Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/3/323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa
File:                     323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa (raw, json)
Hash identifier:          EnKbYM5JPBnTVQ+Jyftk1vH9d1AuN/7jU+zqtJ3Udl0=
Subject key identifier:   55:63:34:E5:DB:07:21:CD:C8:66:DA:14:87:A0:6D:E9:55:9A:10:14
Certificate issuer:       /CN=A911AC370000/serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
Certificate serial:       5B376DA8495F9250305014A3B4013B75824DA9BB
Authority key identifier: B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/3/323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa
Signing time:             Sun 05 Oct 2025 05:27:55 +0000
ROA not before:           Sun 05 Oct 2025 05:22:55 +0000
ROA not after:            Sun 04 Oct 2026 05:27:55 +0000
asID:                     37990
IP address blocks:        2001:df0:206::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 15:49:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:37:6d:a8:49:5f:92:50:30:50:14:a3:b4:01:3b:75:82:4d:a9:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911AC370000, serialNumber=B18F989967D30F2509E3D29707C5F85B5F6BDB6F
        Validity
            Not Before: Oct  5 05:22:55 2025 GMT
            Not After : Oct  4 05:27:55 2026 GMT
        Subject: CN=556334E5DB0721CDC866DA1487A06DE9559A1014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:03:ab:73:4e:42:ba:c5:54:bd:68:ce:7a:78:
                    30:a6:5a:e7:fd:88:e9:a9:62:1b:04:d8:8f:1e:2b:
                    a2:04:02:7f:39:ba:c6:16:df:ab:48:33:42:93:43:
                    dd:9a:73:a9:15:af:16:1c:04:e9:8d:99:c4:d6:43:
                    28:3f:91:4c:37:3d:b0:c6:3b:e9:9b:b6:68:c7:c4:
                    4a:91:4d:5c:29:8c:04:01:5b:c8:4b:75:df:3f:35:
                    44:b0:de:d0:4c:72:48:5f:25:e9:96:51:bd:9c:1d:
                    ea:35:d8:3c:00:ac:56:ba:45:0d:3c:50:1f:09:55:
                    3f:0d:7c:f3:e7:69:e8:0b:75:41:e1:32:95:77:8d:
                    db:f5:97:08:b3:ae:b1:71:ca:9e:af:4d:78:a1:e7:
                    63:13:56:78:5c:c8:ef:aa:18:e9:b3:c0:dc:3c:53:
                    fe:e6:e2:57:84:96:af:44:b3:91:74:86:c1:b3:3f:
                    d7:6f:dc:53:ba:5e:6f:ff:13:6b:f6:13:3d:2e:50:
                    71:1b:bf:7b:ab:22:56:a2:d7:3e:ac:ac:f5:0b:aa:
                    d3:1f:38:cb:e0:9f:f0:91:dc:10:ca:6f:01:bb:c9:
                    00:8b:74:49:88:1b:87:d6:fa:c4:d4:32:e1:bb:1a:
                    82:85:e2:36:55:26:07:31:ad:3e:4b:0d:4c:dc:be:
                    60:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:63:34:E5:DB:07:21:CD:C8:66:DA:14:87:A0:6D:E9:55:9A:10:14
            X509v3 Authority Key Identifier:
                keyid:B1:8F:98:99:67:D3:0F:25:09:E3:D2:97:07:C5:F8:5B:5F:6B:DB:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/B18F989967D30F2509E3D29707C5F85B5F6BDB6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY-YmWfTDyUJ49KXB8X4W19r228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/3/323030313a6466303a3230363a3a2f34382d3438203d3e203337393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:206::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:57:8b:e5:af:88:86:b4:63:0a:47:54:79:24:78:e4:5e:10:
         4a:e1:76:a8:1b:2e:92:62:84:d0:87:3e:e9:da:78:a6:11:c4:
         59:b4:89:15:b5:a8:78:07:6b:9f:48:b3:2c:00:cc:c9:e6:9b:
         9d:13:e4:cc:3f:8a:60:be:8d:b9:e3:28:95:b9:dd:bf:01:18:
         fd:11:e1:cd:28:43:7d:ae:3a:e5:c3:12:52:10:14:42:c4:31:
         7d:a7:1c:be:80:a2:b9:06:62:f9:7f:28:d1:d7:16:4f:ce:16:
         51:a6:b2:cc:de:d3:8b:52:2c:9e:90:aa:ee:72:bf:81:c6:2f:
         c4:87:01:d8:b5:26:29:5d:79:39:44:e1:25:4a:42:dd:30:7b:
         07:48:7f:75:02:d4:43:f9:48:0a:96:6f:c7:5e:67:04:1d:dc:
         3d:4d:b7:61:5e:8b:3e:d6:84:92:c6:ac:fb:e6:bd:81:5b:1e:
         03:2f:c0:b2:7c:57:fa:c3:9d:22:94:c6:40:7f:6e:3b:ae:a5:
         54:7a:12:6e:5c:9d:95:5c:33:8a:67:e4:38:ce:19:40:cd:39:
         3b:58:32:31:3c:67:70:3d:90:2f:85:05:3b:77:96:27:8e:f3:
         c5:c9:10:51:f9:d2:69:18:52:53:0d:6e:13:83:ef:9a:89:7d:
         3a:43:6d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:22:33 2025 by rpki-client