Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139362e302f32342d3234203d3e2037353436.roa
File:                     3230332e372e3139362e302f32342d3234203d3e2037353436.roa (raw, json)
Hash identifier:          V95Z++X1BN0ujeiUpldiRsUT1wl/Vx8TaPKCLXBi9zI=
Subject key identifier:   BE:60:75:F8:8B:A9:BA:74:1A:B6:17:95:20:19:01:5E:DA:30:72:55
Certificate issuer:       /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial:       62257644177B5310BE4F53EFAEADCA54E196002F
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139362e302f32342d3234203d3e2037353436.roa
Signing time:             Sun 14 Jun 2026 06:06:19 +0000
ROA not before:           Sun 14 Jun 2026 06:01:19 +0000
ROA not after:            Sun 13 Jun 2027 06:06:19 +0000
asID:                     7546
IP address blocks:        203.7.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Jul 2026 16:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:25:76:44:17:7b:53:10:be:4f:53:ef:ae:ad:ca:54:e1:96:00:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
        Validity
            Not Before: Jun 14 06:01:19 2026 GMT
            Not After : Jun 13 06:06:19 2027 GMT
        Subject: CN=BE6075F88BA9BA741AB617952019015EDA307255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:44:3d:87:2d:2e:0b:9a:1c:a1:d2:bb:12:d2:
                    d6:c5:7e:db:43:b0:0c:ba:d2:ee:70:87:59:51:61:
                    0f:50:c9:5b:06:08:a5:7f:83:22:4b:ef:c2:d2:15:
                    23:8f:4a:0a:4a:e1:7f:4d:43:8d:46:80:e2:fd:e4:
                    7d:eb:f3:18:08:78:da:b2:5d:3a:cf:99:7b:47:f0:
                    82:e3:d4:1f:3c:2c:41:bb:6f:a1:83:89:c7:27:18:
                    0c:52:a6:1d:2d:64:33:9f:c9:ec:e0:a4:7b:64:35:
                    c9:78:05:f1:a3:1e:d0:93:b9:41:70:d6:94:e3:19:
                    e5:32:24:3c:e8:19:b3:2e:34:d4:6f:03:88:44:5a:
                    a7:e6:4d:67:48:65:d6:f4:59:cc:c4:89:1a:d5:10:
                    49:82:1f:18:aa:37:4d:39:a4:85:a8:cc:d1:ed:b3:
                    91:88:fd:9c:e0:ef:89:b6:30:47:81:9d:60:8f:72:
                    8d:14:17:ad:0c:23:96:b4:67:6a:4d:ac:d7:22:ed:
                    07:ae:9f:86:4e:8d:39:d3:46:05:e0:e2:d3:df:66:
                    27:cc:d6:13:f8:1f:1f:79:a6:c3:78:b8:cb:8f:5b:
                    a8:3d:2e:7a:56:dd:3c:22:41:8c:b9:de:db:7c:a9:
                    a0:cb:3a:27:9c:8d:8c:eb:82:da:40:28:29:6b:34:
                    07:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:60:75:F8:8B:A9:BA:74:1A:B6:17:95:20:19:01:5E:DA:30:72:55
            X509v3 Authority Key Identifier:
                keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139362e302f32342d3234203d3e2037353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.7.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:14:af:a7:fd:ea:0a:0f:dd:f3:89:4c:29:4f:37:db:2a:11:
         5f:44:c2:70:e7:d5:b8:28:28:6f:4e:8f:61:bf:a9:a5:0b:a7:
         04:78:00:0e:95:67:e7:fe:a8:67:7b:83:2f:86:34:d9:0e:83:
         d8:6a:fb:a6:a6:ac:ef:04:45:c8:7f:1b:72:38:72:6c:d1:c2:
         3b:96:f8:91:64:48:e2:c8:34:45:b3:8f:35:5a:5c:e9:21:3d:
         89:e4:32:66:ac:44:f7:35:5e:a3:9b:48:09:d9:65:69:bf:3a:
         a8:71:d2:57:77:24:88:2e:20:30:f1:d4:0a:57:22:f6:1f:e7:
         22:3f:57:88:7b:ca:94:8c:37:d6:f8:16:a8:a8:31:44:12:60:
         c4:c7:8f:35:0b:f4:b2:60:8f:0e:44:9f:c1:3d:21:a8:e1:82:
         be:f6:a9:ac:ae:6c:49:79:42:69:09:dc:fc:32:33:7c:d5:9c:
         36:f0:6f:b8:d3:7a:b5:ca:dc:0e:2b:62:bb:6d:10:1a:70:4b:
         73:b1:8a:00:34:42:90:f1:60:e3:22:96:93:db:20:c5:6d:a3:
         60:fd:b2:ea:81:55:e7:6f:7d:e6:96:55:a7:4a:23:c9:ad:04:
         7f:65:70:d5:12:e2:42:40:6f:5a:6a:d7:81:c7:1e:d4:e9:63:
         2f:bc:64:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:09:39 2026 by rpki-client