Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa
File:                     323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa (raw, json)
Hash identifier:          EZOcjod0P020aSaAKcSt3wLs5i7xD2mHOPcCy2SsTv8=
Subject key identifier:   48:F7:B7:23:97:1D:17:F5:F7:87:7A:3C:F2:90:0D:15:02:F0:8A:7D
Certificate issuer:       /CN=A9150E4D0000/serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
Certificate serial:       1744DDFE20A5E17D6FB9CABF39FA640F4203BBF9
Authority key identifier: 47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa
Signing time:             Sun 17 Aug 2025 22:21:33 +0000
ROA not before:           Sun 17 Aug 2025 22:16:33 +0000
ROA not after:            Sun 16 Aug 2026 22:21:33 +0000
asID:                     24381
IP address blocks:        2401:2060:b000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl
                          rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 10:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:44:dd:fe:20:a5:e1:7d:6f:b9:ca:bf:39:fa:64:0f:42:03:bb:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E4D0000, serialNumber=47FBDCE2CB6F2C6E4378C56882C3D246D76E5045
        Validity
            Not Before: Aug 17 22:16:33 2025 GMT
            Not After : Aug 16 22:21:33 2026 GMT
        Subject: CN=48F7B723971D17F5F7877A3CF2900D1502F08A7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:58:c4:d6:41:08:17:46:e9:8f:08:2e:43:0d:
                    80:f0:d4:85:10:ce:d8:f5:27:db:41:fd:8f:12:d5:
                    19:cd:66:6a:b0:49:70:51:d3:af:c7:7e:41:93:3f:
                    12:0f:27:8f:e5:e8:ed:d1:96:5a:b4:e0:27:8b:11:
                    60:5c:5f:65:77:82:26:62:71:fa:57:2f:e2:7d:53:
                    74:d9:a8:90:85:4d:b1:9f:09:57:a3:eb:15:a3:52:
                    db:77:a8:34:70:f6:a3:01:a1:68:d2:b9:a1:df:8d:
                    38:ae:e3:2d:e4:e1:a6:01:d7:eb:57:49:8f:33:97:
                    54:5c:13:04:52:e9:98:c8:63:e0:57:ac:ed:de:16:
                    e8:eb:ed:29:6c:ae:f2:ee:a6:ef:10:a8:01:80:bc:
                    bf:9d:6b:db:f5:c0:ee:76:85:83:2b:70:83:eb:36:
                    8f:c7:fa:06:d7:70:3b:8c:81:99:cf:9c:4d:1b:f6:
                    b9:4d:63:5f:9e:c2:65:37:c4:c2:d2:a8:d6:8f:ff:
                    b9:d6:2a:14:68:5c:43:95:9c:58:63:f2:e5:81:09:
                    c2:4c:ee:74:fa:bf:6d:fb:b3:7a:bb:1f:c3:71:ff:
                    15:9d:1d:4c:63:ce:96:d6:0f:df:9b:88:16:c5:1e:
                    d9:0a:99:fd:7d:27:48:db:08:0a:72:3b:63:aa:33:
                    28:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F7:B7:23:97:1D:17:F5:F7:87:7A:3C:F2:90:0D:15:02:F0:8A:7D
            X509v3 Authority Key Identifier:
                keyid:47:FB:DC:E2:CB:6F:2C:6E:43:78:C5:68:82:C3:D2:46:D7:6E:50:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/47FBDCE2CB6F2C6E4378C56882C3D246D76E5045.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R_vc4stvLG5DeMVogsPSRtduUEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a623030303a3a2f34382d3438203d3e203234333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2060:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         e0:c8:c2:4c:9c:83:75:4e:52:63:58:d4:0c:96:87:93:9e:55:
         3e:d8:a6:21:ba:1b:63:bf:53:90:d5:ff:a5:fe:c3:3d:af:00:
         0b:00:16:08:56:4c:91:54:c0:ea:a4:a5:31:51:86:a2:03:f2:
         6b:9b:e0:d3:ca:55:1c:14:83:fb:57:8e:a0:33:fb:74:fe:a7:
         ed:08:32:45:5f:e1:cf:fa:22:87:a0:9e:40:12:3f:b8:5b:86:
         5d:b2:ee:e3:42:35:1f:3c:6c:12:73:2b:8c:23:e1:6f:62:38:
         c2:c2:53:a5:76:4f:fe:88:79:fb:cb:5d:cc:ac:8a:cf:7a:be:
         28:a2:52:8f:49:5f:a1:20:b0:75:9f:37:63:9a:34:be:8d:13:
         c1:4d:b5:24:41:c3:45:60:d2:dc:7d:b6:a9:e7:c5:2f:1c:9e:
         a3:77:ca:7f:76:44:e2:fb:20:89:ba:58:72:9e:b7:3a:e2:9a:
         a7:aa:f8:e1:7d:6d:ec:3a:81:6b:c0:24:21:b1:b4:10:0f:d8:
         17:af:36:8b:da:e5:72:43:6d:4e:bc:5a:27:13:9b:ad:dd:d3:
         fd:8a:be:b1:dd:b4:50:34:7e:1f:29:90:14:ec:ff:82:15:bc:
         2b:ff:94:4a:65:f4:f1:42:82:a3:a6:5c:a3:26:20:a6:61:6b:
         4b:9b:1e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:20:37 2025 by rpki-client