Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/4/3130332e36302e3230302e302f32322d3234203d3e2037353436.roa
File:                     3130332e36302e3230302e302f32322d3234203d3e2037353436.roa (raw, json)
Hash identifier:          Wnz7iyh9clZuDDpLGVNNBZJ0JgoGPtAKZ8B2Ynr6Xgc=
Subject key identifier:   37:68:2E:07:E6:A7:86:37:4E:27:68:A1:A7:26:3F:C1:2B:61:8F:CE
Certificate issuer:       /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial:       78ED9223A2FF3A0003B3DAB664424A5829321582
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/4/3130332e36302e3230302e302f32322d3234203d3e2037353436.roa
Signing time:             Sun 05 Oct 2025 05:27:56 +0000
ROA not before:           Sun 05 Oct 2025 05:22:56 +0000
ROA not after:            Sun 04 Oct 2026 05:27:56 +0000
asID:                     7546
IP address blocks:        103.60.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 07:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ed:92:23:a2:ff:3a:00:03:b3:da:b6:64:42:4a:58:29:32:15:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
        Validity
            Not Before: Oct  5 05:22:56 2025 GMT
            Not After : Oct  4 05:27:56 2026 GMT
        Subject: CN=37682E07E6A786374E2768A1A7263FC12B618FCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:67:eb:81:0b:89:ee:03:28:0c:7e:ea:69:1f:
                    a1:42:04:94:76:a5:46:23:20:e8:c4:89:ee:48:c9:
                    27:75:05:22:2c:40:2c:01:10:c7:6e:0d:34:2a:8c:
                    67:8c:9c:c5:49:98:f5:f7:8b:84:78:2a:a4:00:db:
                    9b:a3:5d:6c:16:39:ed:31:2e:a3:f1:9c:10:7e:0a:
                    bd:04:18:33:32:79:68:d5:6d:a3:8f:53:e8:eb:b4:
                    df:36:de:83:91:34:46:ac:73:cf:46:19:7e:c3:e7:
                    9a:7e:70:d5:ea:fb:5e:fd:2b:50:44:b5:b3:ce:44:
                    6a:cd:50:a5:b4:2d:cc:cb:b3:1c:65:1d:93:f8:75:
                    6a:ba:94:ff:01:27:2e:a1:07:9b:b5:4e:92:17:76:
                    12:ab:90:8f:11:a7:42:92:96:7a:35:e9:52:dd:4b:
                    cb:f8:58:e7:63:8d:30:66:5a:fe:62:19:cf:a8:de:
                    26:7c:4b:31:f6:e2:02:58:11:fb:bb:88:f0:6e:e7:
                    09:26:a1:0e:23:22:ee:e6:f4:9e:0d:12:d9:4f:04:
                    7b:39:1a:da:ef:4d:fb:ea:b8:5c:c5:38:b8:07:ca:
                    e3:f1:14:25:47:40:e5:eb:c0:b7:c3:cf:4c:8c:a1:
                    2e:e6:0c:ad:75:cd:ac:dc:70:42:ac:82:ac:e2:bc:
                    82:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:68:2E:07:E6:A7:86:37:4E:27:68:A1:A7:26:3F:C1:2B:61:8F:CE
            X509v3 Authority Key Identifier:
                keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/3130332e36302e3230302e302f32322d3234203d3e2037353436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:09:68:14:2c:a1:fe:46:53:80:2d:19:ea:5c:ad:7e:e1:9b:
         32:01:7c:54:ca:7c:82:8b:19:7d:a8:fe:41:7b:f2:30:28:4e:
         a2:2d:19:03:dc:00:a7:38:3f:d5:1a:60:b5:d2:50:80:43:a4:
         e2:72:90:18:de:76:35:6e:11:63:6e:4f:6a:09:84:38:16:90:
         f6:ae:74:19:21:cb:a4:56:13:16:bf:95:bc:ad:ad:f9:79:88:
         1a:20:c7:d1:18:68:4c:16:79:12:d8:ba:11:2a:8c:ca:8f:18:
         8a:3b:15:63:22:0a:3a:d0:41:d7:c0:c5:4c:9c:cd:6e:bc:f6:
         84:e1:50:b6:d3:82:81:37:ef:33:76:90:9e:1c:d7:8a:ac:20:
         db:b8:ac:78:28:6d:d0:cc:f9:66:c0:c1:d4:b5:40:bd:45:d6:
         4b:90:2e:8e:c9:e8:b3:4f:d1:d3:27:84:2f:58:5b:b9:99:32:
         58:23:11:30:34:4d:67:e9:6e:99:62:9a:09:a5:c0:4e:ce:09:
         b8:9a:27:05:f2:27:03:60:d8:47:af:4f:0b:68:0a:46:c1:c3:
         13:a7:32:d5:7c:87:3d:52:e8:1c:cb:77:46:68:04:d2:eb:cd:
         7d:dc:f6:70:72:ae:fa:32:ef:53:54:ca:eb:0b:87:ad:77:25:
         7f:8f:0b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:41:20 2025 by rpki-client