Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/3130332e3234382e35302e302f32342d3234203d3e203234333232.roa
File:                     3130332e3234382e35302e302f32342d3234203d3e203234333232.roa (raw, json)
Hash identifier:          s7+xLdhTwjCqsTRbOUnk8hwqSaj78i9fdt/EWoEqRro=
Subject key identifier:   EC:63:93:A0:D1:B1:55:01:AE:06:6F:0D:6C:59:85:66:72:46:0C:E3
Certificate issuer:       /CN=A9150E4D0000/serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Certificate serial:       4E442DED9BEC85074F716953E2387D60C762BE7E
Authority key identifier: 47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/3130332e3234382e35302e302f32342d3234203d3e203234333232.roa
Signing time:             Wed 17 Jun 2026 12:58:29 +0000
ROA not before:           Wed 17 Jun 2026 12:53:29 +0000
ROA not after:            Wed 16 Jun 2027 12:58:29 +0000
asID:                     24322
IP address blocks:        103.248.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
                          rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 15 Jul 2026 21:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:44:2d:ed:9b:ec:85:07:4f:71:69:53:e2:38:7d:60:c7:62:be:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E4D0000, serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
        Validity
            Not Before: Jun 17 12:53:29 2026 GMT
            Not After : Jun 16 12:58:29 2027 GMT
        Subject: CN=EC6393A0D1B15501AE066F0D6C59856672460CE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:00:5e:58:9d:16:93:8b:c6:24:44:c8:8d:e2:
                    c7:d8:13:78:85:1b:32:3c:71:2d:77:12:a2:c7:46:
                    f7:01:aa:fc:d4:a2:7e:29:d0:e4:43:b9:96:fd:1d:
                    73:9d:99:e7:d7:27:d7:b6:b4:10:7b:35:78:77:f3:
                    54:2f:55:2d:28:09:cc:60:0b:d0:cd:a5:ad:d2:d6:
                    50:ae:cd:28:18:5c:50:8d:f7:70:ed:8b:1a:0c:83:
                    dd:58:6c:f8:41:df:76:a7:b1:09:82:77:d2:66:47:
                    99:8a:89:59:27:0d:ee:d4:42:76:3a:75:b1:ca:44:
                    8d:ad:28:50:ce:fa:69:6a:5a:b1:68:51:c5:e6:14:
                    c5:27:6e:45:bd:36:8d:32:12:5e:59:90:82:da:8b:
                    b8:2c:ed:c3:3a:0e:f2:09:cc:68:96:e9:32:09:9f:
                    e0:f2:df:4a:d2:8d:92:2f:64:8e:66:de:f7:e0:c2:
                    1e:5f:4c:8b:97:c7:dc:aa:f0:c4:26:da:95:91:fa:
                    9b:da:85:2c:4d:cc:07:63:89:17:b3:8a:ce:62:4b:
                    07:3b:ad:f2:c4:e3:07:6f:01:4e:f8:35:f0:68:d4:
                    f6:f1:03:9a:21:b2:e2:03:81:47:13:46:58:b9:17:
                    1f:eb:b1:1a:e2:41:0b:b7:90:69:f0:41:86:57:01:
                    35:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:63:93:A0:D1:B1:55:01:AE:06:6F:0D:6C:59:85:66:72:46:0C:E3
            X509v3 Authority Key Identifier:
                keyid:47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/3130332e3234382e35302e302f32342d3234203d3e203234333232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:10:3e:0b:c8:a2:8d:ac:84:24:5f:ab:44:ce:54:28:94:e6:
         72:d9:86:d6:4c:8d:82:0e:be:00:be:ad:d0:da:29:c9:67:c4:
         06:40:57:20:d8:09:84:92:dc:3f:fb:d4:91:72:66:03:8b:fc:
         fb:c4:d1:11:4a:68:bf:03:51:03:38:76:4f:8e:2b:f6:a4:7d:
         9c:96:6d:9c:17:b1:73:9d:78:34:0c:ad:10:59:8b:31:c1:db:
         7e:21:79:28:99:94:53:f6:63:9f:5c:71:b9:1c:7d:b8:3b:03:
         66:aa:ab:e1:aa:e0:d9:d9:15:89:eb:0a:4a:f4:db:75:54:05:
         1b:68:17:12:4b:0c:63:25:5a:49:42:51:ef:bc:84:75:d0:f8:
         d6:fa:f4:7b:2c:60:a6:f6:5b:4d:12:a4:b0:22:9c:6b:85:dd:
         23:7b:fe:01:1a:49:66:33:22:02:06:d4:0f:90:36:3d:f7:aa:
         b6:01:f6:8c:46:c5:9a:a4:00:be:61:1b:5a:08:8b:bc:ca:6f:
         e5:55:cb:8b:ff:6b:07:26:58:0b:8e:9e:d0:d9:7a:4a:60:be:
         65:1b:e0:fe:e1:91:98:f8:4a:b1:87:96:22:4e:77:d2:f1:8b:
         c5:ec:5a:24:d4:1d:35:d1:d7:06:ed:c9:62:95:d2:79:d1:6f:
         5d:76:f9:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 15:33:33 2026 by rpki-client