Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91905300000/9/3230322e31342e3134382e302f32342d3234203d3e2039393133.roa
File:                     3230322e31342e3134382e302f32342d3234203d3e2039393133.roa (raw, json)
Hash identifier:          ND9xLQI8Vy8JA2jtUa6aYRzvXLnRH0xjgm4vmCRNG9o=
Subject key identifier:   1E:25:BD:B8:A1:FE:0A:98:87:43:B0:50:53:B6:28:59:6D:09:9A:3E
Certificate issuer:       /CN=A919B0BE0000/serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB
Certificate serial:       4787F452C8774A455060FD2876FAD708B11C629A
Authority key identifier: 33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91905300000/9/3230322e31342e3134382e302f32342d3234203d3e2039393133.roa
Signing time:             Mon 20 Apr 2026 07:27:11 +0000
ROA not before:           Mon 20 Apr 2026 07:22:11 +0000
ROA not after:            Mon 19 Apr 2027 07:27:11 +0000
asID:                     9913
IP address blocks:        202.14.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl
                          rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 23:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:87:f4:52:c8:77:4a:45:50:60:fd:28:76:fa:d7:08:b1:1c:62:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B0BE0000, serialNumber=33F4082166A89FFF6F326AE09B44BFBEF1629FEB
        Validity
            Not Before: Apr 20 07:22:11 2026 GMT
            Not After : Apr 19 07:27:11 2027 GMT
        Subject: CN=1E25BDB8A1FE0A988743B05053B628596D099A3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5b:69:d6:f6:15:f8:5b:e7:77:08:f7:ad:e2:
                    ac:22:69:d4:b0:ac:0b:6b:eb:48:72:2f:c4:73:fa:
                    27:fa:65:5a:ef:ea:2b:76:1a:4b:2e:46:21:87:da:
                    6c:bc:21:d8:11:15:d7:eb:73:de:46:28:7f:8b:8f:
                    1c:c1:fe:28:3e:49:f8:17:1b:8a:15:e7:38:0d:24:
                    6d:54:11:f5:f9:64:49:ed:62:cc:8f:08:01:17:d7:
                    55:cc:c1:83:b9:e7:f4:b4:e1:a7:cb:59:39:5c:06:
                    2e:3e:75:50:97:62:f2:9e:b6:95:71:1a:7e:1f:2d:
                    f8:70:35:a2:27:ea:66:e0:74:6d:59:9d:bb:76:a1:
                    ba:4c:ab:3f:e1:4a:d1:4e:d1:e7:48:31:60:88:9c:
                    e8:7c:ff:5d:a7:a9:81:09:14:26:37:67:71:39:87:
                    7e:43:3c:34:5a:77:d0:8f:c0:00:34:d9:41:df:fb:
                    37:9f:7e:58:8a:01:1d:bb:ee:be:7b:94:fc:22:be:
                    21:3a:07:18:1b:33:ab:c6:b5:09:f2:74:6a:aa:d2:
                    55:5f:a1:c3:7b:f2:13:85:e0:da:9a:c3:42:67:f0:
                    c6:9c:bd:17:d2:e3:5f:cd:0c:8c:14:a5:2d:d3:bb:
                    2f:aa:e8:17:96:23:f7:dc:26:fe:0a:ef:b9:0c:b5:
                    f0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:25:BD:B8:A1:FE:0A:98:87:43:B0:50:53:B6:28:59:6D:09:9A:3E
            X509v3 Authority Key Identifier:
                keyid:33:F4:08:21:66:A8:9F:FF:6F:32:6A:E0:9B:44:BF:BE:F1:62:9F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/33F4082166A89FFF6F326AE09B44BFBEF1629FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M_QIIWaon_9vMmrgm0S_vvFin-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91905300000/9/3230322e31342e3134382e302f32342d3234203d3e2039393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.14.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:87:7e:94:f0:62:54:df:42:b6:1a:e7:72:c1:28:43:a3:96:
         63:8a:54:af:ee:8b:b5:f9:b7:1e:1d:6c:7b:12:89:06:75:9f:
         c3:63:2f:16:32:d8:4b:17:44:5a:85:6e:7f:be:6d:24:12:35:
         67:b0:2c:61:ff:b9:51:fd:67:d8:8e:bc:db:bf:c5:75:92:4f:
         35:27:fc:59:81:f7:1d:b5:23:04:37:61:74:db:1b:c1:75:c5:
         ce:13:7e:6f:33:c8:09:3c:f5:d2:50:16:ca:b4:ee:6d:18:97:
         a9:7a:44:09:16:89:1f:1a:9c:a4:6f:30:ec:9c:08:f1:a5:26:
         6c:78:54:0e:03:22:1d:36:90:bb:98:00:7c:1f:be:8a:63:1d:
         2c:9f:c3:95:f3:21:95:1e:17:e4:7b:e6:69:ae:54:d8:2c:4b:
         e3:91:ef:9a:93:c6:03:06:6f:5e:ae:1c:22:fc:00:d1:b6:00:
         9a:28:09:f2:d3:7c:1e:8b:64:e7:94:af:69:0b:01:72:4d:21:
         29:e8:86:63:1e:60:24:ca:6a:41:45:a0:9c:6f:71:3e:a4:4d:
         2b:8e:b3:93:09:ce:c2:44:af:ad:6a:4c:8f:46:be:01:aa:5b:
         c4:6d:5d:30:fd:bd:b1:16:04:3d:76:1f:a4:07:fa:b6:0b:e5:
         71:38:42:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:51:01 2026 by rpki-client