Route Origin Authorization

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20383334.roa
File:                     3130332e3233382e3132382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          UrfKF10uUTv4Q/1dYjAlo4kXXtIWK8p5Z4ct5BPye0E=
Subject key identifier:   76:7E:9A:5B:C4:67:F0:99:26:E2:6B:4D:0E:D9:A2:04:1E:D7:6E:DC
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       27B5283D3B84E82AAECE2B3AA77B5DC133D78CC2
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20383334.roa
Signing time:             Thu 15 Oct 2026 11:10:59 +0000
ROA not before:           Thu 15 Oct 2026 11:05:59 +0000
ROA not after:            Thu 14 Oct 2027 11:10:59 +0000
asID:                     834
IP address blocks:        103.238.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 01:29:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:b5:28:3d:3b:84:e8:2a:ae:ce:2b:3a:a7:7b:5d:c1:33:d7:8c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: Oct 15 11:05:59 2026 GMT
            Not After : Oct 14 11:10:59 2027 GMT
        Subject: CN=767E9A5BC467F09926E26B4D0ED9A2041ED76EDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3b:88:76:96:cc:49:19:34:ed:f5:04:ce:7c:
                    8d:60:44:0e:b6:64:d6:ef:e5:7c:e6:09:d5:5b:c9:
                    8e:d1:30:f1:b3:cd:91:9f:de:17:5d:1a:4c:3b:34:
                    be:c4:5e:d4:f5:f6:07:60:94:66:b4:28:2b:5c:f9:
                    64:a0:fe:dd:36:03:49:d6:e4:6d:09:0c:6c:8b:ee:
                    0f:c2:1f:eb:4a:c3:ed:b1:58:c2:99:e3:b2:f9:f9:
                    64:e6:35:43:ca:1e:87:91:6a:38:38:1d:84:75:9a:
                    4c:c9:54:e4:b4:e2:b4:7b:ae:70:ea:67:42:a0:31:
                    44:0c:74:ad:9a:38:82:50:70:be:49:38:77:67:7a:
                    6a:0e:08:37:f4:94:52:01:a3:3c:37:3a:21:66:17:
                    06:6e:9f:91:97:b4:a6:cc:02:4b:4c:39:fb:74:a4:
                    0b:1c:8b:47:bf:28:ef:6c:03:c5:7a:40:8c:5a:db:
                    f2:7e:1a:e0:ad:d4:18:eb:62:77:d5:13:51:2e:93:
                    24:52:da:8c:30:e6:d2:40:a4:e6:da:84:64:ce:cc:
                    0a:d7:ac:40:4e:e0:bd:af:73:d1:19:92:c8:bc:a5:
                    f0:94:ff:20:cd:00:89:41:81:93:f2:ad:75:8e:5e:
                    8a:79:ab:c4:ef:5b:27:b7:f7:b6:96:6d:96:92:5a:
                    4c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7E:9A:5B:C4:67:F0:99:26:E2:6B:4D:0E:D9:A2:04:1E:D7:6E:DC
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:71:97:1f:32:31:54:36:5b:1b:fe:d1:e1:0e:ce:6f:31:2a:
         aa:52:d8:14:5f:fe:6b:ad:99:98:5c:4e:78:9f:aa:ad:d2:4e:
         c4:c1:9c:71:52:e7:48:16:f1:87:d3:be:43:af:d7:31:69:4e:
         55:20:98:8b:6b:05:16:ce:4f:83:7a:ae:22:e1:f6:1f:7c:ba:
         c3:4c:f3:75:d7:03:59:bb:23:8d:01:33:d9:98:55:be:8d:81:
         2b:e2:7a:22:fb:4f:62:a8:d6:94:6e:70:d5:db:1b:74:f9:ed:
         5c:72:0c:fa:3b:2e:d9:63:f3:d1:fc:b1:ff:f6:21:29:14:44:
         67:a7:2b:95:62:ac:41:cb:f3:b8:a1:91:65:4d:33:1e:91:b9:
         49:7c:b6:3e:77:0d:77:aa:37:a0:9f:5c:38:cd:2c:c4:d8:a1:
         f0:43:45:c2:1b:db:df:d1:27:a1:ab:5c:6f:f7:e8:bf:84:1f:
         5d:69:0b:78:e9:e5:28:06:d6:06:26:18:ee:75:55:0b:48:4c:
         fe:11:9a:8a:a2:cb:03:12:b2:48:85:bd:2d:a5:0b:36:fa:65:
         91:e2:00:e7:6c:04:4d:27:06:02:f3:53:c4:86:e9:ab:4c:e7:
         ed:c9:41:d5:9d:b0:2e:86:ee:01:d9:d0:23:4d:c4:7c:75:72:
         f5:1f:81:fd
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIUJ7UoPTuE6Cquzis6p3tdwTPXjMIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4
NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI2MTAxNTExMDU1OVoX
DTI3MTAxNDExMTA1OVowMzExMC8GA1UEAxMoNzY3RTlBNUJDNDY3RjA5OTI2RTI2
QjREMEVEOUEyMDQxRUQ3NkVEQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANA7iHaWzEkZNO31BM58jWBEDrZk1u/lfOYJ1VvJjtEw8bPNkZ/eF10aTDs0
vsRe1PX2B2CUZrQoK1z5ZKD+3TYDSdbkbQkMbIvuD8If60rD7bFYwpnjsvn5ZOY1
Q8oeh5FqODgdhHWaTMlU5LTitHuucOpnQqAxRAx0rZo4glBwvkk4d2d6ag4IN/SU
UgGjPDc6IWYXBm6fkZe0pswCS0w5+3SkCxyLR78o72wDxXpAjFrb8n4a4K3UGOti
d9UTUS6TJFLajDDm0kCk5tqEZM7MCtesQE7gva9z0RmSyLyl8JT/IM0AiUGBk/Kt
dY5einmrxO9bJ7f3tpZtlpJaTCECAwEAAaOCAg8wggILMB0GA1UdDgQWBBR2fppb
xGfwmSbia00O2aIEHtdu3DAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64
ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4
QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2
dkhRY0JmTm1ITGV0cU91QUEuY2VyMIGJBggrBgEFBQcBCwR9MHsweQYIKwYBBQUH
MAuGbXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxQTYx
MzEwMDAwLzAvMzEzMDMzMmUzMjMzMzgyZTMxMzIzODJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr
BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfugDANBgkqhkiG9w0BAQsFAAOCAQEA
LXGXHzIxVDZbG/7R4Q7ObzEqqlLYFF/+a62ZmFxOeJ+qrdJOxMGccVLnSBbxh9O+
Q6/XMWlOVSCYi2sFFs5Pg3quIuH2H3y6w0zzddcDWbsjjQEz2ZhVvo2BK+J6IvtP
YqjWlG5w1dsbdPntXHIM+jsu2WPz0fyx//YhKRREZ6crlWKsQcvzuKGRZU0zHpG5
SXy2PncNd6o3oJ9cOM0sxNih8ENFwhvb39Enoatcb/fov4QfXWkLeOnlKAbWBiYY
7nVVC0hM/hGaiqLLAxKySIW9LaULNvplkeIA52wETScGAvNTxIbpq0zn7clB1Z2w
LobuAdnQI03EfHVy9R+B/Q==
-----END CERTIFICATE-----
Generated at Mon Oct 26 04:06:00 2026 by rpki-client