Route Origin Authorization

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38332e302f32342d3234203d3e20323030303137.roa
File:                     34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (raw, json)
Hash identifier:          7ng0Lz0v75i9UIOOgIh6OtvWrPo/NJYnzs1xeOHzW3c=
Subject key identifier:   B6:F7:7F:6C:03:FB:42:77:ED:A2:9F:2F:0F:32:98:69:56:BB:DE:A0
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       085B6FFCEA8B735D9BE762B0FF8EAB7D1C3503AA
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38332e302f32342d3234203d3e20323030303137.roa
Signing time:             Thu 15 Oct 2026 08:03:55 +0000
ROA not before:           Thu 15 Oct 2026 07:58:55 +0000
ROA not after:            Thu 14 Oct 2027 08:03:55 +0000
asID:                     200017
IP address blocks:        43.255.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 01:29:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:5b:6f:fc:ea:8b:73:5d:9b:e7:62:b0:ff:8e:ab:7d:1c:35:03:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: Oct 15 07:58:55 2026 GMT
            Not After : Oct 14 08:03:55 2027 GMT
        Subject: CN=B6F77F6C03FB4277EDA29F2F0F32986956BBDEA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b4:d1:2c:19:43:81:32:24:d5:dd:36:7f:db:
                    16:36:97:bb:05:84:a2:83:8e:3a:94:b8:77:99:a8:
                    16:b7:f3:9d:43:6c:0b:e0:fc:b3:4b:51:ab:b4:30:
                    17:3c:42:c8:25:26:b0:8a:90:f6:29:f4:49:9c:00:
                    27:3e:80:f0:d0:1b:38:5b:6d:d0:2d:6a:7a:73:0c:
                    46:cd:68:6c:51:b4:9d:28:aa:30:e6:e3:b7:5a:e6:
                    c8:f3:5f:5c:00:13:68:1e:db:72:ec:b9:1a:79:97:
                    b4:c5:7f:2e:58:d9:5b:69:cb:59:26:db:4c:68:bb:
                    b0:20:77:11:01:71:2c:23:5c:e0:6d:c1:92:9e:03:
                    f7:31:0a:39:29:c6:fa:b3:60:11:9c:7f:af:6b:ba:
                    47:28:4d:23:cf:9c:05:0a:e0:0e:b1:e0:4c:2a:8c:
                    ea:ec:ef:ce:19:09:86:86:31:2f:b5:bb:ae:7a:7d:
                    86:67:8a:16:bb:9c:90:f5:d0:3e:7b:77:57:81:87:
                    ef:90:0d:56:d7:98:9c:aa:9a:7f:28:ac:ec:48:84:
                    b0:45:35:eb:ed:66:c0:fa:71:2a:8d:43:d2:97:e0:
                    93:8c:7f:5d:cb:d5:75:92:ad:ca:b2:fe:da:6f:cb:
                    68:e3:0c:e6:53:d8:51:55:9a:79:90:39:ea:0a:1c:
                    92:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:F7:7F:6C:03:FB:42:77:ED:A2:9F:2F:0F:32:98:69:56:BB:DE:A0
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38332e302f32342d3234203d3e20323030303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:a4:92:37:2b:94:2d:3c:6c:29:21:38:55:f4:c1:ce:ff:b1:
         0f:c6:8a:f8:22:75:f2:07:8f:9d:54:b5:2b:ac:b7:be:18:35:
         61:cb:c2:11:48:ec:a5:07:18:06:83:85:7e:04:f9:e3:0c:f2:
         f7:46:fc:23:54:b5:74:9d:3c:58:17:89:0b:87:b2:0a:7e:9a:
         e6:8f:41:a2:93:76:61:b3:7d:05:99:68:63:ef:2d:8c:0f:9f:
         5e:ca:e4:50:21:bd:ee:85:3c:f8:d4:f2:7e:c5:93:c3:4a:87:
         8d:db:1b:4e:aa:12:fb:48:96:b3:3e:81:94:78:70:76:48:4c:
         07:6c:23:32:9b:e8:54:dc:73:5c:c3:f3:29:b5:e8:52:af:5b:
         9f:7c:05:60:4a:47:c7:f7:b1:4e:66:d1:33:f8:02:aa:a0:d4:
         0b:cd:af:c7:53:40:09:5b:d6:ce:2c:0f:17:d1:d7:d2:91:f5:
         00:00:7a:8a:cd:80:32:f9:c9:33:b4:97:ea:f4:92:2d:0e:46:
         48:7c:4c:de:aa:65:08:c2:c9:71:13:33:de:57:4a:2c:66:5a:
         91:a3:0a:de:18:61:0d:be:ee:90:e7:d1:9b:ad:7a:e3:4d:69:
         91:af:02:b0:5c:f1:4a:6c:ef:01:d9:da:01:ec:30:81:ca:79:
         67:62:35:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:42:56 2026 by rpki-client