Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa
File:                     323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa (raw, json)
Hash identifier:          wCmAihkuPVll63UXoUNHhBYaZUWeSkIeoTLZCg0AKF4=
Subject key identifier:   A1:3C:24:34:0A:F4:44:8A:10:60:F3:B2:42:9D:22:BA:4A:18:57:6F
Certificate issuer:       /CN=A9150E4D0000/serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Certificate serial:       50F6BC5BD1C3EFAB799CB1E883AC589551CCF17E
Authority key identifier: 47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa
Signing time:             Sun 17 Aug 2025 22:22:07 +0000
ROA not before:           Sun 17 Aug 2025 22:17:07 +0000
ROA not after:            Sun 16 Aug 2026 22:22:07 +0000
asID:                     24381
IP address blocks:        2401:2060:b001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
                          rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Aug 2025 03:22:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:f6:bc:5b:d1:c3:ef:ab:79:9c:b1:e8:83:ac:58:95:51:cc:f1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E4D0000, serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
        Validity
            Not Before: Aug 17 22:17:07 2025 GMT
            Not After : Aug 16 22:22:07 2026 GMT
        Subject: CN=A13C24340AF4448A1060F3B2429D22BA4A18576F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c9:26:4e:1a:54:b1:68:a8:59:9e:2d:9f:5a:
                    04:6b:09:17:5b:5c:f6:a8:1f:c1:ba:93:c8:71:db:
                    75:08:64:d7:3a:9b:68:33:20:be:66:31:97:5c:74:
                    28:d6:87:01:6c:ea:9a:41:d4:21:08:78:c4:4e:f5:
                    72:61:c6:b5:21:aa:d7:21:0f:52:09:ea:b2:43:95:
                    85:b6:eb:e8:68:7d:64:f2:36:86:f6:e9:6a:10:13:
                    7a:88:b3:8c:0f:b6:8d:0e:66:47:bc:06:9f:1b:ec:
                    db:22:00:12:15:24:ea:f6:29:f1:7e:47:50:49:4c:
                    20:8f:ab:3f:28:3d:f5:e7:0e:5d:6d:4d:45:48:92:
                    c6:a6:60:20:ab:fc:31:d7:b4:a8:61:07:52:f0:3b:
                    39:54:f8:10:75:df:b7:01:3d:32:13:49:35:b5:5b:
                    ca:5b:b3:61:3f:b4:d6:03:08:6d:f9:db:0b:6a:fc:
                    31:7d:f9:10:30:0e:65:5a:77:11:f6:ee:d7:f7:41:
                    7c:a3:0b:ec:b8:d4:a9:23:90:1c:50:3b:76:0b:76:
                    d7:8d:81:3f:74:a1:3c:86:8c:ad:9f:f8:48:22:22:
                    9c:10:b3:ca:aa:6c:9d:52:d8:68:a2:e2:3b:04:d7:
                    64:cb:0a:f5:49:bb:dd:83:51:1c:f6:10:a3:6d:04:
                    53:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:3C:24:34:0A:F4:44:8A:10:60:F3:B2:42:9D:22:BA:4A:18:57:6F
            X509v3 Authority Key Identifier:
                keyid:47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a623030313a3a2f34382d3438203d3e203234333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2060:b001::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:a3:ee:b8:ab:9e:96:4a:d7:e8:5d:e4:60:8e:7e:22:ca:c9:
         4b:6d:ff:2e:f4:01:00:43:92:50:49:86:a0:1c:a2:02:2e:6e:
         93:27:1f:d0:39:81:71:a2:30:a5:c4:c3:f6:5a:b3:20:a8:ae:
         3d:f2:20:aa:25:3d:7b:eb:1f:50:0a:af:a0:3e:e6:66:1a:4c:
         a8:a7:ce:5a:ab:fe:07:99:07:4d:09:65:76:51:65:e2:f0:30:
         88:2e:ea:e2:b5:32:a6:9f:e3:49:43:14:92:a6:d5:f9:95:bf:
         e7:96:5f:35:63:90:4e:b3:48:b8:96:25:6d:c1:e8:2c:77:c7:
         b9:45:f4:41:15:e8:f6:7b:5f:28:de:34:3a:12:c7:57:de:ec:
         af:91:6d:68:1f:c3:df:88:34:fa:01:8a:8f:bf:50:e7:5d:ff:
         cf:f6:72:f7:a8:11:5a:9d:04:d8:84:55:5d:c3:db:d8:73:ba:
         42:2d:61:6b:ef:a3:21:03:15:5c:e0:0c:79:2d:b3:f5:92:7f:
         d4:ab:69:79:0b:d6:fc:5e:e4:25:a6:ff:2a:7d:9d:e3:75:8d:
         da:b8:09:f0:2e:c8:48:00:75:1b:48:ae:49:43:cf:57:78:b9:
         fd:c6:d3:a9:ea:bc:15:eb:97:74:cc:68:46:6c:32:a6:de:e0:
         42:1f:a5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 13:52:09 2025 by rpki-client