Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/0/3230332e32382e3138312e302f32342d3234203d3e2039343439.roa
File:                     3230332e32382e3138312e302f32342d3234203d3e2039343439.roa (raw, json)
Hash identifier:          2guqc3il/Df3q/hiPOyhywzhF3bNWW294jv3FUSAbQM=
Subject key identifier:   B5:25:F3:6D:67:74:50:DD:D1:89:1B:45:31:EE:63:4F:78:79:E8:B5
Certificate issuer:       /CN=A91905300000/serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
Certificate serial:       6C11342155552439A8B18530A33879B164B33C84
Authority key identifier: 30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/0/3230332e32382e3138312e302f32342d3234203d3e2039343439.roa
Signing time:             Tue 03 Feb 2026 02:26:30 +0000
ROA not before:           Tue 03 Feb 2026 02:21:30 +0000
ROA not after:            Tue 02 Feb 2027 02:26:30 +0000
asID:                     9449
IP address blocks:        203.28.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Feb 2026 17:35:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:11:34:21:55:55:24:39:a8:b1:85:30:a3:38:79:b1:64:b3:3c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91905300000, serialNumber=30356EF46D594DA57C7697011183ACFFE04613E0
        Validity
            Not Before: Feb  3 02:21:30 2026 GMT
            Not After : Feb  2 02:26:30 2027 GMT
        Subject: CN=B525F36D677450DDD1891B4531EE634F7879E8B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:04:f6:ef:4b:91:3d:62:c8:fc:e3:11:9d:23:
                    80:96:8a:46:fe:69:51:c3:6d:83:ce:84:70:05:6e:
                    58:1e:41:72:4a:79:dd:49:52:5b:58:d6:74:52:00:
                    0c:4b:4f:67:88:0a:08:57:0c:b2:ff:1d:4c:81:9d:
                    d9:5c:e5:ea:64:7f:31:d8:d1:3f:17:b3:01:cc:ed:
                    a9:00:36:5d:ff:66:0f:cc:70:0f:41:2a:c4:17:39:
                    95:df:61:9b:e4:4e:97:f6:35:93:b3:53:32:70:a4:
                    bb:4f:55:07:1a:28:e4:18:95:54:ef:d9:f4:a5:e7:
                    fb:08:d6:87:6e:83:14:47:80:41:3c:4a:e8:0c:fb:
                    e1:cd:c1:11:13:69:f9:26:62:5b:ac:0f:79:36:19:
                    36:0d:7c:63:91:a9:76:dc:84:f8:41:98:5c:2a:53:
                    c2:78:d8:0b:b6:c0:9a:f6:95:d4:14:6a:41:b0:7d:
                    53:9a:ac:27:8d:6d:fe:70:22:ca:78:4b:76:2b:3f:
                    4f:2e:34:b5:60:42:dc:06:38:9e:e6:75:36:ac:24:
                    c3:b1:57:a9:f4:21:73:7a:d0:36:b3:13:8e:45:92:
                    a8:d1:03:41:18:f4:13:3e:54:bf:6b:77:70:d7:99:
                    80:12:8b:88:b4:a8:c5:50:8b:d5:a0:9e:1a:2d:fe:
                    ba:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:25:F3:6D:67:74:50:DD:D1:89:1B:45:31:EE:63:4F:78:79:E8:B5
            X509v3 Authority Key Identifier:
                keyid:30:35:6E:F4:6D:59:4D:A5:7C:76:97:01:11:83:AC:FF:E0:46:13:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/30356EF46D594DA57C7697011183ACFFE04613E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MDVu9G1ZTaV8dpcBEYOs_-BGE-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/0/3230332e32382e3138312e302f32342d3234203d3e2039343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.28.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:03:aa:06:b3:e9:a1:d5:18:5b:af:9f:f7:ed:9e:93:87:4c:
         de:d9:3e:be:73:e1:8b:06:1b:b8:54:26:df:8f:48:ac:46:0a:
         0f:3c:7e:59:69:53:3c:75:24:51:6e:08:4b:8b:65:5a:88:81:
         0b:b5:15:c2:78:92:c9:cd:78:0f:16:33:b7:b0:79:4e:0f:1c:
         bf:a3:6b:da:26:2b:d7:06:15:e2:b1:d8:45:c8:b5:b5:fd:1f:
         bd:75:64:d7:0a:21:19:c1:54:77:32:4b:cd:08:80:99:95:a2:
         9c:e7:14:47:ab:52:43:02:a2:07:e1:ea:ee:54:1c:9b:5e:43:
         3e:7a:0c:dc:ee:63:09:b4:fc:32:dd:97:52:aa:aa:e6:9f:e0:
         59:97:ac:9e:49:a3:37:75:0f:04:b1:39:21:63:e6:74:87:cc:
         d2:f2:bc:3b:d1:aa:b5:eb:20:15:08:f3:10:63:2e:92:11:eb:
         39:ff:6d:0f:e2:ec:d4:80:e7:0f:85:c5:8f:6a:0e:ed:6c:c5:
         95:55:30:c1:f3:01:ec:59:4e:5d:1f:59:1c:3b:13:dd:89:06:
         23:1c:9a:31:9c:a8:6a:17:88:b0:67:11:38:05:2b:0b:2f:8c:
         67:78:54:3c:13:d9:de:f3:f8:6e:98:c7:e3:a1:ce:02:2d:5d:
         dd:87:a9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:44:09 2026 by rpki-client