Route Origin Authorization

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e203136353039.roa
File:                     3130332e3233382e3132382e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          d1XIE95syZP0v07zjAuCvJR2QmouxxiaARcQuCz9mh0=
Subject key identifier:   A4:BB:C2:54:91:A2:D1:04:66:F6:D0:B3:95:9A:F5:91:42:6D:96:4C
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       083EAFBE91610008FBD7E4F5F03BD366A0F9644A
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e203136353039.roa
Signing time:             Wed 04 Nov 2026 10:30:09 +0000
ROA not before:           Wed 04 Nov 2026 10:25:09 +0000
ROA not after:            Wed 03 Nov 2027 10:30:09 +0000
asID:                     16509
IP address blocks:        103.238.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 23:31:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:3e:af:be:91:61:00:08:fb:d7:e4:f5:f0:3b:d3:66:a0:f9:64:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: Nov  4 10:25:09 2026 GMT
            Not After : Nov  3 10:30:09 2027 GMT
        Subject: CN=A4BBC25491A2D10466F6D0B3959AF591426D964C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:75:e1:25:21:9a:64:d1:54:90:28:4b:9d:31:
                    36:4f:e9:09:4f:13:24:35:39:57:e5:04:03:29:a7:
                    f4:52:b9:ae:7a:9f:95:40:4f:52:6c:87:f7:a6:bf:
                    cf:46:a8:7a:31:d8:1d:f1:98:08:15:39:3c:5b:3f:
                    e6:b5:1c:80:d6:e4:ac:f9:84:dd:c9:3d:41:f0:37:
                    66:18:02:99:8a:61:55:16:0f:24:cc:37:a3:e9:1a:
                    28:c1:55:88:45:2d:fd:3c:b4:19:91:6a:6c:ce:61:
                    f9:28:be:50:22:4d:ec:1f:2f:b8:77:54:0b:fb:4b:
                    81:79:f6:c2:40:d9:a0:02:59:f9:d2:51:0c:16:d7:
                    f5:7d:e6:19:f3:f7:ca:50:ea:a7:14:37:83:6b:d5:
                    d5:98:fd:ac:a5:22:33:d2:13:1f:bc:3e:9f:80:32:
                    50:6d:45:b1:4f:94:a2:01:95:e7:73:7e:6d:d3:f2:
                    00:d1:b2:1c:5a:8e:03:fe:43:65:4e:b0:5c:dc:6a:
                    08:82:7d:b6:3e:df:05:f0:3b:38:fc:fa:b8:93:91:
                    85:e2:9f:bb:5f:72:28:94:de:8f:f3:fa:06:87:bf:
                    84:91:f9:71:14:fd:a4:1a:eb:24:e8:24:42:94:0d:
                    30:00:30:0d:a9:a5:0a:84:90:a3:3b:88:a0:27:02:
                    f9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BB:C2:54:91:A2:D1:04:66:F6:D0:B3:95:9A:F5:91:42:6D:96:4C
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:c5:54:4b:22:9a:df:50:98:76:d0:1a:b6:87:82:64:29:83:
         83:75:cc:61:96:5e:2d:63:9f:33:ad:2c:79:ed:98:c8:a8:e1:
         e8:f4:db:79:0d:21:ec:7f:b2:e5:35:de:d9:1a:c3:4c:00:05:
         3c:42:5d:f7:e7:a8:6f:e4:3a:18:f9:56:d3:26:4e:57:e4:29:
         77:11:b2:0d:1d:b6:c6:b6:10:f4:b3:4c:c5:21:ea:01:b2:bf:
         ea:2d:a6:af:bd:90:8b:3c:50:95:a9:8b:14:2c:45:75:1c:6f:
         01:c9:62:67:fa:de:8d:c7:1f:cc:f8:c2:73:a1:4b:0c:ec:e3:
         88:ac:47:80:59:64:6e:76:5c:84:79:bb:9b:9b:db:48:de:b8:
         e9:9e:69:75:7f:d3:00:75:ed:ca:95:50:d5:66:43:05:28:7e:
         15:08:f7:8e:22:5c:5d:2f:65:99:ce:09:a0:b0:5d:f5:7e:45:
         0e:c8:ec:19:bf:33:be:fa:0f:16:f9:07:45:9d:8f:62:c6:f0:
         5d:4f:26:3d:f7:7d:b1:99:74:dd:b9:5f:6f:17:21:86:e4:85:
         2e:4e:70:07:68:7a:e3:06:fc:0b:06:f7:ce:9a:83:4c:9e:d0:
         cb:b1:6f:c8:da:9a:5b:be:88:ce:bb:84:09:c0:30:87:2a:6e:
         a3:c6:27:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:20:51 2026 by rpki-client