Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa
File:                     3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa (raw, json)
Hash identifier:          T9AU+x0E0df1slDryY7x4B0CWzLWJIhFTOCHDMlbNPc=
Subject key identifier:   09:87:00:02:06:21:A9:18:26:86:7E:7A:7F:D2:61:14:32:E4:93:D3
Certificate issuer:       /CN=A919619E0000/serialNumber=4B1987D5160068092602529871C93EA320045A75
Certificate serial:       3E3B3968AC1A988B098256AE94CD05D860D5EF1B
Authority key identifier: 4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa
Signing time:             Sun 05 Oct 2025 05:27:55 +0000
ROA not before:           Sun 05 Oct 2025 05:22:55 +0000
ROA not after:            Sun 04 Oct 2026 05:27:55 +0000
asID:                     9449
IP address blocks:        103.184.174.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 22:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:3b:39:68:ac:1a:98:8b:09:82:56:ae:94:cd:05:d8:60:d5:ef:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919619E0000, serialNumber=4B1987D5160068092602529871C93EA320045A75
        Validity
            Not Before: Oct  5 05:22:55 2025 GMT
            Not After : Oct  4 05:27:55 2026 GMT
        Subject: CN=098700020621A91826867E7A7FD2611432E493D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:48:1a:8e:70:1c:f9:5b:7f:a3:1f:ba:d5:93:
                    86:4f:10:83:43:4b:45:0d:f5:52:50:d6:25:11:70:
                    46:ca:ad:eb:eb:f7:1b:2e:7f:89:e0:51:87:07:b1:
                    ab:cf:5f:74:8e:83:55:4b:9e:df:82:94:47:e8:cc:
                    0a:79:29:03:49:0d:53:dd:46:13:c6:bc:b9:cc:f3:
                    d8:50:8c:a4:d7:23:5c:2e:d0:2a:f1:82:90:3d:e4:
                    9e:04:98:a7:54:73:df:3a:2a:dc:30:41:a8:44:77:
                    b4:70:1b:14:bb:a6:14:07:5a:02:ff:33:d9:cc:29:
                    fa:1a:c9:a9:17:ff:26:5b:8f:c4:33:92:8e:80:fb:
                    75:4a:dd:b9:b6:22:cb:a4:8a:a5:47:c3:b4:89:40:
                    ef:81:97:1a:52:41:c6:d7:f9:d3:17:33:33:ab:54:
                    14:8b:95:d3:7a:b9:5b:7c:5b:95:f3:7c:a5:3b:46:
                    95:ac:c0:de:12:af:4d:03:05:29:dc:a0:25:32:c4:
                    a3:db:82:bb:ed:21:53:6d:db:ab:c0:24:17:b5:16:
                    b0:77:ca:83:80:a2:47:21:8e:4a:3f:59:a0:3b:54:
                    0e:f2:9b:30:04:d5:8c:03:29:4c:b6:10:f1:a3:18:
                    15:7e:9c:cf:11:c2:27:f5:20:52:13:6d:f2:79:8f:
                    8c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:87:00:02:06:21:A9:18:26:86:7E:7A:7F:D2:61:14:32:E4:93:D3
            X509v3 Authority Key Identifier:
                keyid:4B:19:87:D5:16:00:68:09:26:02:52:98:71:C9:3E:A3:20:04:5A:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/4B1987D5160068092602529871C93EA320045A75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SxmH1RYAaAkmAlKYcck-oyAEWnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/7/3130332e3138342e3137342e302f32332d3234203d3e2039343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:27:5d:b4:fc:cc:55:53:75:04:57:d4:28:33:79:d1:e9:37:
         d3:5d:5a:d5:5b:da:79:97:db:13:dc:3d:01:9f:eb:34:42:2f:
         78:03:11:9e:43:90:04:65:86:68:f1:0a:38:f3:10:1a:b5:70:
         a3:b1:9a:33:5c:24:46:c3:bf:c4:35:f1:10:aa:3f:7c:fa:4c:
         cc:c2:8e:12:4e:31:09:ed:4a:72:0b:2d:f6:59:c6:3c:88:80:
         b3:58:4c:3f:21:b9:fd:eb:a7:c7:12:00:ab:8d:6c:40:fd:a5:
         50:bf:92:09:58:91:d1:dd:66:9b:76:14:3a:14:00:09:4d:2d:
         47:c6:ab:3d:f0:6a:65:3a:ab:73:ad:0f:a0:00:56:6c:4e:20:
         e6:a1:67:6e:26:4c:7a:dc:82:bd:44:60:98:f5:96:6f:64:20:
         42:d9:14:bf:59:ed:c2:d6:e3:11:55:cf:58:1e:45:80:b3:2a:
         14:64:17:ed:23:11:69:14:8d:bd:78:94:d1:4c:9b:98:8a:1a:
         90:bd:45:b7:b3:54:52:5d:ba:90:4d:6e:ce:5a:9a:2e:da:9e:
         42:b7:a2:64:5b:fd:f0:86:f9:22:33:66:b3:ad:86:c1:ed:9d:
         7a:19:8c:a0:e9:f9:fc:70:5b:32:9f:be:67:c0:86:ef:71:a0:
         3c:74:1f:39
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUPjs5aKwamIsJglaulM0F2GDV7xswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOTYxOUUwMDAwMTEwLwYDVQQFEyg0QjE5ODdENTE2
MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1MB4XDTI1MTAwNTA1MjI1NVoX
DTI2MTAwNDA1Mjc1NVowMzExMC8GA1UEAxMoMDk4NzAwMDIwNjIxQTkxODI2ODY3
RTdBN0ZEMjYxMTQzMkU0OTNEMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANZIGo5wHPlbf6MfutWThk8Qg0NLRQ31UlDWJRFwRsqt6+v3Gy5/ieBRhwex
q89fdI6DVUue34KUR+jMCnkpA0kNU91GE8a8uczz2FCMpNcjXC7QKvGCkD3kngSY
p1Rz3zoq3DBBqER3tHAbFLumFAdaAv8z2cwp+hrJqRf/JluPxDOSjoD7dUrdubYi
y6SKpUfDtIlA74GXGlJBxtf50xczM6tUFIuV03q5W3xblfN8pTtGlazA3hKvTQMF
KdygJTLEo9uCu+0hU23bq8AkF7UWsHfKg4CiRyGOSj9ZoDtUDvKbMATVjAMpTLYQ
8aMYFX6czxHCJ/UgUhNt8nmPjE0CAwEAAaOCAhEwggINMB0GA1UdDgQWBBQJhwAC
BiGpGCaGfnp/0mEUMuST0zAfBgNVHSMEGDAWgBRLGYfVFgBoCSYCUphxyT6jIARa
dTAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MDUzMDAwMDAvNy80QjE5ODdE
NTE2MDA2ODA5MjYwMjUyOTg3MUM5M0VBMzIwMDQ1QTc1LmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9TeG1IMVJZQWFB
a21BbEtZY2NrLW95QUVXblUuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUH
MAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTA1
MzAwMDAwLzcvMzEzMDMzMmUzMTM4MzQyZTMxMzczNDJlMzAyZjMyMzMyZDMyMzQy
MDNkM2UyMDM5MzQzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7iuMA0GCSqGSIb3DQEBCwUAA4IB
AQAxJ120/MxVU3UEV9QoM3nR6TfTXVrVW9p5l9sT3D0Bn+s0Qi94AxGeQ5AEZYZo
8Qo48xAatXCjsZozXCRGw7/ENfEQqj98+kzMwo4STjEJ7UpyCy32WcY8iICzWEw/
Ibn966fHEgCrjWxA/aVQv5IJWJHR3WabdhQ6FAAJTS1Hxqs98GplOqtzrQ+gAFZs
TiDmoWduJkx63IK9RGCY9ZZvZCBC2RS/We3C1uMRVc9YHkWAsyoUZBftIxFpFI29
eJTRTJuYihqQvUW3s1RSXbqQTW7OWpou2p5Ct6JkW/3whvkiM2azrYbB7Z16GYyg
6fn8cFsyn75nwIbvcaA8dB85
-----END CERTIFICATE-----
Generated at Tue Oct 21 01:25:08 2025 by rpki-client