Route Origin Authorization

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa
File:                     3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa (raw, json)
Hash identifier:          380MteHJu085lIotRMCrM3Ws74eHVNCxql4WXGt1OL0=
Subject key identifier:   7C:1B:96:6A:06:56:76:19:72:B6:10:45:6D:3A:EA:DB:DB:0A:7D:8D
Certificate issuer:       /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial:       31B9F97223F7722FCAC5B0FB99C17C2EF24BBC3E
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa
Signing time:             Fri 23 Oct 2026 01:57:08 +0000
ROA not before:           Fri 23 Oct 2026 01:52:08 +0000
ROA not after:            Fri 22 Oct 2027 01:57:08 +0000
asID:                     9449
IP address blocks:        103.160.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 01:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b9:f9:72:23:f7:72:2f:ca:c5:b0:fb:99:c1:7c:2e:f2:4b:bc:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91905300000, serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
        Validity
            Not Before: Oct 23 01:52:08 2026 GMT
            Not After : Oct 22 01:57:08 2027 GMT
        Subject: CN=7C1B966A0656761972B610456D3AEADBDB0A7D8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fb:e7:5e:cc:ec:7e:3e:74:7a:92:30:9e:65:
                    57:48:ed:3c:f1:fe:83:85:eb:96:94:fa:ca:71:35:
                    75:76:dd:1e:56:0e:31:8e:08:eb:1b:24:af:ab:c0:
                    17:7a:34:e9:96:89:96:d5:4b:b7:8f:ec:bc:53:e2:
                    bb:16:e8:6f:74:1e:92:8f:dc:40:d8:0e:11:1a:cc:
                    6a:59:89:2c:f7:72:2d:ce:03:9a:49:06:e1:ad:0b:
                    79:03:24:b6:d6:ef:da:11:bd:2a:6a:09:e0:8c:ce:
                    e4:a7:e8:10:e7:7a:a3:aa:c8:9a:a5:14:c1:f2:dc:
                    6c:9c:0b:af:54:cd:28:6b:22:6f:04:c2:1e:d2:3d:
                    ab:0a:30:18:77:fc:45:a2:27:bc:3b:38:6a:99:65:
                    be:c7:ad:d0:59:6a:8d:aa:b2:04:16:4a:24:4e:73:
                    af:9f:bf:75:4b:18:e7:08:14:49:7c:44:46:af:6e:
                    31:dd:6b:1e:f0:d7:59:8b:88:8c:72:55:a6:dc:c7:
                    1f:b6:59:3c:0c:61:28:47:2d:93:9b:a8:8d:c1:ba:
                    09:8d:c4:45:6d:ae:14:c2:80:a8:fd:3c:0b:61:46:
                    79:4d:85:65:e6:05:26:f5:18:4a:5d:de:7a:a8:f8:
                    ce:cb:8c:83:ce:cc:5a:c3:63:e2:64:3a:28:8a:ae:
                    a9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1B:96:6A:06:56:76:19:72:B6:10:45:6D:3A:EA:DB:DB:0A:7D:8D
            X509v3 Authority Key Identifier:
                keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/3130332e3136302e3131362e302f32332d3234203d3e2039343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:f2:6a:14:f1:87:dc:19:26:cf:91:33:f5:ad:20:50:22:f4:
         e9:9f:7f:e1:2e:5a:da:8c:35:14:3a:64:b9:c4:33:ad:08:96:
         df:ab:57:ab:0d:b7:f2:ce:a5:e8:db:2e:d0:37:5b:85:bf:f1:
         4b:78:e5:b7:16:1b:19:22:d4:34:3c:d7:ac:15:d0:6c:ec:dd:
         ea:2f:b9:4c:1e:50:c5:af:c1:a8:28:99:49:d1:1d:bb:d3:2f:
         6a:ca:f0:03:b0:db:ea:c7:03:28:f1:16:5e:a0:a9:80:77:af:
         06:4e:66:51:92:03:24:62:dd:56:2b:35:2a:f6:b3:a9:0c:8d:
         4e:a1:ba:6e:93:31:fa:a1:13:6a:03:27:ca:36:1d:ac:2f:74:
         68:40:02:42:56:ac:b5:71:05:5b:c5:4b:86:e4:a4:8b:e7:d1:
         b1:80:d7:69:e1:d3:73:e6:01:3a:40:a0:da:fc:c7:21:72:9b:
         36:c4:0c:f4:60:67:b3:fd:e5:ec:35:90:ee:c2:27:6f:53:4d:
         a6:12:85:0a:3a:18:84:dd:4c:93:a5:1d:9f:66:b9:d5:47:7a:
         c7:f9:f0:a3:d2:43:9c:26:b6:51:b9:72:08:82:f3:18:f3:c2:
         6e:f4:43:07:e6:9f:ad:ee:6e:b3:d6:67:0d:af:a1:ac:8a:5f:
         e9:8e:d9:a0
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUMbn5ciP3ci/KxbD7mcF8LvJLvD4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOTA1MzAwMDAwMTEwLwYDVQQFEygzMDM1NkVGNDZE
NTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0UwMB4XDTI2MTAyMzAxNTIwOFoX
DTI3MTAyMjAxNTcwOFowMzExMC8GA1UEAxMoN0MxQjk2NkEwNjU2NzYxOTcyQjYx
MDQ1NkQzQUVBREJEQjBBN0Q4RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANj7517M7H4+dHqSMJ5lV0jtPPH+g4XrlpT6ynE1dXbdHlYOMY4I6xskr6vA
F3o06ZaJltVLt4/svFPiuxbob3Qeko/cQNgOERrMalmJLPdyLc4DmkkG4a0LeQMk
ttbv2hG9KmoJ4IzO5KfoEOd6o6rImqUUwfLcbJwLr1TNKGsibwTCHtI9qwowGHf8
RaInvDs4apllvset0FlqjaqyBBZKJE5zr5+/dUsY5wgUSXxERq9uMd1rHvDXWYuI
jHJVptzHH7ZZPAxhKEctk5uojcG6CY3ERW2uFMKAqP08C2FGeU2FZeYFJvUYSl3e
eqj4zsuMg87MWsNj4mQ6KIquqbcCAwEAAaOCAhEwggINMB0GA1UdDgQWBBR8G5Zq
BlZ2GXK2EEVtOurb2wp9jTAfBgNVHSMEGDAWgBQwNW70bVlNpXx2lwERg6z/4EYT
4DAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvMC8zMDM1NkVG
NDZENTk0REE1N0M3Njk3MDExMTgzQUNGRkUwNDYxM0UwLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9NRFZ1OUcxWlRh
VjhkcGNCRVlPc18tQkdFLUEuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUH
MAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTA1
MzAwMDAwLzAvMzEzMDMzMmUzMTM2MzAyZTMxMzEzNjJlMzAyZjMyMzMyZDMyMzQy
MDNkM2UyMDM5MzQzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6B0MA0GCSqGSIb3DQEBCwUAA4IB
AQAT8moU8YfcGSbPkTP1rSBQIvTpn3/hLlrajDUUOmS5xDOtCJbfq1erDbfyzqXo
2y7QN1uFv/FLeOW3FhsZItQ0PNesFdBs7N3qL7lMHlDFr8GoKJlJ0R270y9qyvAD
sNvqxwMo8RZeoKmAd68GTmZRkgMkYt1WKzUq9rOpDI1OobpukzH6oRNqAyfKNh2s
L3RoQAJCVqy1cQVbxUuG5KSL59GxgNdp4dNz5gE6QKDa/Mchcps2xAz0YGez/eXs
NZDuwidvU02mEoUKOhiE3UyTpR2fZrnVR3rH+fCj0kOcJrZRuXIIgvMY88Ju9EMH
5p+t7m6z1mcNr6Gsil/pjtmg
-----END CERTIFICATE-----
Generated at Mon Oct 26 14:21:50 2026 by rpki-client