Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa
File:                     3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa (raw, json)
Hash identifier:          rpJIqb75YDR5gHdSyUBQhuto0oiBHBiqa+gpsVl1Cpo=
Subject key identifier:   83:4C:34:7B:CF:17:13:E4:0C:2D:14:73:54:C4:F6:36:23:22:E6:50
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       1D1C16875094121F1FE181958883DADB693305A8
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa
Signing time:             Thu 09 Oct 2025 13:08:22 +0000
ROA not before:           Thu 09 Oct 2025 13:03:22 +0000
ROA not after:            Thu 08 Oct 2026 13:08:22 +0000
asID:                     401443
IP address blocks:        103.238.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 16 Oct 2025 21:44:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:1c:16:87:50:94:12:1f:1f:e1:81:95:88:83:da:db:69:33:05:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: Oct  9 13:03:22 2025 GMT
            Not After : Oct  8 13:08:22 2026 GMT
        Subject: CN=834C347BCF1713E40C2D147354C4F6362322E650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:57:7f:f2:d7:e5:d7:fb:f8:cb:e4:12:40:ea:
                    9d:8b:da:1c:b9:8c:b9:81:27:65:2c:2a:76:70:a6:
                    31:1b:79:54:cb:87:b6:b2:ca:f4:8d:35:61:f7:11:
                    c9:07:71:93:79:37:ab:16:c5:df:24:ea:48:de:94:
                    9c:aa:77:af:a4:05:6a:8a:d6:4f:ae:ad:77:70:0d:
                    34:19:62:8c:5d:2a:6a:bf:23:50:07:ce:86:96:93:
                    76:41:ec:28:e7:1e:4f:a9:e9:9b:37:7c:3e:59:30:
                    64:c3:20:09:f3:19:10:81:87:8f:0a:37:cd:f9:c7:
                    f4:d8:94:39:6c:61:7d:b8:d0:27:93:30:9b:7f:00:
                    25:7d:c0:4e:1a:e7:05:c5:6b:7e:da:d1:9c:68:27:
                    94:94:52:a1:e0:90:0f:a9:09:22:d9:af:fa:2b:d6:
                    63:0f:99:22:59:2f:ca:fb:d6:cc:9b:22:3f:90:e9:
                    f4:58:30:97:da:f7:c0:1c:9a:43:5c:82:f4:03:cd:
                    cb:5d:73:56:23:ed:48:fa:39:48:4c:18:78:e6:79:
                    a3:a1:d3:e9:5b:44:89:9e:f6:82:0e:42:4f:46:29:
                    5b:be:78:86:6f:2f:85:9f:59:4f:fd:b5:2f:77:96:
                    ac:d9:92:98:eb:11:b0:85:47:cb:ee:54:d4:83:a4:
                    a4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4C:34:7B:CF:17:13:E4:0C:2D:14:73:54:C4:F6:36:23:22:E6:50
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132392e302f32342d3234203d3e20343031343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:eb:f1:1e:73:b5:9a:f3:35:bb:05:c4:1e:74:fc:b0:24:78:
         9c:c0:1b:d2:91:0f:f6:a7:dc:f1:ca:24:fe:db:c2:75:21:0f:
         8f:53:54:78:c3:b6:93:24:0b:41:8f:82:2a:80:d3:3e:69:43:
         d2:58:b0:9d:15:d4:9f:93:ca:f7:36:f3:d2:78:3e:05:eb:c4:
         3f:8d:98:41:52:aa:bf:f1:4d:21:0d:40:3c:bf:66:6d:d4:dd:
         4e:49:ed:8b:2d:c9:f8:6c:7c:72:76:8d:94:77:0f:76:11:f6:
         e2:0b:24:34:6f:e7:94:30:c8:b3:6c:c4:2c:ea:07:6e:02:c7:
         3a:f0:42:2d:7f:58:8d:e3:82:78:ce:a2:36:16:f4:2b:a4:a2:
         c2:62:8d:6a:43:78:20:50:55:37:37:7c:a9:a6:b1:5e:88:cd:
         f7:3c:ae:9d:40:55:2b:a5:e8:8f:c7:32:78:ff:0f:37:fe:00:
         7b:82:db:b9:20:3a:cf:86:85:8b:78:1b:c7:40:14:72:7e:09:
         4a:5a:be:61:95:f8:87:c1:38:16:ac:27:9b:7e:19:3c:ef:a8:
         64:fd:a9:87:01:4d:81:ca:07:34:c2:6f:1b:76:bb:d9:a2:f7:
         2b:47:ce:f7:45:d3:9b:ac:9e:46:28:74:97:c5:95:2e:e2:9b:
         92:e4:6c:9c
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUHRwWh1CUEh8f4YGViIPa22kzBagwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQTYxMzEwMDAwMTEwLwYDVQQFEyg3MkVDMEQ4QjM4
NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwMB4XDTI1MTAwOTEzMDMyMloX
DTI2MTAwODEzMDgyMlowMzExMC8GA1UEAxMoODM0QzM0N0JDRjE3MTNFNDBDMkQx
NDczNTRDNEY2MzYyMzIyRTY1MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANdXf/LX5df7+MvkEkDqnYvaHLmMuYEnZSwqdnCmMRt5VMuHtrLK9I01YfcR
yQdxk3k3qxbF3yTqSN6UnKp3r6QFaorWT66td3ANNBlijF0qar8jUAfOhpaTdkHs
KOceT6npmzd8PlkwZMMgCfMZEIGHjwo3zfnH9NiUOWxhfbjQJ5Mwm38AJX3AThrn
BcVrftrRnGgnlJRSoeCQD6kJItmv+ivWYw+ZIlkvyvvWzJsiP5Dp9Fgwl9r3wBya
Q1yC9APNy11zViPtSPo5SEwYeOZ5o6HT6VtEiZ72gg5CT0YpW754hm8vhZ9ZT/21
L3eWrNmSmOsRsIVHy+5U1IOkpDUCAwEAAaOCAhcwggITMB0GA1UdDgQWBBSDTDR7
zxcT5AwtFHNUxPY2IyLmUDAfBgNVHSMEGDAWgBRy7A2LOG2W+8dBwF82Yct62o64
ADAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFBNjEzMTAwMDAvMC83MkVDMEQ4
QjM4NkQ5NkZCQzc0MUMwNUYzNjYxQ0I3QURBOEVCODAwLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jdXdOaXpodGx2
dkhRY0JmTm1ITGV0cU91QUEuY2VyMIGRBggrBgEFBQcBCwSBhDCBgTB/BggrBgEF
BQcwC4ZzcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFB
NjEzMTAwMDAvMC8zMTMwMzMyZTMyMzMzODJlMzEzMjM5MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzQzMDMxMzQzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+6BMA0GCSqGSIb3DQEB
CwUAA4IBAQA26/Eec7Wa8zW7BcQedPywJHicwBvSkQ/2p9zxyiT+28J1IQ+PU1R4
w7aTJAtBj4IqgNM+aUPSWLCdFdSfk8r3NvPSeD4F68Q/jZhBUqq/8U0hDUA8v2Zt
1N1OSe2LLcn4bHxydo2Udw92EfbiCyQ0b+eUMMizbMQs6gduAsc68EItf1iN44J4
zqI2FvQrpKLCYo1qQ3ggUFU3N3ypprFeiM33PK6dQFUrpeiPxzJ4/w83/gB7gtu5
IDrPhoWLeBvHQBRyfglKWr5hlfiHwTgWrCebfhk876hk/amHAU2Bygc0wm8bdrvZ
ovcrR873RdObrJ5GKHSXxZUu4puS5Gyc
-----END CERTIFICATE-----
Generated at Thu Oct 16 01:54:19 2025 by rpki-client