Route Origin Authorization

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91905300000/4/323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa
File:                     323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa (raw, json)
Hash identifier:          Yif9zAcaCiGPMsa6nFpzg5c6EtmMp4yn18LmSsTMSYg=
Subject key identifier:   83:8F:4A:D4:70:E6:64:63:37:DB:CD:53:AF:E4:FF:FC:DA:C0:0D:0B
Certificate issuer:       /CN=A91E539C0000/serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
Certificate serial:       3F70431D2EF6414030D16D808FD492DA959099C9
Authority key identifier: B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/4/323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa
Signing time:             Sun 06 Sep 2026 05:56:55 +0000
ROA not before:           Sun 06 Sep 2026 05:51:55 +0000
ROA not after:            Sun 05 Sep 2027 05:56:55 +0000
asID:                     9449
IP address blocks:        2403:7e00:f001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Sep 2026 22:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:70:43:1d:2e:f6:41:40:30:d1:6d:80:8f:d4:92:da:95:90:99:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E539C0000, serialNumber=B7351B05B1619E9DE395F0B2FFC9EE1129F300B4
        Validity
            Not Before: Sep  6 05:51:55 2026 GMT
            Not After : Sep  5 05:56:55 2027 GMT
        Subject: CN=838F4AD470E6646337DBCD53AFE4FFFCDAC00D0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:33:22:4d:8b:95:ed:67:6b:9e:22:94:7a:2f:
                    66:04:5f:40:8e:be:b2:d5:09:a4:3c:bb:c4:60:c0:
                    d1:0e:4c:75:5e:db:d8:47:7c:0d:9f:9e:e8:be:30:
                    d3:c7:75:cf:1d:b5:c5:ee:00:fd:1f:62:12:cd:4a:
                    f4:ea:82:75:99:1d:7d:6c:5e:45:c8:70:c0:0e:a6:
                    d2:d1:18:61:39:ab:38:d0:5b:f0:62:dc:59:95:61:
                    4c:83:e8:b5:bd:3c:66:46:57:8f:7b:38:3e:db:d1:
                    b0:9b:49:f4:30:cb:fa:67:1e:82:eb:0b:a6:c8:4a:
                    0d:f3:30:f5:d9:32:de:bb:9c:20:ad:30:29:41:ea:
                    c7:8c:6b:c6:8f:97:f5:20:a1:8c:27:d5:6e:b3:ab:
                    b8:44:2c:0c:7a:d0:82:83:53:24:fd:46:76:32:53:
                    0f:88:6c:2a:ad:cc:25:4e:3e:f9:95:2e:95:5c:c6:
                    93:95:11:a4:50:ae:f6:57:66:a2:e0:04:b6:9c:f3:
                    d1:2a:dc:37:1b:c6:74:18:17:da:da:93:97:6a:14:
                    33:6c:d3:1c:78:01:a5:3e:ad:6a:43:4f:bd:f7:68:
                    ea:de:d2:9b:5c:85:ad:5a:c9:d1:fd:80:2a:41:38:
                    36:f3:2a:cd:91:a4:0f:7f:42:1d:5a:3c:d0:5c:39:
                    6b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8F:4A:D4:70:E6:64:63:37:DB:CD:53:AF:E4:FF:FC:DA:C0:0D:0B
            X509v3 Authority Key Identifier:
                keyid:B7:35:1B:05:B1:61:9E:9D:E3:95:F0:B2:FF:C9:EE:11:29:F3:00:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/B7351B05B1619E9DE395F0B2FFC9EE1129F300B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tzUbBbFhnp3jlfCy_8nuESnzALQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/4/323430333a376530303a663030313a3a2f34382d3438203d3e2039343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:7e00:f001::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:90:df:de:d3:86:a5:7e:5e:39:06:9c:4d:fd:35:a1:9c:bf:
         d3:a0:d9:22:11:be:20:e8:67:73:03:ef:33:32:da:59:ce:ac:
         d5:64:eb:c1:f1:b7:1e:40:9a:bd:d0:9e:ae:0d:ae:b3:9a:75:
         df:2d:0c:fe:51:37:5d:82:60:d6:27:ea:f5:d5:ec:1b:76:f6:
         41:8b:30:b8:85:f0:5d:27:70:e4:2d:3b:01:a0:52:81:30:09:
         44:56:38:60:1c:03:82:02:48:b6:06:a8:3a:e3:c7:6e:bb:9d:
         23:12:05:43:e4:d2:9d:5d:22:dd:9f:76:d0:ce:f8:cd:46:d4:
         3a:e1:41:e1:20:05:f2:e0:5e:91:b6:47:ec:b1:ab:d4:09:8c:
         0a:35:c7:7e:1a:f7:48:ee:df:8b:7e:19:b7:2f:2e:9a:bb:90:
         a9:8a:c2:a9:25:96:0b:3d:28:eb:27:f0:ca:6b:1b:95:5b:56:
         2e:8a:25:cb:be:50:7b:a6:83:cf:77:83:73:22:b4:0f:d2:6a:
         c9:4a:96:07:bb:32:03:11:b3:5f:ae:8c:07:7a:89:fa:19:5e:
         89:37:af:71:ec:20:b2:50:35:e6:37:c2:24:2b:69:c6:39:09:
         29:f2:31:9a:9f:a0:8e:3a:72:64:de:13:50:74:ff:4d:c3:fd:
         f1:60:5a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:02:57 2026 by rpki-client