Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/31/3130332e3133362e3134342e302f32322d3234203d3e203233383538.roa
File:                     3130332e3133362e3134342e302f32322d3234203d3e203233383538.roa (raw, json)
Hash identifier:          rTq1FsrQBV2rcQPLwlkfL/xIcEsR1hMIJbt4Nzh13mg=
Subject key identifier:   4B:EA:7A:62:40:2F:53:86:AC:B2:29:86:ED:6D:21:84:E0:F4:BB:D5
Certificate issuer:       /CN=A9124B5E0000/serialNumber=81C294D4B365DC4172B5A21B67F05B20D6B87A62
Certificate serial:       2611FF95AF1999E8A51E7292A052330FA76C0BAE
Authority key identifier: 81:C2:94:D4:B3:65:DC:41:72:B5:A2:1B:67:F0:5B:20:D6:B8:7A:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gcKU1LNl3EFytaIbZ_BbINa4emI.cer
Subject info access:      rsync://0.sb/repo/sb/31/3130332e3133362e3134342e302f32322d3234203d3e203233383538.roa
Signing time:             Fri 22 Sep 2023 10:19:40 +0000
ROA not before:           Fri 22 Sep 2023 10:14:40 +0000
ROA not after:            Fri 20 Sep 2024 10:19:40 +0000
asID:                     23858
IP address blocks:        103.136.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://0.sb/repo/sb/31/81C294D4B365DC4172B5A21B67F05B20D6B87A62.crl
                          rsync://0.sb/repo/sb/31/81C294D4B365DC4172B5A21B67F05B20D6B87A62.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gcKU1LNl3EFytaIbZ_BbINa4emI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 07:29:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:11:ff:95:af:19:99:e8:a5:1e:72:92:a0:52:33:0f:a7:6c:0b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124B5E0000/serialNumber=81C294D4B365DC4172B5A21B67F05B20D6B87A62
        Validity
            Not Before: Sep 22 10:14:40 2023 GMT
            Not After : Sep 20 10:19:40 2024 GMT
        Subject: CN=4BEA7A62402F5386ACB22986ED6D2184E0F4BBD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d4:b2:b9:ed:76:9c:d7:23:a0:f9:5b:a5:35:
                    9e:cd:03:da:6c:58:fb:0e:7d:b0:bb:85:ae:20:45:
                    f6:e2:3d:4d:56:13:2a:60:c1:96:c5:44:e4:c0:d4:
                    e4:7e:03:2e:01:e3:63:e0:5e:70:26:59:b8:2d:0a:
                    7f:28:a6:93:ae:fa:25:bd:86:21:2a:c9:67:a0:4d:
                    6d:5b:c4:5f:e9:86:b2:ff:59:e4:79:70:12:de:86:
                    f3:76:74:c9:1f:21:a8:7f:f0:4b:4e:ba:99:ce:7d:
                    ab:63:77:44:08:0a:23:0c:4e:94:e9:96:0c:3e:39:
                    3e:3f:72:0c:21:c3:e3:d3:9b:4c:fb:84:b4:4c:09:
                    7c:fc:ad:3c:75:b5:76:0f:75:7e:0b:6a:ca:1e:ec:
                    76:5e:9e:64:1e:5b:d7:82:95:8f:db:2c:2e:bf:ad:
                    b7:d0:0a:35:be:7e:96:71:61:e0:0e:1e:1b:2e:27:
                    e2:3b:dc:af:59:3b:b4:4c:26:b9:e9:41:aa:81:7c:
                    64:b5:1c:eb:8f:90:04:c9:a9:ea:a4:cc:f9:ba:bc:
                    35:49:3d:8f:6d:45:0f:73:68:ad:af:85:fa:3f:9f:
                    7f:8d:1f:81:97:a8:00:42:df:77:9c:c5:c2:11:b8:
                    c3:4b:69:b0:1d:70:92:26:68:5a:f9:c5:44:8b:cd:
                    63:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EA:7A:62:40:2F:53:86:AC:B2:29:86:ED:6D:21:84:E0:F4:BB:D5
            X509v3 Authority Key Identifier:
                keyid:81:C2:94:D4:B3:65:DC:41:72:B5:A2:1B:67:F0:5B:20:D6:B8:7A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/31/81C294D4B365DC4172B5A21B67F05B20D6B87A62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gcKU1LNl3EFytaIbZ_BbINa4emI.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/31/3130332e3133362e3134342e302f32322d3234203d3e203233383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:ee:2f:72:d6:f6:47:40:77:ef:21:ff:2c:dd:98:f9:b2:ea:
         83:36:fe:91:7f:80:85:36:92:51:e8:8b:85:92:3f:c0:09:12:
         ec:06:74:4c:67:12:75:ad:1b:5b:16:54:85:02:96:cd:99:89:
         26:d0:4a:bd:fd:60:99:9f:a1:55:4a:34:c2:32:93:3e:bf:f0:
         9d:78:9e:29:bf:71:11:a5:7c:17:b0:17:c4:e8:63:b8:9b:7d:
         22:09:f6:b7:7f:0e:3e:c8:41:c9:dd:43:29:53:4d:32:f7:16:
         97:41:40:0a:e7:89:4a:c3:c0:ba:ab:cf:11:fe:cd:4b:0e:80:
         17:4e:09:e7:16:74:9a:b0:55:76:39:cb:2a:75:cc:60:29:42:
         c5:b6:fc:57:e9:fc:8c:bd:f3:97:4d:7a:ba:1c:08:29:bc:93:
         37:9c:5c:e2:29:8a:f6:7f:3f:fd:44:d2:07:da:c7:c9:d1:99:
         27:eb:b9:d0:3d:91:e5:05:35:23:25:6a:46:a6:5c:75:e1:2d:
         df:66:55:dc:be:2b:9e:8b:c0:77:2e:98:f1:d0:6d:fd:55:ab:
         1c:81:b8:9b:9a:db:d7:31:22:4d:9f:10:7e:c7:b7:18:00:49:
         b2:2c:c7:3f:7b:ea:c9:a3:59:8a:36:a6:b4:42:ff:b1:59:11:
         69:fb:8e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 08:53:08 2024 by rpki-client on console-ams.rpki-client.org