Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3234392e302f32342d3234203d3e20313532333234.roa
File:                     31342e3133372e3234392e302f32342d3234203d3e20313532333234.roa (raw, json)
Hash identifier:          lQL+DqnDFTrAqJtMs1e2HE4S/p7KbFLA4Bj6Oc9slqg=
Subject key identifier:   09:05:F0:3E:80:79:6F:D0:9B:3A:7A:CA:0C:FC:23:0B:D1:D3:64:DC
Certificate issuer:       /CN=A912C2530000/serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
Certificate serial:       2B77D17BCA0138DC2FDDB4E2AA9E4D4E2EE91413
Authority key identifier: 61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3234392e302f32342d3234203d3e20313532333234.roa
Signing time:             Mon 04 May 2026 14:25:06 +0000
ROA not before:           Mon 04 May 2026 14:20:06 +0000
ROA not after:            Mon 03 May 2027 14:25:06 +0000
asID:                     152324
IP address blocks:        14.137.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl
                          rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 15:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:77:d1:7b:ca:01:38:dc:2f:dd:b4:e2:aa:9e:4d:4e:2e:e9:14:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2530000, serialNumber=6156BECA0310C700B8B4AF43C472D722BF6E1694
        Validity
            Not Before: May  4 14:20:06 2026 GMT
            Not After : May  3 14:25:06 2027 GMT
        Subject: CN=0905F03E80796FD09B3A7ACA0CFC230BD1D364DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:84:be:a4:c5:70:e6:70:b7:70:14:e3:1a:a9:
                    e3:e6:35:a7:c3:86:5e:0b:86:d0:65:38:c3:ba:89:
                    c4:f6:46:a3:af:8e:7f:bc:2b:c7:9e:31:aa:42:dc:
                    0d:00:c8:00:c0:5e:47:69:9c:1e:b3:60:81:73:0a:
                    92:87:13:37:30:2f:e5:bd:da:4b:78:bb:a6:15:67:
                    ae:1d:0c:53:9b:d4:a8:9c:ec:6a:be:4c:8d:a1:06:
                    b3:05:be:4e:97:d0:86:a1:74:23:dd:86:20:f5:df:
                    b4:70:b3:a2:1b:e6:4d:69:97:a1:9c:02:da:74:92:
                    d7:e4:a1:f5:1a:7f:d9:f3:48:ab:b2:e2:8e:1d:ef:
                    67:dc:f8:fb:73:1b:66:d5:00:38:0a:dd:82:7f:0a:
                    c4:c3:05:43:c7:40:10:43:af:55:54:7f:2e:f9:0b:
                    39:7c:69:d0:d2:f1:f2:de:54:9f:81:35:85:fc:bb:
                    ef:7c:da:77:da:40:73:e9:35:78:5c:b6:a3:f8:8c:
                    c7:93:f1:ee:e2:7e:2b:f8:a7:ab:56:33:b6:8b:5a:
                    06:42:7f:c5:5b:0b:00:01:17:44:39:e8:96:46:e5:
                    68:7e:d5:d0:b0:dc:3d:18:46:2e:47:5e:a2:d7:62:
                    05:40:88:4f:a9:0f:d7:2f:c9:a1:b2:16:6c:11:21:
                    b7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:05:F0:3E:80:79:6F:D0:9B:3A:7A:CA:0C:FC:23:0B:D1:D3:64:DC
            X509v3 Authority Key Identifier:
                keyid:61:56:BE:CA:03:10:C7:00:B8:B4:AF:43:C4:72:D7:22:BF:6E:16:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/6156BECA0310C700B8B4AF43C472D722BF6E1694.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVa-ygMQxwC4tK9DxHLXIr9uFpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A912C2530000/0/31342e3133372e3234392e302f32342d3234203d3e20313532333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.137.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:a8:e2:9d:6f:bf:7c:18:58:99:51:cb:0f:46:61:94:77:18:
         e1:07:84:98:58:eb:14:a2:d6:bc:21:cb:53:10:d3:a2:1d:f0:
         dc:55:fa:77:72:80:d9:47:ff:22:d7:57:7f:be:48:7f:09:52:
         3d:61:16:b6:0f:a9:11:ad:07:b9:af:71:f1:82:df:e2:aa:62:
         d7:eb:7e:fe:74:61:4d:d9:98:49:b2:85:ce:8b:2d:e5:2c:fd:
         74:42:71:a5:7b:5e:2c:0e:a2:76:fe:81:f4:90:2f:9b:c7:8b:
         7d:ca:82:18:53:13:c2:ad:fc:71:77:d7:36:54:5f:21:c5:90:
         ef:df:55:b5:ce:ff:cd:3b:46:ff:38:86:27:24:ea:ae:b7:61:
         8d:c8:fb:ae:f9:32:68:18:b0:7b:5f:81:42:64:9c:93:6b:d0:
         30:f8:a2:23:d6:3f:fd:4e:31:0f:2a:b2:a8:e7:b3:63:12:9f:
         d2:9f:83:45:9f:08:b8:84:86:85:35:1a:10:35:67:4e:f3:dd:
         91:ee:00:31:37:bb:7e:25:a8:2e:b2:f1:64:20:df:71:8a:24:
         1e:36:34:a7:07:46:e5:34:f3:60:b7:9a:06:08:6f:53:08:ee:
         40:a4:a1:19:bb:9d:25:9c:0c:4b:58:cf:f3:42:b5:d5:03:72:
         1b:5b:39:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:20:12 2026 by rpki-client