Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3133312e302f32342d3234203d3e20383334.roa
File:                     3130332e3233382e3133312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          6IgcwjRKb6astouhD9WExOS+krHxCK0bUKZX+Qgmb5s=
Subject key identifier:   FE:40:BE:83:E3:67:6E:19:80:97:2C:09:57:40:8E:18:90:D6:B6:F9
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       4A983F9A948AD8A4FCD60D37BAD95EE3AE87BD3B
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3133312e302f32342d3234203d3e20383334.roa
Signing time:             Thu 26 Jun 2025 12:51:41 +0000
ROA not before:           Thu 26 Jun 2025 12:46:41 +0000
ROA not after:            Thu 25 Jun 2026 12:51:41 +0000
asID:                     834
IP address blocks:        103.238.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Jul 2025 04:14:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:98:3f:9a:94:8a:d8:a4:fc:d6:0d:37:ba:d9:5e:e3:ae:87:bd:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: Jun 26 12:46:41 2025 GMT
            Not After : Jun 25 12:51:41 2026 GMT
        Subject: CN=FE40BE83E3676E1980972C0957408E1890D6B6F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fc:07:bc:64:e5:f2:58:99:ba:b2:fa:32:79:
                    f8:7c:c1:b9:9c:06:8b:07:04:5b:c4:df:6d:1d:28:
                    25:c0:28:b9:55:c1:6c:f9:79:a8:4a:b0:11:b2:a2:
                    ac:85:3a:cc:a6:c1:d9:ec:2b:e6:de:e5:ee:fb:45:
                    71:3d:66:95:e6:c3:fa:93:53:e5:54:3d:1d:12:6d:
                    cd:d6:55:de:4b:05:fb:5d:ce:2f:29:18:e0:fb:6d:
                    fd:40:5c:30:bc:74:5a:96:b4:06:df:04:bb:cb:dc:
                    fd:06:89:4d:5c:54:60:51:af:2a:0c:82:95:99:49:
                    d2:7b:c3:b4:70:51:ec:ab:3f:e3:f8:28:18:f4:14:
                    53:41:e6:b0:bf:28:6b:ec:82:25:82:a0:eb:62:78:
                    b3:79:44:df:2c:82:e6:eb:bb:7c:44:d8:8c:7b:ae:
                    a7:8a:43:be:34:cb:ee:b9:b7:d8:21:6f:a6:56:db:
                    77:93:d8:0d:ac:8c:1b:57:ad:d7:d2:cf:82:57:bd:
                    cc:d2:01:d1:65:93:c6:72:e1:09:d4:0f:03:e9:61:
                    f4:7f:a5:c7:db:4b:02:08:f1:95:73:aa:46:0b:48:
                    44:45:2f:f8:f4:b1:dd:e1:9c:5c:98:37:5b:c5:9d:
                    a3:ce:ad:9d:19:4b:ae:ea:36:01:67:58:a2:80:50:
                    df:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:40:BE:83:E3:67:6E:19:80:97:2C:09:57:40:8E:18:90:D6:B6:F9
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3133312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:db:9e:91:8a:e8:3c:24:d8:aa:92:48:46:bf:44:4f:2a:ff:
         8d:c8:20:73:9c:51:b2:2e:5d:aa:b9:e4:f8:c9:f2:3a:99:d2:
         a5:50:8c:85:50:88:e3:b9:3a:54:48:31:73:14:53:5a:0a:71:
         4e:dc:bf:55:cb:1c:f1:10:31:55:52:4f:dc:87:ab:96:55:57:
         12:4a:39:76:d8:17:69:a1:c7:97:31:e5:17:da:02:93:a6:f2:
         1c:c6:b4:9f:5d:25:93:35:bd:b1:dc:8b:4e:55:1a:3c:a9:21:
         0e:46:27:41:ac:93:87:5d:3d:42:0a:4d:11:33:f2:a7:0f:ec:
         e6:02:01:75:20:d8:65:98:b4:bf:5d:48:72:65:6e:b2:e1:8a:
         65:8f:1d:a0:50:81:9d:76:26:c1:62:d4:a5:09:11:11:f3:10:
         35:19:2d:24:62:7a:5d:d5:24:a9:ef:70:de:4a:9a:ba:59:5f:
         1b:64:b4:06:f0:9a:bd:1a:71:27:45:a7:37:8c:77:ce:64:c3:
         3a:11:35:83:49:f5:a1:1d:16:7b:a9:36:62:0a:72:61:9e:57:
         ff:a5:6f:29:b4:45:8e:9e:d9:9e:43:9d:5c:55:f3:9f:e1:ea:
         6f:1f:5f:34:0a:4b:92:5c:b1:b6:6c:ef:6f:54:aa:02:69:e3:
         7e:23:45:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:42:37 2025 by rpki-client