Route Origin Authorization

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38312e302f32342d3234203d3e203436353539.roa
File:                     34332e3235352e38312e302f32342d3234203d3e203436353539.roa (raw, json)
Hash identifier:          Up7ZjSCdm+fpdm+JoNxhBOJjtDjefWXuYo3dhJU7lVU=
Subject key identifier:   07:87:E5:5A:F0:8E:ED:79:0F:EA:A7:E1:F1:44:0F:5A:9F:5E:FE:DA
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       1B20AB033B3A348AF0904B585721DC5D7EEB431F
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38312e302f32342d3234203d3e203436353539.roa
Signing time:             Sun 20 Sep 2026 07:03:55 +0000
ROA not before:           Sun 20 Sep 2026 06:58:55 +0000
ROA not after:            Sun 19 Sep 2027 07:03:55 +0000
asID:                     46559
IP address blocks:        43.255.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Sep 2026 01:08:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:20:ab:03:3b:3a:34:8a:f0:90:4b:58:57:21:dc:5d:7e:eb:43:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: Sep 20 06:58:55 2026 GMT
            Not After : Sep 19 07:03:55 2027 GMT
        Subject: CN=0787E55AF08EED790FEAA7E1F1440F5A9F5EFEDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dc:93:a8:ad:35:54:ef:32:ff:12:5d:84:7f:
                    12:c7:5f:d6:67:df:9f:80:dc:09:21:ec:7b:17:bb:
                    14:71:db:b5:3b:31:2f:55:19:0d:38:40:7a:f8:f2:
                    a2:52:fd:1c:ad:cb:62:bb:34:0e:11:74:66:5a:92:
                    9f:6d:82:cd:bb:24:05:0a:89:68:d1:6d:b8:9d:0a:
                    01:0e:83:09:d2:e6:44:d7:78:be:f8:59:b1:fd:83:
                    5a:27:8e:c0:2f:cc:be:4a:6a:97:4d:82:83:00:67:
                    e8:62:83:5d:06:f8:86:21:1c:b5:c4:f9:e3:24:96:
                    11:5c:a7:c5:81:76:2a:c4:8b:6a:8d:6b:2d:af:00:
                    5b:5b:14:c3:8b:68:8f:20:d3:eb:f6:0e:5c:94:11:
                    59:65:f7:0b:43:2c:9e:96:3d:d8:ed:91:20:35:9e:
                    4d:b4:73:b1:d4:b0:8e:96:7d:88:2b:f6:7d:4c:c5:
                    8b:d1:5e:44:9e:a5:e5:89:a2:2f:38:a7:b7:96:05:
                    10:0a:de:c8:eb:85:47:b0:b6:4f:22:ce:15:83:4e:
                    85:b1:79:fd:f0:b0:f2:67:93:35:85:c2:fa:91:e6:
                    13:47:7d:79:88:44:66:bb:a7:03:91:1d:37:52:54:
                    ba:87:d9:e0:5a:bb:40:ce:e1:28:0e:c4:d7:b7:a6:
                    b8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:87:E5:5A:F0:8E:ED:79:0F:EA:A7:E1:F1:44:0F:5A:9F:5E:FE:DA
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38312e302f32342d3234203d3e203436353539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:b0:75:4a:7e:a8:db:52:82:26:9f:78:7a:f6:7d:2e:a4:8e:
         62:2a:49:24:21:f2:9c:a8:47:f3:27:1e:d9:c9:20:71:f9:29:
         4a:95:55:da:2e:a7:64:0e:d0:f6:ed:86:73:77:62:3a:33:fc:
         11:83:bc:fe:b2:6b:2c:ef:77:7b:5f:59:67:18:de:17:a8:1f:
         13:58:96:b1:d6:a4:2f:d6:b8:9c:41:6a:3a:c0:c1:dc:f2:9d:
         d7:fc:5a:d0:ea:4b:8a:e2:35:78:19:97:2d:57:3c:9d:43:74:
         34:7c:ff:09:5c:db:e8:c6:63:37:39:e9:58:99:0e:f5:68:f5:
         78:76:c1:9e:35:78:86:3a:17:ee:e0:a3:fd:f3:34:e5:40:15:
         40:d6:d5:71:9d:15:91:22:f7:62:01:ef:3f:7d:8e:5f:c5:0b:
         30:87:2f:5d:f8:33:0b:e7:e5:28:8f:9e:6e:79:34:cb:a2:44:
         8f:25:ff:35:18:73:b7:b9:18:6d:cf:fe:99:3d:04:6b:48:87:
         9f:e3:2e:66:68:0e:da:1f:f8:0c:d4:8f:24:38:c9:b4:ae:af:
         8e:00:dc:71:7c:a7:95:fc:b1:67:2b:65:77:4c:ef:4a:17:eb:
         98:1e:5e:91:c9:ea:25:03:22:4a:3c:80:db:ec:f0:d1:d2:78:
         2e:74:b1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:40:03 2026 by rpki-client