Route Origin Authorization

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e203134363138.roa
File:                     3130332e3233382e3132382e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          d3P3WC5yrcNvHuUnPZwXk8M9TJVuxaLvaw3XJhLzpjE=
Subject key identifier:   DC:5E:51:C5:DE:F5:C7:45:34:91:32:7C:85:70:16:0E:04:22:54:AA
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       459C348E6797FBEA289574EC61A3150F2C0D0BB6
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e203134363138.roa
Signing time:             Wed 04 Nov 2026 10:30:09 +0000
ROA not before:           Wed 04 Nov 2026 10:25:09 +0000
ROA not after:            Wed 03 Nov 2027 10:30:09 +0000
asID:                     14618
IP address blocks:        103.238.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 23:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:9c:34:8e:67:97:fb:ea:28:95:74:ec:61:a3:15:0f:2c:0d:0b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: Nov  4 10:25:09 2026 GMT
            Not After : Nov  3 10:30:09 2027 GMT
        Subject: CN=DC5E51C5DEF5C7453491327C8570160E042254AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:92:42:f2:c1:72:ba:b5:cf:71:04:4b:65:75:
                    9f:25:0c:ad:cb:54:0b:f5:40:a4:13:bc:92:4f:d7:
                    d7:5b:f4:9f:d1:0f:24:30:16:66:a7:2f:0f:5c:0c:
                    11:3e:1e:a3:fb:87:de:e1:1a:8c:cb:b3:aa:f2:be:
                    34:3f:b6:6e:de:99:a1:1a:bf:87:41:80:c9:fd:b4:
                    34:48:8d:52:0a:48:a5:5c:e3:32:c9:15:17:af:cf:
                    c5:f8:2a:9b:6b:9d:be:bc:86:58:f3:c0:dd:42:10:
                    57:6e:61:59:63:24:37:4b:f3:4d:02:2e:b3:53:b1:
                    f7:81:a3:e3:a2:42:32:1c:98:0d:a8:25:18:45:12:
                    59:48:ac:a1:96:07:ec:8c:3d:61:1d:4a:ca:1a:31:
                    96:c7:08:25:2d:ff:63:04:f0:1f:a9:42:af:c4:56:
                    62:ad:fc:79:e8:bf:46:bd:96:9a:7d:89:9f:2f:0c:
                    e3:32:7e:2f:80:9e:7a:35:0b:79:2b:dd:7b:ff:7d:
                    22:83:c1:d3:4b:37:dc:b4:63:42:ff:8f:da:f6:3f:
                    54:27:9f:bc:cb:de:1e:0e:03:c1:69:7a:ec:bc:63:
                    7f:0e:97:e1:08:2a:4f:ab:57:ef:e6:67:a1:84:f6:
                    62:6d:af:44:21:cf:21:c8:7a:f4:6b:d2:7d:57:5d:
                    88:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5E:51:C5:DE:F5:C7:45:34:91:32:7C:85:70:16:0E:04:22:54:AA
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:24:77:c7:0a:84:93:58:35:29:c4:43:07:59:e7:82:bc:52:
         cd:04:71:76:48:88:d1:d4:fe:4c:5c:a2:38:67:80:c8:35:f5:
         66:2c:3a:fb:81:1a:95:a2:fc:1c:96:7b:37:cd:04:dd:d2:75:
         31:6c:c2:f9:5a:74:fb:b7:66:e7:46:95:d8:af:76:a4:a8:9b:
         13:51:9b:1d:76:e2:fe:9e:a1:7d:29:8e:5b:82:75:dc:9b:54:
         d4:00:fd:fa:54:cd:69:d3:77:0b:ec:be:4e:1f:74:8c:ea:c2:
         64:72:15:3f:03:20:ef:29:d3:70:2b:8b:a7:ae:eb:32:53:bc:
         99:cd:88:25:69:d3:8d:2c:57:f3:b8:c8:ee:6d:f1:54:b4:00:
         d4:06:33:48:90:6c:33:fb:fd:07:b5:92:e1:3d:03:fb:36:6a:
         3e:11:2c:b4:76:31:8f:fb:01:98:39:48:21:a7:9e:4f:eb:f9:
         66:13:79:3d:1a:34:35:01:de:38:b1:d9:e2:1c:0e:bc:eb:d3:
         e6:36:18:09:6a:9e:da:5e:30:3c:eb:51:87:86:76:f6:8b:75:
         4f:92:6b:15:c5:d4:36:83:5e:2c:ef:cc:d6:bb:df:d2:e0:b5:
         7f:02:7f:7e:ce:c9:38:88:23:22:d5:ba:de:f0:9b:eb:d2:79:
         ac:8a:2c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:33:58 2026 by rpki-client