Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/3/3230332e342e3137302e302f32332d3234203d3e2039343439.roa
File:                     3230332e342e3137302e302f32332d3234203d3e2039343439.roa (raw, json)
Hash identifier:          M/e9JYxNlAFFvx5pruu6e138GeVq2fFfQJvX9da0dDs=
Subject key identifier:   FA:5E:C9:D6:22:83:E4:79:7D:47:B1:17:AE:E8:EB:77:B9:6A:7C:A1
Certificate issuer:       /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Certificate serial:       3CD253D0D67C77DAB0179CDCECEE3A85F6DE9AE5
Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/3/3230332e342e3137302e302f32332d3234203d3e2039343439.roa
Signing time:             Tue 03 Feb 2026 01:26:27 +0000
ROA not before:           Tue 03 Feb 2026 01:21:27 +0000
ROA not after:            Tue 02 Feb 2027 01:26:27 +0000
asID:                     9449
IP address blocks:        203.4.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Feb 2026 11:21:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d2:53:d0:d6:7c:77:da:b0:17:9c:dc:ec:ee:3a:85:f6:de:9a:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AC370000, serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
        Validity
            Not Before: Feb  3 01:21:27 2026 GMT
            Not After : Feb  2 01:26:27 2027 GMT
        Subject: CN=FA5EC9D62283E4797D47B117AEE8EB77B96A7CA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:de:65:f1:23:91:f3:59:bc:c8:51:fc:f1:4b:
                    94:6b:b5:2d:22:7d:44:a8:11:12:31:33:4d:50:90:
                    97:34:23:dd:52:9d:01:c9:a2:dd:8e:c4:57:b6:08:
                    8f:f3:fe:27:d9:97:86:81:44:1b:0d:69:3c:8f:da:
                    c1:b8:d9:0e:41:fd:55:56:be:0e:9e:ff:74:30:5c:
                    0f:d2:02:82:1b:31:d3:a0:54:02:f9:05:df:3b:25:
                    f5:47:58:82:eb:1b:32:d6:cf:d3:47:06:83:22:f0:
                    a4:bf:94:9a:14:34:ec:f6:7d:a9:b4:4a:e2:d2:da:
                    43:61:71:77:44:17:ee:fe:eb:cb:d8:00:5a:0a:cd:
                    62:54:5b:2d:af:9e:7a:77:24:8d:a5:06:57:be:1a:
                    8f:4a:7f:8b:62:6c:f3:af:ad:dd:46:0f:ed:09:64:
                    9f:29:32:f2:00:67:e7:a8:77:bc:ee:80:40:00:d6:
                    a2:88:e6:14:a2:73:a5:81:27:1f:a1:41:81:c0:6f:
                    a2:b3:fb:3a:b9:04:4c:67:20:cb:be:f7:15:78:1b:
                    8d:86:00:57:20:31:48:70:0b:de:bb:35:9b:87:10:
                    4c:5f:32:f0:fa:ee:6a:fa:7f:15:ae:a3:58:bc:18:
                    c2:ca:d6:c0:df:18:88:1f:13:bd:65:6e:6c:be:55:
                    f5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:5E:C9:D6:22:83:E4:79:7D:47:B1:17:AE:E8:EB:77:B9:6A:7C:A1
            X509v3 Authority Key Identifier:
                keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/3230332e342e3137302e302f32332d3234203d3e2039343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.4.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:01:e0:04:25:6a:1f:85:35:3a:7f:36:c2:bb:fa:1f:a2:8f:
         09:4c:9c:62:42:35:88:4e:59:1b:db:aa:e6:52:bf:00:5d:8b:
         b7:62:40:f2:c5:a7:1c:a6:5a:92:34:cb:4e:80:84:22:a1:9b:
         97:91:5d:b8:e5:72:2f:b3:18:31:be:ea:56:86:4d:50:79:ce:
         e4:69:ce:a9:30:35:2a:be:f8:24:54:bc:83:7b:0c:25:bc:24:
         55:a9:af:92:f9:bb:38:83:b9:a7:c7:7a:a4:f0:1a:6a:d3:f4:
         84:aa:61:49:b8:6e:5b:44:64:97:33:af:62:81:c7:88:44:0f:
         a9:ce:0c:1c:51:d7:f6:de:63:56:04:71:01:ce:48:07:7b:8b:
         45:54:7c:45:bb:d1:93:95:e6:89:32:8e:ea:cb:6a:b3:a7:5b:
         e8:37:8f:9b:98:ac:8c:0c:0d:18:b3:fa:6e:a0:8c:00:70:92:
         d8:14:b4:b8:69:d5:66:d9:5b:2f:30:4e:9f:18:57:f5:a6:cc:
         45:67:34:72:6d:1c:e8:7f:54:60:46:1d:6a:7a:b7:0b:ae:ca:
         11:7d:68:42:69:ca:dc:6a:c5:5b:f9:c2:5d:81:c7:3a:dd:a6:
         d0:45:2a:91:32:db:54:98:64:90:58:60:8e:32:cc:cf:f4:a4:
         de:6f:0e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:41:01 2026 by rpki-client