Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38312e302f32342d3234203d3e203436353539.roa
File:                     34332e3235352e38312e302f32342d3234203d3e203436353539.roa (raw, json)
Hash identifier:          //UuXn9WtkO4gR2SmefousyCafMw89f9w0hXvN+V6kA=
Subject key identifier:   D9:CC:65:03:EF:CD:6A:36:45:0C:76:EF:53:B0:D4:F0:32:9E:CB:28
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       575CCAABEF2B6FBC3F29D11EFC1508C35FB024EE
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38312e302f32342d3234203d3e203436353539.roa
Signing time:             Sun 19 Oct 2025 06:30:59 +0000
ROA not before:           Sun 19 Oct 2025 06:25:59 +0000
ROA not after:            Sun 18 Oct 2026 06:30:59 +0000
asID:                     46559
IP address blocks:        43.255.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 01:38:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:5c:ca:ab:ef:2b:6f:bc:3f:29:d1:1e:fc:15:08:c3:5f:b0:24:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000, serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: Oct 19 06:25:59 2025 GMT
            Not After : Oct 18 06:30:59 2026 GMT
        Subject: CN=D9CC6503EFCD6A36450C76EF53B0D4F0329ECB28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a0:4a:fc:35:c3:80:d5:ee:b9:0a:ef:cb:98:
                    6a:6f:1c:9b:c7:7d:28:e1:86:90:e9:d4:6d:a5:9f:
                    1c:b8:f3:43:d8:fe:ad:a6:e8:fa:76:de:2b:05:65:
                    7c:1f:62:bd:2e:c2:93:0e:73:12:be:c2:01:c5:61:
                    cd:b4:87:bb:27:4f:d0:06:8e:e8:09:2d:e0:11:30:
                    9f:63:9a:07:e4:0b:4a:12:77:98:8f:02:93:fb:9d:
                    5f:c6:2d:e1:11:46:9d:4a:90:af:d6:b0:63:41:99:
                    44:bb:ad:6a:1d:e5:e7:a7:3e:0a:00:b8:d5:3a:70:
                    8a:ac:88:29:87:4d:f3:75:e8:29:5e:c4:45:cc:b8:
                    13:7d:90:86:da:2c:1d:7a:be:1c:44:33:3a:00:0d:
                    8e:8c:b7:99:09:b5:fa:2f:b2:a4:a4:1d:41:08:22:
                    d7:86:83:b1:b8:75:a5:e2:5c:92:de:7e:26:d6:ab:
                    91:14:1a:9b:0b:f3:43:bc:02:a1:7d:46:89:11:6d:
                    41:36:a5:29:ab:87:83:bb:0f:bd:80:94:22:a4:03:
                    a0:06:46:81:4e:0f:90:4e:33:c2:be:60:67:21:8d:
                    f9:3f:00:36:f0:d8:bd:19:ec:cb:ff:c6:21:c5:86:
                    52:2e:02:6c:d0:17:f4:02:09:e8:1d:f2:3f:85:e9:
                    3c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CC:65:03:EF:CD:6A:36:45:0C:76:EF:53:B0:D4:F0:32:9E:CB:28
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38312e302f32342d3234203d3e203436353539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:e4:88:dc:54:24:c8:ee:eb:b7:e9:4c:28:26:bf:6a:21:9f:
         f0:47:48:35:50:53:05:85:bc:70:40:7c:a2:bc:09:6c:fc:a7:
         8c:ac:d9:bd:a2:3f:60:92:73:e6:53:2b:ff:b5:c5:63:9f:98:
         07:9b:56:7e:07:8e:61:82:0e:88:fd:6d:78:c2:0c:75:9f:34:
         ab:81:ca:54:fc:01:40:0f:f3:8c:03:4f:69:70:42:f6:03:bb:
         f3:19:a8:9d:a3:d4:18:03:b3:92:e3:2a:44:91:c3:d9:5e:3f:
         b0:b0:da:d4:e5:3d:4a:2a:09:42:9d:5c:71:6e:b6:13:74:22:
         5a:f9:19:64:ab:ac:03:5e:a8:77:04:96:89:80:d4:52:39:67:
         d6:c3:35:0e:d3:fd:d5:50:73:46:74:ee:9a:df:c7:83:f0:54:
         1c:b0:60:27:fb:ee:9f:6c:70:97:2f:f9:90:72:7d:46:a7:02:
         83:a2:84:ce:0c:6a:ee:fa:0a:33:7b:eb:ce:be:76:21:cc:37:
         57:0b:d2:75:29:d8:f0:83:98:29:7d:cc:91:33:bc:7c:d4:70:
         d9:a0:8b:f6:64:7a:f3:f2:e1:76:27:a7:bd:2b:50:5d:5f:66:
         e1:8d:84:de:d0:52:14:ca:89:9b:41:f6:a5:1d:5b:d0:be:af:
         31:ff:c8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:22:34 2025 by rpki-client