Route Origin Authorization

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A91E4ACE0000/0/3130332e3233322e33362e302f32342d3234203d3e20323138373830.roa
File:                     3130332e3233322e33362e302f32342d3234203d3e20323138373830.roa (raw, json)
Hash identifier:          mcvo84dPzNcDdATJl+JG3/Lc6qM0MMPRnFjpUt3IkpE=
Subject key identifier:   C7:83:86:28:27:F1:E0:F5:2C:6D:FD:06:43:45:8A:06:81:00:4A:CD
Certificate issuer:       /CN=A91E4ACE0000/serialNumber=70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA
Certificate serial:       665F161EEE347335ADF5D21C501918E819A4F080
Authority key identifier: 70:B6:AA:57:AC:DC:31:0E:B7:BA:17:00:D8:C3:6C:10:03:DE:D7:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLaqV6zcMQ63uhcA2MNsEAPe18o.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91E4ACE0000/0/3130332e3233322e33362e302f32342d3234203d3e20323138373830.roa
Signing time:             Sat 14 Nov 2026 08:13:17 +0000
ROA not before:           Sat 14 Nov 2026 08:08:17 +0000
ROA not after:            Sat 13 Nov 2027 08:13:17 +0000
asID:                     218780
IP address blocks:        103.232.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91E4ACE0000/0/70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA.crl
                          rsync://rpki.sub.apnic.net/repository/A91E4ACE0000/0/70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLaqV6zcMQ63uhcA2MNsEAPe18o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Nov 2026 08:24:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5f:16:1e:ee:34:73:35:ad:f5:d2:1c:50:19:18:e8:19:a4:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4ACE0000, serialNumber=70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA
        Validity
            Not Before: Nov 14 08:08:17 2026 GMT
            Not After : Nov 13 08:13:17 2027 GMT
        Subject: CN=C783862827F1E0F52C6DFD0643458A0681004ACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:69:02:28:26:f2:ac:da:56:8f:da:fc:bf:c8:
                    a6:68:37:c3:0a:c6:2d:ac:a2:70:7b:a1:39:a9:28:
                    5e:6e:01:e8:fd:a6:48:f0:57:c6:09:8d:89:c2:a9:
                    5f:9f:5a:14:88:a1:4d:e5:9c:7e:1c:41:2a:9a:ac:
                    43:1b:cf:a5:11:4c:59:55:1f:c9:5f:cc:4d:ef:58:
                    4d:08:cc:2f:93:fb:10:00:77:82:d0:09:27:24:b2:
                    1c:d1:51:23:83:4f:87:d6:9b:50:7a:4f:05:24:31:
                    0d:bb:7c:eb:53:2c:d1:37:97:dd:d2:bc:9f:04:1b:
                    fb:a1:3f:55:29:d3:e9:97:a9:ef:7a:c6:00:92:09:
                    0c:55:1a:a6:3e:4f:f6:37:a7:a8:54:0b:a3:76:65:
                    fa:8c:0a:fe:1b:2d:09:0f:33:ef:b4:99:9b:6f:3a:
                    bc:df:11:9f:0f:cf:ba:99:3f:e6:cc:3d:f1:8a:d1:
                    f3:bb:b8:f0:b6:c3:34:ce:b4:2e:12:2e:93:87:2d:
                    1a:21:f9:ee:1c:e4:93:63:bc:1c:df:b4:54:22:1b:
                    99:53:2b:80:24:d8:87:40:47:97:bf:57:69:87:0f:
                    62:99:6b:31:13:91:e6:7f:09:bc:3e:01:f9:49:8b:
                    d7:2d:ee:8d:d9:3b:40:05:4e:28:08:66:ba:6a:85:
                    78:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:83:86:28:27:F1:E0:F5:2C:6D:FD:06:43:45:8A:06:81:00:4A:CD
            X509v3 Authority Key Identifier:
                keyid:70:B6:AA:57:AC:DC:31:0E:B7:BA:17:00:D8:C3:6C:10:03:DE:D7:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91E4ACE0000/0/70B6AA57ACDC310EB7BA1700D8C36C1003DED7CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLaqV6zcMQ63uhcA2MNsEAPe18o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91E4ACE0000/0/3130332e3233322e33362e302f32342d3234203d3e20323138373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.232.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:72:a9:e9:9f:3e:c6:ed:81:e8:5c:f4:a8:9a:62:5c:2c:83:
         0d:84:20:92:3c:70:98:b4:60:f8:5c:04:67:4c:e3:4c:51:d3:
         8a:f8:2e:91:6b:25:24:ed:9c:2a:8d:f3:ae:53:a1:6c:71:99:
         36:95:da:ee:43:57:66:ac:31:1b:2b:2b:8d:e4:27:ae:93:04:
         9f:f7:00:7f:22:05:51:12:5f:eb:fb:e7:ec:04:e0:d2:a9:32:
         3f:60:77:81:75:13:18:55:34:d2:91:89:34:19:75:36:77:dd:
         f2:df:8f:21:29:97:dc:c9:a9:88:7a:f0:92:17:a1:ce:61:eb:
         4d:b3:25:19:fb:4e:11:9e:45:47:c5:fd:4c:e1:91:57:62:ba:
         1d:e1:4e:93:a3:8c:a5:87:28:65:f6:97:c7:f1:91:3a:1f:43:
         17:7e:83:33:c2:92:da:5d:a3:04:7b:26:c0:0c:81:bc:88:2f:
         ff:9e:bb:d3:59:dd:c1:f8:82:e2:fd:fc:35:6b:12:81:4c:1e:
         54:c2:e3:18:7c:e9:37:7c:35:9d:72:00:de:5e:5e:28:6a:f9:
         c7:48:4e:59:e7:80:95:9b:be:12:70:07:b5:6a:f3:e4:71:67:
         44:41:ad:0a:a8:31:ec:0a:ff:63:19:74:6f:b2:80:34:9b:f7:
         03:b5:f6:60
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUZl8WHu40czWt9dIcUBkY6Bmk8IAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxRTRBQ0UwMDAwMTEwLwYDVQQFEyg3MEI2QUE1N0FD
REMzMTBFQjdCQTE3MDBEOEMzNkMxMDAzREVEN0NBMB4XDTI2MTExNDA4MDgxN1oX
DTI3MTExMzA4MTMxN1owMzExMC8GA1UEAxMoQzc4Mzg2MjgyN0YxRTBGNTJDNkRG
RDA2NDM0NThBMDY4MTAwNEFDRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL9pAigm8qzaVo/a/L/Ipmg3wwrGLayicHuhOakoXm4B6P2mSPBXxgmNicKp
X59aFIihTeWcfhxBKpqsQxvPpRFMWVUfyV/MTe9YTQjML5P7EAB3gtAJJySyHNFR
I4NPh9abUHpPBSQxDbt861Ms0TeX3dK8nwQb+6E/VSnT6Zep73rGAJIJDFUapj5P
9jenqFQLo3Zl+owK/hstCQ8z77SZm286vN8Rnw/Pupk/5sw98YrR87u48LbDNM60
LhIuk4ctGiH57hzkk2O8HN+0VCIbmVMrgCTYh0BHl79XaYcPYplrMROR5n8JvD4B
+UmL1y3ujdk7QAVOKAhmumqFeBsCAwEAAaOCAhQwggIQMB0GA1UdDgQWBBTHg4Yo
J/Hg9Sxt/QZDRYoGgQBKzTAfBgNVHSMEGDAWgBRwtqpXrNwxDre6FwDYw2wQA97X
yjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTFFNEFDRTAwMDAvMC83MEI2QUE1
N0FDREMzMTBFQjdCQTE3MDBEOEMzNkMxMDAzREVEN0NBLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9jTGFxVjZ6Y01R
NjN1aGNBMk1Oc0VBUGUxOG8uY2VyMIGOBggrBgEFBQcBCwSBgTB/MH0GCCsGAQUF
BzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0b3J5L0E5MUU0
QUNFMDAwMC8wLzMxMzAzMzJlMzIzMzMyMmUzMzM2MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzIzMTM4MzczODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+gkMA0GCSqGSIb3DQEBCwUA
A4IBAQAwcqnpnz7G7YHoXPSommJcLIMNhCCSPHCYtGD4XARnTONMUdOK+C6RayUk
7ZwqjfOuU6FscZk2ldruQ1dmrDEbKyuN5CeukwSf9wB/IgVREl/r++fsBODSqTI/
YHeBdRMYVTTSkYk0GXU2d93y348hKZfcyamIevCSF6HOYetNsyUZ+04RnkVHxf1M
4ZFXYrod4U6To4ylhyhl9pfH8ZE6H0MXfoMzwpLaXaMEeybADIG8iC//nrvTWd3B
+ILi/fw1axKBTB5UwuMYfOk3fDWdcgDeXl4oavnHSE5Z54CVm74ScAe1avPkcWdE
Qa0KqDHsCv9jGXRvsoA0m/cDtfZg
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:33:59 2026 by rpki-client