Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa
File:                     323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (raw, json)
Hash identifier:          cGeOnsJN9IYgW8dq6N8HrHBO8NVDz3l/FbAcR3ZDzvw=
Subject key identifier:   75:45:B8:6A:B0:39:63:F5:7C:76:01:1A:95:79:07:B0:54:4F:3E:19
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       736B2E78033542250709B4A9029B089C972486BC
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa
Signing time:             Thu 19 Jun 2025 10:58:46 +0000
ROA not before:           Thu 19 Jun 2025 10:53:46 +0000
ROA not after:            Thu 18 Jun 2026 10:58:46 +0000
asID:                     136792
IP address blocks:        2401:73c0:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Jul 2025 18:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:6b:2e:78:03:35:42:25:07:09:b4:a9:02:9b:08:9c:97:24:86:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000, serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Jun 19 10:53:46 2025 GMT
            Not After : Jun 18 10:58:46 2026 GMT
        Subject: CN=7545B86AB03963F57C76011A957907B0544F3E19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:45:e6:32:ec:e2:c4:cd:e1:df:3c:91:7d:21:
                    f2:fc:59:ab:da:e3:d8:12:d3:df:d1:7c:95:64:7e:
                    73:48:89:e9:3e:6f:1d:44:d7:a2:57:1d:bc:b7:83:
                    34:cd:b5:85:8e:30:a2:6f:fb:8c:0e:e4:d2:39:bf:
                    24:ce:d1:9e:9a:23:b2:d6:2d:bb:89:8c:26:bb:47:
                    f7:77:44:3e:a0:69:05:ca:56:99:fd:42:3a:7f:1a:
                    43:ac:b3:36:9e:4f:66:26:55:77:74:88:d0:58:11:
                    18:29:33:62:a1:79:8d:8f:a0:47:33:66:60:65:82:
                    c1:66:87:df:8b:a0:46:03:17:f6:2b:7b:a2:3e:4b:
                    d0:1c:ce:01:d5:4e:f3:62:6c:cb:cc:b2:ee:23:3c:
                    8a:03:c6:f2:84:97:ac:36:df:5b:cb:4a:ba:57:62:
                    c8:dc:05:2c:0b:c7:43:53:44:a9:3a:43:82:b5:ef:
                    ac:66:ce:9b:ca:aa:45:0e:cd:4e:51:48:16:32:d7:
                    7f:df:01:08:b5:ce:14:e6:88:b1:93:b2:94:b4:36:
                    b2:82:d2:41:7e:d5:2c:f3:2b:ad:20:86:6c:94:73:
                    7b:92:a0:01:fd:cb:55:23:0d:0b:3e:ee:6f:a2:d8:
                    82:44:50:dc:6e:90:ae:31:79:17:3e:40:ea:fe:da:
                    20:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:45:B8:6A:B0:39:63:F5:7C:76:01:1A:95:79:07:B0:54:4F:3E:19
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:73c0:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:bb:2a:73:3f:9d:9b:64:af:1d:62:43:5a:82:eb:7a:22:e6:
         4e:d4:8a:ea:d3:86:92:ba:ac:e3:db:35:a1:5a:b5:33:87:c9:
         42:b4:58:32:ce:77:4c:e0:ad:aa:e2:cb:57:20:22:5d:95:a1:
         a3:10:27:95:e6:4c:84:66:8c:ca:df:41:18:b4:71:44:ad:99:
         0d:dc:d2:3b:c0:a6:e9:92:93:66:8a:f7:e4:20:e4:8b:bb:5a:
         f9:c9:de:bf:be:32:e2:fc:12:48:1e:ed:d9:66:9c:f9:8b:00:
         c4:e7:f7:42:ca:d7:e1:64:c9:92:d8:7d:38:b5:7f:41:34:38:
         13:37:47:db:6d:68:5b:f7:30:18:e4:e9:27:2d:39:98:9f:32:
         07:d8:2c:d1:38:2d:c8:56:9a:54:ba:cf:54:2e:a1:73:48:c4:
         6e:65:06:bb:09:24:2f:d8:0e:e0:fc:1d:fe:01:05:cb:5a:84:
         c6:36:61:44:11:60:f2:94:c4:ed:23:72:90:c9:2f:6f:09:b3:
         96:b0:45:ba:8f:21:1b:35:4a:eb:a7:b4:40:58:f9:bf:fd:d9:
         2c:ae:24:18:1c:66:c8:41:a4:c0:13:e3:f2:0f:ac:02:57:67:
         50:ed:4e:4a:7c:f9:0b:e7:77:6f:5f:dc:fc:7e:94:5e:79:50:
         d9:16:b8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:13:56 2025 by rpki-client