Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa
File:                     323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (raw, json)
Hash identifier:          xRrGpLwfZJRCjIbgMGjrDAMfc7dsoYw7T+d6iyUHT0A=
Subject key identifier:   D2:F8:E9:FB:3F:3F:BE:0B:26:6E:C8:46:5E:34:B2:73:6C:62:C3:3B
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       633858FF897D1A3EE96989FBC1BF2349EB5E35D9
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa
Signing time:             Fri 04 Jul 2025 12:05:03 +0000
ROA not before:           Fri 04 Jul 2025 12:00:03 +0000
ROA not after:            Fri 03 Jul 2026 12:05:03 +0000
asID:                     136792
IP address blocks:        2401:73c0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 06:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:38:58:ff:89:7d:1a:3e:e9:69:89:fb:c1:bf:23:49:eb:5e:35:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Jul  4 12:00:03 2025 GMT
            Not After : Jul  3 12:05:03 2026 GMT
        Subject: CN=D2F8E9FB3F3FBE0B266EC8465E34B2736C62C33B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b2:5b:99:92:ca:ef:09:d8:a5:8f:02:f2:72:
                    db:e5:c7:6c:2d:db:02:22:b6:1f:01:e4:02:85:ed:
                    d6:69:d3:dd:76:d7:50:d3:92:25:8b:1d:43:b5:c9:
                    1d:db:6a:75:c7:c5:af:2b:34:bb:5f:99:72:43:88:
                    d0:e4:da:da:80:be:cf:83:57:37:74:0f:0b:a1:d1:
                    95:1e:7e:3c:82:4e:2a:ed:68:c0:06:73:d9:a9:33:
                    4c:dd:ad:ab:65:15:e3:98:d2:7a:40:f2:01:71:62:
                    a9:a8:8b:20:c8:c1:38:a3:dc:5a:c5:38:21:21:18:
                    82:2f:60:ca:cc:0f:5b:ac:65:e5:07:c9:06:f0:74:
                    ae:b0:d9:15:19:78:36:a0:df:a5:75:d2:76:a1:23:
                    a5:4f:71:57:a6:6f:e5:f2:92:fb:01:e7:b8:b0:81:
                    b1:0a:d4:f2:b7:35:5e:64:d5:0f:0c:d8:f0:8c:ff:
                    14:ff:3a:3a:be:f2:92:d4:ed:ad:18:e5:99:a7:de:
                    c0:af:03:a9:33:ef:de:c4:96:96:39:ae:69:ea:38:
                    2c:34:a6:ab:96:7c:ff:78:2a:a8:c0:37:bf:ac:49:
                    71:7e:9f:d8:1f:30:0c:e6:9f:f4:09:3b:f3:7c:f6:
                    17:5c:6f:1d:96:03:7d:bf:47:2c:49:4f:9b:e2:18:
                    49:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F8:E9:FB:3F:3F:BE:0B:26:6E:C8:46:5E:34:B2:73:6C:62:C3:3B
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:73c0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:0e:4e:d8:08:6f:d5:60:32:b2:95:73:85:a8:2c:71:7e:88:
         ea:1f:a0:b2:e0:45:f9:10:80:75:6f:07:e4:fe:47:7e:f4:05:
         e5:81:e0:c3:20:ab:4c:0e:5f:f6:52:4c:b3:d9:a5:b7:e7:0b:
         bb:f2:1e:6a:e5:af:b4:04:2f:9d:fe:66:18:18:13:b8:a8:0e:
         40:1d:55:ad:bf:b1:eb:25:1a:98:a4:f0:18:d0:71:41:ee:5e:
         04:97:65:17:40:d5:04:57:27:7b:da:3c:f2:5b:60:ea:ce:b4:
         96:23:df:18:72:5e:35:4a:89:9f:e0:66:8b:93:ec:10:e6:1c:
         c4:a1:28:fe:f4:60:b7:b0:70:f7:35:ab:cc:83:8c:37:72:4d:
         ca:e8:67:ff:4d:aa:84:2c:fc:b2:6a:08:c8:bc:c7:dc:c6:d3:
         bd:7b:93:27:44:0a:ed:c2:6e:27:0d:97:9c:05:99:83:d9:b5:
         d3:72:43:4d:fe:cf:14:0a:6f:f5:b0:9b:ff:32:31:5e:e3:ff:
         e4:ec:60:42:fe:f5:20:db:49:d9:d7:27:3b:15:93:c4:2d:4e:
         e1:61:85:0f:c0:e6:72:67:75:3f:51:5b:46:1e:4d:19:d2:9c:
         95:74:c4:bf:18:1b:d1:1b:91:af:3e:7b:95:45:4a:9c:8c:d2:
         7a:29:83:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:35:51 2025 by rpki-client