Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232362e302f32342d3234203d3e203136323736.roa
File:                     31342e3133372e3232362e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier:          EECiLST47YBJqxRi5iWAOWgUl9i2azYqsI4/sGS75Ps=
Subject key identifier:   05:17:C8:19:EC:58:F7:5E:EF:E7:1F:E2:85:47:BD:C3:C0:D2:23:AF
Certificate issuer:       /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial:       1F43A94B0B994142541BD9EC39E61D35F0993DB0
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232362e302f32342d3234203d3e203136323736.roa
Signing time:             Mon 23 Mar 2026 13:31:53 +0000
ROA not before:           Mon 23 Mar 2026 13:26:53 +0000
ROA not after:            Mon 22 Mar 2027 13:31:53 +0000
asID:                     16276
IP address blocks:        14.137.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
                          rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Mar 2026 18:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:43:a9:4b:0b:99:41:42:54:1b:d9:ec:39:e6:1d:35:f0:99:3d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
        Validity
            Not Before: Mar 23 13:26:53 2026 GMT
            Not After : Mar 22 13:31:53 2027 GMT
        Subject: CN=0517C819EC58F75EEFE71FE28547BDC3C0D223AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5f:db:7e:93:c2:b2:7d:1b:a4:53:09:36:0b:
                    59:f2:5a:16:c2:02:44:75:1e:9c:fa:46:ba:23:54:
                    a1:db:64:57:61:49:b0:a6:9a:77:24:b6:76:d5:04:
                    ff:08:df:83:27:8e:fc:60:27:ee:b2:e1:9a:72:1e:
                    26:92:93:23:5a:f2:d5:56:b0:17:d5:29:83:c8:81:
                    2f:1a:48:d9:f6:98:94:fb:05:43:c9:87:a0:9c:49:
                    c8:02:fc:fd:d4:3b:2c:40:75:ee:58:60:1e:5a:9c:
                    7f:4e:68:ef:f2:e1:65:a7:14:40:98:62:63:b3:d8:
                    3b:65:1b:bc:cf:10:70:0c:41:51:1e:6d:21:01:be:
                    74:d9:77:66:8a:bf:30:93:ac:66:70:0a:47:22:6f:
                    1d:53:5d:cb:42:45:ed:2d:99:46:e2:9e:f0:d4:87:
                    a8:a5:63:e0:fa:10:5e:1b:be:4d:f5:d1:e9:27:e8:
                    fe:1a:92:04:20:1f:fe:12:f3:42:49:d1:95:37:c3:
                    3b:57:c5:89:71:71:99:33:12:99:69:ba:59:46:0a:
                    57:ce:73:5a:57:b4:a7:9e:ef:8a:5e:0b:ff:a1:5d:
                    de:8b:09:71:00:c6:0b:bb:27:ea:43:54:3b:19:d4:
                    50:cc:fe:70:9c:55:66:b8:66:12:77:81:26:5d:e4:
                    84:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:17:C8:19:EC:58:F7:5E:EF:E7:1F:E2:85:47:BD:C3:C0:D2:23:AF
            X509v3 Authority Key Identifier:
                keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3232362e302f32342d3234203d3e203136323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.137.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:39:92:01:f9:0c:41:d4:92:3b:f3:dd:ef:38:ce:2f:2d:50:
         d8:21:f3:aa:89:68:bf:d5:bd:18:29:4b:43:92:ec:9d:5d:5f:
         d4:e2:57:a3:76:17:74:c6:b5:38:78:90:a0:4c:44:b3:66:00:
         c1:2c:ea:7e:c6:69:b1:09:5b:dc:01:d5:10:fe:2e:f2:a8:52:
         78:6d:2c:c5:13:dd:c7:c6:8c:ee:18:1d:2f:7a:90:39:31:89:
         67:de:96:fb:af:46:b0:dc:09:25:db:c5:eb:c0:b9:e8:75:58:
         2c:47:b6:02:67:96:6c:79:62:07:72:4e:a5:8e:b7:7d:bf:fa:
         68:f6:e9:4b:a4:3f:1b:9d:27:5c:02:66:f0:97:06:3a:ab:00:
         4b:68:bb:e3:58:7f:93:57:dc:ed:9f:99:49:4a:ba:72:bb:a8:
         77:bd:ee:2d:c5:f1:fb:30:be:ea:7c:a0:ca:42:a6:ec:3c:1b:
         7a:73:15:02:5b:2c:d5:07:b0:bd:2a:81:98:d7:b3:77:eb:e2:
         73:4b:1b:f6:a2:07:c8:cf:f0:2d:37:db:a8:5a:c9:52:74:3b:
         c8:fb:a8:55:43:b2:c1:3a:20:13:7e:0c:ce:e5:e3:8d:94:9e:
         ca:6d:09:74:32:39:01:28:2f:fc:cf:b9:14:49:00:16:0b:02:
         08:b1:90:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:07:13 2026 by rpki-client