Route Origin Authorization

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91A76B50000/0/3130332e3139362e3132342e302f32342d3234203d3e20323138393131.roa
File:                     3130332e3139362e3132342e302f32342d3234203d3e20323138393131.roa (raw, json)
Hash identifier:          6FYv1nZWI104iJFKHgYCLsipw2kdkWRx0u2DVAH0v5I=
Subject key identifier:   56:21:24:BB:4C:27:CE:90:38:E8:B3:ED:A1:92:72:EB:73:16:F5:9A
Certificate issuer:       /CN=A91A76B50000/serialNumber=19944B8474CB6D9081A0DC4438F2ECC72FE8E73F
Certificate serial:       2276DAF70D2CBEFE0750F4161A87D9EFD64D14A2
Authority key identifier: 19:94:4B:84:74:CB:6D:90:81:A0:DC:44:38:F2:EC:C7:2F:E8:E7:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZRLhHTLbZCBoNxEOPLsxy_o5z8.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A76B50000/0/3130332e3139362e3132342e302f32342d3234203d3e20323138393131.roa
Signing time:             Fri 30 Oct 2026 10:31:21 +0000
ROA not before:           Fri 30 Oct 2026 10:26:21 +0000
ROA not after:            Fri 29 Oct 2027 10:31:21 +0000
asID:                     218911
IP address blocks:        103.196.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A76B50000/0/19944B8474CB6D9081A0DC4438F2ECC72FE8E73F.crl
                          rsync://rpki.sub.apnic.net/repository/A91A76B50000/0/19944B8474CB6D9081A0DC4438F2ECC72FE8E73F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZRLhHTLbZCBoNxEOPLsxy_o5z8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 19:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:76:da:f7:0d:2c:be:fe:07:50:f4:16:1a:87:d9:ef:d6:4d:14:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A76B50000, serialNumber=19944B8474CB6D9081A0DC4438F2ECC72FE8E73F
        Validity
            Not Before: Oct 30 10:26:21 2026 GMT
            Not After : Oct 29 10:31:21 2027 GMT
        Subject: CN=562124BB4C27CE9038E8B3EDA19272EB7316F59A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3c:84:6b:00:90:48:15:68:bd:7a:68:09:dc:
                    ca:47:30:39:36:5e:2d:79:f9:40:65:ea:98:2e:ee:
                    95:d6:3b:bf:83:db:ec:9d:4b:e5:c2:b1:ae:b0:3d:
                    f1:45:83:89:14:9b:45:ea:57:5a:21:18:56:af:99:
                    65:11:d3:2a:07:c0:1c:61:69:d0:6b:e6:7a:97:b2:
                    8b:15:cd:5d:f4:b0:b2:ec:4a:ac:69:3b:03:01:31:
                    d4:0a:1f:65:2f:ed:06:26:76:3f:92:2c:c2:03:dc:
                    34:85:04:b4:9b:b7:69:d5:63:e5:fd:5c:fd:6c:84:
                    7c:0c:13:df:48:43:ba:76:3e:82:60:67:ad:42:72:
                    09:98:95:33:6a:e1:b6:9b:17:81:6a:11:c5:09:82:
                    ed:df:68:62:d5:c0:55:d9:ea:6e:95:63:64:83:19:
                    f0:d8:34:4b:89:d5:45:12:48:fa:fa:b1:99:f5:78:
                    20:31:bb:b6:19:3b:23:78:ad:1f:7b:d8:5b:87:ba:
                    c7:9b:96:6d:4f:41:e4:e0:b7:59:9a:cd:44:ec:92:
                    8e:f6:fd:12:7f:0c:a2:92:62:e3:ad:82:83:c1:cb:
                    10:96:71:8a:e2:d0:a6:7b:9f:f8:18:79:f0:77:77:
                    0a:ca:b1:7a:16:77:b0:fd:f7:0d:96:aa:f7:e0:14:
                    3a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:21:24:BB:4C:27:CE:90:38:E8:B3:ED:A1:92:72:EB:73:16:F5:9A
            X509v3 Authority Key Identifier:
                keyid:19:94:4B:84:74:CB:6D:90:81:A0:DC:44:38:F2:EC:C7:2F:E8:E7:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A76B50000/0/19944B8474CB6D9081A0DC4438F2ECC72FE8E73F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GZRLhHTLbZCBoNxEOPLsxy_o5z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A76B50000/0/3130332e3139362e3132342e302f32342d3234203d3e20323138393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.196.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:e9:bd:d2:38:39:0c:ad:0d:ad:92:b0:07:23:6d:50:7b:22:
         cc:af:b5:d4:40:33:e8:36:3e:56:6f:ea:d4:3e:e6:b3:8e:0c:
         a8:18:b5:ec:4a:2a:28:83:f6:01:df:8f:04:77:21:68:6c:ff:
         fc:28:23:d0:8a:e2:47:38:0c:e2:7c:5c:fa:c8:2c:80:a3:39:
         07:02:53:92:66:6f:5d:20:a6:73:d2:3e:e5:b0:4a:1d:21:87:
         88:2d:88:43:24:08:0f:77:1f:51:53:5f:b0:0e:b3:5d:de:fd:
         85:8b:ab:35:ac:9c:2b:70:ad:a4:ff:01:42:ed:78:19:c1:b9:
         88:86:69:d0:c8:91:5d:45:85:14:7d:03:06:ab:34:c3:8c:2b:
         66:29:6a:75:ad:e6:10:cc:75:cf:fd:18:2b:08:d9:51:54:cd:
         70:8c:0a:20:88:6e:72:3d:cd:c4:8c:be:4d:c9:83:36:6a:1e:
         1d:37:d9:62:87:3d:83:aa:56:bd:33:cc:3d:cd:a2:da:9d:95:
         c5:94:06:7c:1e:8d:65:d3:30:33:5d:80:2a:20:f6:d6:ea:fe:
         86:6b:7d:f9:6a:0d:4e:5c:a3:61:67:96:02:0d:cd:4b:e9:69:
         a5:83:c5:0b:35:a4:20:73:96:eb:3d:09:a0:ff:c7:52:b3:4f:
         1f:f9:e2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:54:23 2026 by rpki-client