:6b:cc:92:63:20:6c:ab:15:
         2a:5e:25:1a:7c:05:49:0f:4b:44:ba:d2:cb:1e:ae:5d:bb:3e:
         3a:b7:c3:eb:58:38:a0:5a:2f:e9:97:d3:43:12:94:22:d7:b8:
         74:a0:dc:46:58:e9:61:2a:17:00:d8:99:ae:02:1a:17:53:87:
         55:99:5f:7d:e3:d3:62:2a:45:44:94:25:3c:3a:8c:28:3e:5e:
         fd:44:12:c5:56:a6:c5:87:62:94:5a:f6:39:18:6f:54:c9:f6:
         f7:cb:4b:67:bb:fd:5d:93:fb:52:60:90:23:8d:d8:c7:00:7b:
         49:d3:9d:b1:a5:08:e0:b7:b3:52:fc:e9:3b:bc:66:66:d5:56:
         d6:47:33:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:38:54 2025 by rpki-client