Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139372e302f32342d3234203d3e2039343439.roa
File:                     3230332e372e3139372e302f32342d3234203d3e2039343439.roa (raw, json)
Hash identifier:          vAwqdvaW6yc2XtCDVw1UZNeo44zGvcl9i5o3oiFTQWo=
Subject key identifier:   6C:F9:53:DA:A5:69:25:4B:5D:F0:24:25:74:4C:B2:D5:D3:AE:1A:73
Certificate issuer:       /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial:       5A5BB72E5741651DFB87DAA70D7941B4FEE567C0
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139372e302f32342d3234203d3e2039343439.roa
Signing time:             Mon 29 Jun 2026 01:14:11 +0000
ROA not before:           Mon 29 Jun 2026 01:09:11 +0000
ROA not after:            Mon 28 Jun 2027 01:14:11 +0000
asID:                     9449
IP address blocks:        203.7.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Jul 2026 16:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:5b:b7:2e:57:41:65:1d:fb:87:da:a7:0d:79:41:b4:fe:e5:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
        Validity
            Not Before: Jun 29 01:09:11 2026 GMT
            Not After : Jun 28 01:14:11 2027 GMT
        Subject: CN=6CF953DAA569254B5DF02425744CB2D5D3AE1A73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:84:a8:f4:c2:5c:6e:9c:6b:3c:e5:8f:28:82:
                    7b:1b:32:ae:ff:36:f1:ec:d6:df:59:03:3a:6f:31:
                    df:c3:fd:33:95:74:4a:b7:f2:b1:66:23:2b:04:f2:
                    71:eb:66:84:a7:71:84:cf:e2:65:93:23:22:de:ce:
                    8f:d6:92:5a:6a:55:b4:f7:41:ed:9a:ca:a8:d4:d2:
                    9a:d3:0e:f8:10:02:99:c1:1e:6b:05:3d:f6:c8:e9:
                    0d:18:83:bb:39:f6:e1:46:50:d6:c1:74:73:a7:37:
                    99:a9:d4:8d:07:bb:a6:93:99:2c:5f:7e:0d:23:9d:
                    6a:aa:e1:8d:89:af:c3:81:c1:0a:e9:a1:89:70:af:
                    48:06:6d:07:97:c9:e9:14:ff:87:f7:76:a8:c5:20:
                    a6:a0:9a:3d:bc:94:2a:24:4b:a7:4c:2c:01:16:c1:
                    14:af:b0:5b:6e:f2:20:5e:db:5a:da:60:2f:8c:02:
                    7a:a1:8e:d9:75:79:b0:0f:e1:9d:46:3b:5d:22:5a:
                    d6:a0:c0:78:9e:ac:1a:e7:1b:ce:cf:d7:40:cb:05:
                    3e:a1:cf:4c:01:02:af:5e:fe:31:3f:92:e9:c5:85:
                    8a:61:55:fe:26:1c:a6:f6:88:ee:51:f8:c4:df:d6:
                    fd:7c:5a:d7:e0:d4:1b:f7:77:ab:66:05:06:70:79:
                    73:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F9:53:DA:A5:69:25:4B:5D:F0:24:25:74:4C:B2:D5:D3:AE:1A:73
            X509v3 Authority Key Identifier:
                keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/3230332e372e3139372e302f32342d3234203d3e2039343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.7.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:6b:82:da:c0:0c:93:73:f0:59:6b:25:50:55:0d:fd:dc:e7:
         f5:a6:ce:51:45:74:5e:63:66:92:e2:47:37:4e:e8:65:eb:5b:
         1f:01:ec:07:ce:65:64:28:f2:b0:06:73:47:60:31:83:56:da:
         51:4e:03:bd:76:7a:55:a6:17:fc:7d:b7:11:50:09:95:37:84:
         ea:df:e6:ff:94:79:66:d7:c6:35:c0:2c:b9:df:e3:1f:8c:c2:
         16:37:34:21:ff:1b:78:da:e8:c1:7e:50:97:15:b8:29:d4:66:
         13:85:ea:eb:37:22:66:f9:2c:0d:fd:95:e3:38:e1:ae:58:c8:
         9a:17:88:f1:50:46:d4:44:05:51:87:9c:97:8e:aa:ca:e3:69:
         2b:14:b3:d7:42:07:b2:06:21:44:c2:03:f3:45:31:a8:65:c5:
         60:fc:72:3d:11:77:a9:22:b9:f7:83:4b:87:9e:bd:07:28:ea:
         c8:fc:0c:34:38:95:82:55:40:5f:29:e5:4d:ec:f0:b8:f9:25:
         8e:e0:e9:38:b5:f8:6d:98:70:6f:fc:af:6c:1e:31:b3:1d:f9:
         8d:fb:25:4d:c6:02:2c:16:fe:9c:6c:83:49:58:b7:09:eb:25:
         11:8e:c2:f5:0a:c0:54:29:82:c1:62:37:a3:b7:fa:2f:b6:87:
         28:f4:ea:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:09:39 2026 by rpki-client