Route Origin Authorization

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a313333373a3a2f34382d3438203d3e20313437303230.roa
File:                     323430313a323036303a313333373a3a2f34382d3438203d3e20313437303230.roa (raw, json)
Hash identifier:          e5LOlhZHnt+foZzN47ojsqOdIDCop8hHSrX4aAWovSU=
Subject key identifier:   BF:D4:0C:7B:6D:0C:46:1A:8F:1C:F5:5F:25:99:45:EF:18:E4:A2:2A
Certificate issuer:       /CN=A9150E4D0000/serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Certificate serial:       11F65DC87635A0C307442A4A50AD3972066984BC
Authority key identifier: 47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a313333373a3a2f34382d3438203d3e20313437303230.roa
Signing time:             Tue 08 Sep 2026 00:03:30 +0000
ROA not before:           Mon 07 Sep 2026 23:58:30 +0000
ROA not after:            Tue 07 Sep 2027 00:03:30 +0000
asID:                     147020
IP address blocks:        2401:2060:1337::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
                          rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Sep 2026 18:18:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:f6:5d:c8:76:35:a0:c3:07:44:2a:4a:50:ad:39:72:06:69:84:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E4D0000, serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
        Validity
            Not Before: Sep  7 23:58:30 2026 GMT
            Not After : Sep  7 00:03:30 2027 GMT
        Subject: CN=BFD40C7B6D0C461A8F1CF55F259945EF18E4A22A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:09:d3:c2:d7:ba:22:3c:c1:54:8c:56:df:c4:
                    41:8a:6a:bf:39:9e:e1:c6:fc:c9:3f:37:d6:b4:28:
                    b4:a2:95:05:97:34:3d:bc:88:a9:9e:15:8f:81:bb:
                    47:3f:46:3f:1f:95:64:97:ba:2f:f9:b5:88:15:40:
                    e7:06:a5:b7:57:8a:17:ca:a1:2d:c4:78:ac:54:08:
                    76:33:4d:51:79:3b:ef:c0:51:0e:95:e8:ee:d3:a2:
                    10:08:57:89:48:7e:00:42:2e:c2:10:e9:7d:b0:9e:
                    3e:ee:f8:b8:e9:f8:0c:f2:04:96:d9:d4:20:08:1a:
                    72:d2:61:4b:e5:12:94:7c:ac:8d:b2:ea:1a:2b:f6:
                    62:2e:6b:28:2a:48:91:3c:b0:56:b3:6e:d6:84:d0:
                    0b:2f:f9:ed:a2:18:36:f1:fb:f1:87:82:c7:be:b0:
                    e4:60:06:9c:dc:3c:b1:ec:cc:76:e6:99:ea:ab:6f:
                    8e:65:a3:c8:d9:f4:2f:a2:f0:bb:b4:8f:b9:a6:a0:
                    16:f7:9a:8b:86:66:60:a0:f2:4b:19:b6:f0:2c:8b:
                    14:08:e8:03:3a:ef:c6:c5:f8:b5:97:6d:63:8e:1b:
                    e2:e9:d4:0a:98:68:d7:99:58:49:05:fe:5e:aa:7e:
                    71:52:4e:3a:00:c0:3b:b2:e9:8c:39:e4:6f:79:24:
                    ae:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D4:0C:7B:6D:0C:46:1A:8F:1C:F5:5F:25:99:45:EF:18:E4:A2:2A
            X509v3 Authority Key Identifier:
                keyid:47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a313333373a3a2f34382d3438203d3e20313437303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2060:1337::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:ff:50:13:64:dc:9d:67:9b:52:32:8d:36:e0:32:be:ac:46:
         23:26:96:73:68:86:28:12:ef:e3:8e:f1:1e:09:60:7f:f6:69:
         67:bc:b6:ee:3e:7f:96:53:10:13:45:47:0c:e9:e6:be:41:45:
         b3:05:89:d9:bc:ce:15:99:a7:1d:af:df:98:28:c4:bd:6f:e1:
         f4:b1:f7:a9:c2:d3:db:4b:9b:ca:c0:bf:47:c4:eb:a7:f6:4a:
         ff:ed:c8:06:da:bf:7b:8a:f2:d1:ef:10:9c:4a:94:15:55:8c:
         15:05:a8:72:ad:54:bc:93:99:5b:21:19:ac:ab:da:34:bc:d1:
         30:3e:21:e8:0c:eb:1d:65:8f:55:08:5a:8c:f3:cb:35:8b:b5:
         80:83:50:bc:c8:47:4e:44:d3:1e:12:14:f1:b6:81:53:14:cf:
         1a:4a:38:45:f3:0b:3b:eb:cc:59:32:fe:ec:ab:39:13:ea:43:
         79:ac:c9:f3:04:7e:fe:35:e9:55:f3:ab:52:67:b8:c9:ef:4d:
         85:ba:a9:ec:25:15:bc:5b:65:1f:3d:d7:f1:31:a2:57:07:49:
         e2:7b:c4:3e:70:71:e5:86:18:e6:0d:2f:3b:5d:c5:be:e4:10:
         61:f6:35:3d:2e:c0:45:b4:01:f5:2e:6f:b6:d9:f9:9a:ab:2c:
         3a:d3:7a:ed
-----BEGIN CERTIFICATE-----
MIIFLjCCBBagAwIBAgIUEfZdyHY1oMMHRCpKUK05cgZphLwwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNTBFNEQwMDAwMTEwLwYDVQQFEyg0N0ZCRENFMkNC
NkYyQzZFNDM3OEM1Njg4MkMzRDI0NkQ3NkU1MDQ1MB4XDTI2MDkwNzIzNTgzMFoX
DTI3MDkwNzAwMDMzMFowMzExMC8GA1UEAxMoQkZENDBDN0I2RDBDNDYxQThGMUNG
NTVGMjU5OTQ1RUYxOEU0QTIyQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMwJ08LXuiI8wVSMVt/EQYpqvzme4cb8yT831rQotKKVBZc0PbyIqZ4Vj4G7
Rz9GPx+VZJe6L/m1iBVA5walt1eKF8qhLcR4rFQIdjNNUXk778BRDpXo7tOiEAhX
iUh+AEIuwhDpfbCePu74uOn4DPIEltnUIAgactJhS+USlHysjbLqGiv2Yi5rKCpI
kTywVrNu1oTQCy/57aIYNvH78YeCx76w5GAGnNw8sezMduaZ6qtvjmWjyNn0L6Lw
u7SPuaagFveai4ZmYKDySxm28CyLFAjoAzrvxsX4tZdtY44b4unUCpho15lYSQX+
Xqp+cVJOOgDAO7LpjDnkb3kkrvECAwEAAaOCAiEwggIdMB0GA1UdDgQWBBS/1Ax7
bQxGGo8c9V8lmUXvGOSiKjAfBgNVHSMEGDAWgBRH+9ziy28sbkN4xWiCw9JG125Q
RTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE1MEU0RDAwMDAvMC80N0ZCRENF
MkNCNkYyQzZFNDM3OEM1Njg4MkMzRDI0NkQ3NkU1MDQ1LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9SX3ZjNHN0dkxH
NURlTVZvZ3NQU1J0ZHVVRVUuY2VyMIGYBggrBgEFBQcBCwSBizCBiDCBhQYIKwYB
BQUHMAuGeXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkx
NTBFNEQwMDAwLzAvMzIzNDMwMzEzYTMyMzAzNjMwM2EzMTMzMzMzNzNhM2EyZjM0
MzgyZDM0MzgyMDNkM2UyMDMxMzQzNzMwMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQBIGATNzAN
BgkqhkiG9w0BAQsFAAOCAQEAbP9QE2TcnWebUjKNNuAyvqxGIyaWc2iGKBLv447x
Hglgf/ZpZ7y27j5/llMQE0VHDOnmvkFFswWJ2bzOFZmnHa/fmCjEvW/h9LH3qcLT
20ubysC/R8Trp/ZK/+3IBtq/e4ry0e8QnEqUFVWMFQWocq1UvJOZWyEZrKvaNLzR
MD4h6AzrHWWPVQhajPPLNYu1gINQvMhHTkTTHhIU8baBUxTPGko4RfMLO+vMWTL+
7Ks5E+pDeazJ8wR+/jXpVfOrUme4ye9Nhbqp7CUVvFtlHz3X8TGiVwdJ4nvEPnBx
5YYY5g0vO13FvuQQYfY1PS7ARbQB9S5vttn5mqssOtN67Q==
-----END CERTIFICATE-----
Generated at Mon Sep 14 01:19:34 2026 by rpki-client