Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/3130332e3234382e35302e302f32332d3234203d3e20313437303230.roa
File:                     3130332e3234382e35302e302f32332d3234203d3e20313437303230.roa (raw, json)
Hash identifier:          V+PhSi6pVp1iwPmgYPUX+HImgtKayc1/tbkxWsFH5ls=
Subject key identifier:   A0:8E:A4:E3:CD:11:0C:C6:4B:B5:3B:C9:64:EC:76:E4:9B:60:2E:54
Certificate issuer:       /CN=A9150E4D0000/serialNumber=11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E
Certificate serial:       49F4E9440E773659BE83B9CC804A9B3A5A0FBF47
Authority key identifier: 11:F9:8F:3F:8D:D4:F5:5C:C7:FF:B7:A4:BA:CC:65:6E:0D:19:3D:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/3130332e3234382e35302e302f32332d3234203d3e20313437303230.roa
Signing time:             Wed 04 Jun 2025 05:26:54 +0000
ROA not before:           Wed 04 Jun 2025 05:21:54 +0000
ROA not after:            Wed 03 Jun 2026 05:26:54 +0000
asID:                     147020
IP address blocks:        103.248.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.crl
                          rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Jul 2025 10:36:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f4:e9:44:0e:77:36:59:be:83:b9:cc:80:4a:9b:3a:5a:0f:bf:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E4D0000, serialNumber=11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E
        Validity
            Not Before: Jun  4 05:21:54 2025 GMT
            Not After : Jun  3 05:26:54 2026 GMT
        Subject: CN=A08EA4E3CD110CC64BB53BC964EC76E49B602E54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a1:53:7d:66:08:7f:80:e5:c1:fd:47:43:e4:
                    57:cf:0e:f2:0a:19:76:f6:35:64:f1:aa:43:fd:b6:
                    ac:7a:e2:1c:bc:2e:14:d9:8b:b2:9f:c4:04:f6:d6:
                    ed:a8:de:02:b1:b6:4d:a7:41:72:e3:32:82:d2:3b:
                    dd:4c:56:a8:bd:0a:ef:5b:c9:90:a8:a0:62:d1:36:
                    1e:2b:9f:fc:5f:bf:f4:3f:6a:0a:21:68:ea:77:4d:
                    8e:64:d4:1a:3a:9e:d2:d0:91:8e:1d:d0:2c:04:a6:
                    4f:b4:64:f8:dd:35:b6:11:7e:25:9c:d9:00:31:2f:
                    a5:c9:b0:6d:03:d9:cc:c4:04:44:94:4e:9f:65:9c:
                    91:25:63:85:73:bf:43:b5:a8:ec:1c:3b:0e:ce:46:
                    82:47:6c:ce:83:c7:85:17:13:17:a5:c9:e1:80:a5:
                    3f:14:7f:c3:8f:0d:95:ab:eb:8d:d8:cd:8e:6d:11:
                    a9:99:84:1e:59:34:60:84:51:3c:26:d7:34:01:7d:
                    e3:bf:c1:78:47:dc:68:fb:8c:7e:ae:e6:20:b5:3f:
                    bc:ba:c3:bc:c2:1a:9b:31:16:af:2d:be:8b:dc:e9:
                    7c:f8:30:79:37:71:d7:db:39:bc:39:51:5d:47:39:
                    be:d4:48:08:36:04:3f:bf:f7:12:ef:3a:ae:48:1f:
                    12:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8E:A4:E3:CD:11:0C:C6:4B:B5:3B:C9:64:EC:76:E4:9B:60:2E:54
            X509v3 Authority Key Identifier:
                keyid:11:F9:8F:3F:8D:D4:F5:5C:C7:FF:B7:A4:BA:CC:65:6E:0D:19:3D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/3130332e3234382e35302e302f32332d3234203d3e20313437303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:3c:44:09:55:54:19:ea:39:d0:f7:1a:44:ae:9f:cb:b4:ca:
         71:23:92:25:60:da:a0:38:58:87:1b:2a:1c:6a:01:d4:3a:5c:
         23:37:09:79:4c:a9:46:28:a0:b0:10:9d:c0:85:e8:1b:72:18:
         a9:03:94:77:e2:aa:a6:14:b7:b2:d8:73:f8:02:fe:60:a1:9f:
         c1:64:68:3a:23:41:ae:c5:b5:93:07:6a:95:bc:61:8b:f2:44:
         5c:21:43:10:d8:75:c6:03:9a:16:e9:88:c6:70:ae:4b:1c:6f:
         cb:99:7b:86:e3:cf:b8:90:5f:aa:1e:e8:90:32:7f:c1:66:bc:
         9f:6e:05:0d:f4:ac:a3:03:ff:69:58:5a:22:3c:d9:37:07:b3:
         d5:b9:10:c6:fb:25:cb:92:b2:2e:85:b5:be:60:08:a0:24:13:
         d4:d1:a1:5a:44:05:dd:6a:f1:0c:dd:cd:f1:23:50:30:a2:36:
         74:a8:5b:9c:8d:4d:76:b8:d1:40:59:74:a6:6b:50:d4:dc:ac:
         bc:c8:2f:f8:46:b8:4f:34:e8:b3:3a:7a:0a:88:f1:29:ea:b4:
         f9:5a:c0:55:54:4f:02:c5:85:bb:b9:5f:a8:7a:a0:32:7b:56:
         aa:7d:57:9e:b7:9b:6f:0e:dc:1c:74:67:ff:70:9d:db:41:77:
         13:0b:ee:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:28:52 2025 by rpki-client