Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32332e302f32342d3234203d3e20313336373932.roa
File:                     3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (raw, json)
Hash identifier:          yaa8ol4LgB22fW2W1ZJmKPPE5Gh61YXf2HgbAKpQtds=
Subject key identifier:   B3:42:94:E7:84:24:66:73:61:DB:7D:15:BB:5E:2A:C7:44:FD:0D:A9
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       65CB08DDC7D74138DBE2F3460048BAB3C4FF166D
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32332e302f32342d3234203d3e20313336373932.roa
Signing time:             Fri 04 Jul 2025 12:05:03 +0000
ROA not before:           Fri 04 Jul 2025 12:00:03 +0000
ROA not after:            Fri 03 Jul 2026 12:05:03 +0000
asID:                     136792
IP address blocks:        103.96.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 06:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:cb:08:dd:c7:d7:41:38:db:e2:f3:46:00:48:ba:b3:c4:ff:16:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Jul  4 12:00:03 2025 GMT
            Not After : Jul  3 12:05:03 2026 GMT
        Subject: CN=B34294E78424667361DB7D15BB5E2AC744FD0DA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1e:7c:e3:66:89:f3:fa:23:4b:96:c4:a2:2f:
                    40:c5:b8:6b:b1:66:4b:61:9b:64:2d:17:78:01:17:
                    05:3c:c9:60:b3:55:7e:56:68:30:7e:20:e0:c8:66:
                    66:1d:9a:f3:64:51:f1:b8:64:30:07:f6:0c:fd:8f:
                    bf:18:bd:36:d5:ab:1c:69:13:02:9f:aa:08:b5:be:
                    5d:94:12:b0:e1:ac:f7:33:86:66:fd:de:43:c0:1e:
                    1c:bf:3d:e4:49:02:d0:a7:9a:ad:d3:06:e8:93:8d:
                    75:02:d2:b9:1b:89:39:0e:fe:02:a7:9f:dd:fd:bb:
                    34:89:39:d5:9d:64:d1:28:dc:f1:87:aa:28:7b:f6:
                    94:a0:b1:1f:d6:1b:72:8d:d9:40:ac:4e:d5:08:a9:
                    35:c0:58:80:ff:8f:ae:2b:41:29:4b:43:f2:06:0c:
                    7a:28:b6:dc:61:c9:78:36:a2:41:57:ac:c0:84:32:
                    23:e4:0a:14:07:58:59:79:4b:96:56:fb:37:73:99:
                    81:78:f4:87:61:93:ed:19:af:dc:3a:0d:d1:1e:8d:
                    df:3d:b1:a4:a0:00:e1:d1:ab:8c:cb:06:35:98:92:
                    f9:4c:dc:e7:6b:8d:c6:53:85:46:00:3f:c8:94:4a:
                    4b:60:89:a1:aa:6f:41:72:7c:1b:02:32:c3:c2:56:
                    d4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:42:94:E7:84:24:66:73:61:DB:7D:15:BB:5E:2A:C7:44:FD:0D:A9
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32332e302f32342d3234203d3e20313336373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         df:d6:dd:d8:da:00:6f:4c:52:36:22:95:3d:44:26:66:b0:52:
         a4:4d:57:8a:6e:fa:0c:47:f3:a8:fe:7f:29:d6:b9:a4:b2:24:
         7b:2b:8a:94:ef:fa:a3:a3:c6:8e:54:67:22:49:cb:31:73:5f:
         d7:39:b6:db:6a:92:e0:53:1d:a2:f7:b9:c5:b8:cf:a1:0c:64:
         57:51:a8:a8:61:a6:95:82:1c:d8:ee:e6:27:f7:97:08:ce:4e:
         cd:0c:d0:40:c3:cb:ac:11:5b:60:7d:4f:4f:9e:e2:56:9d:52:
         b2:47:7a:86:8e:4a:d4:cb:1c:70:5b:04:02:a9:2d:90:cf:21:
         18:77:31:ea:0a:66:80:71:6f:b6:a4:b8:f6:40:97:5a:86:94:
         09:f6:98:d9:35:d4:9b:2c:d1:36:b8:54:a9:17:30:0c:5a:56:
         97:67:7b:2f:c1:40:6d:84:d1:ba:5b:60:3e:cf:43:6b:10:df:
         0e:55:28:ba:e7:e5:6a:28:a7:7c:f4:0f:1f:58:53:91:48:aa:
         e5:f9:8d:55:4b:4e:7e:d3:47:48:42:1a:3d:ab:30:46:3a:56:
         6d:f6:fb:36:36:82:8d:48:28:50:6e:57:99:17:e5:c4:20:11:
         28:b0:26:4f:e2:2c:c3:2e:5e:74:dc:50:48:33:41:2a:82:76:
         91:e0:c9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:38:54 2025 by rpki-client