Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9127EEB0000/0/3130332e34392e34312e302f32342d3234203d3e20323036313530.roa
File:                     3130332e34392e34312e302f32342d3234203d3e20323036313530.roa (raw, json)
Hash identifier:          xaNH/rPLz8DN/CCQywOGQqW+JYkn0mMbcUzrLsXjocY=
Subject key identifier:   C6:BA:3A:6F:D6:07:99:DD:00:23:DC:E7:E6:6B:92:53:7B:C5:E5:F3
Certificate issuer:       /CN=A9127EEB0000/serialNumber=130F57124A8921F00083A228FEBE2B78373015E3
Certificate serial:       53F3D1A74E60BA80902121C54C56C461373567C0
Authority key identifier: 13:0F:57:12:4A:89:21:F0:00:83:A2:28:FE:BE:2B:78:37:30:15:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ew9XEkqJIfAAg6Io_r4reDcwFeM.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/3130332e34392e34312e302f32342d3234203d3e20323036313530.roa
Signing time:             Mon 18 Dec 2023 07:18:48 +0000
ROA not before:           Mon 18 Dec 2023 07:13:48 +0000
ROA not after:            Mon 16 Dec 2024 07:18:48 +0000
asID:                     206150
IP address blocks:        103.49.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.crl
                          rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ew9XEkqJIfAAg6Io_r4reDcwFeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 20:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f3:d1:a7:4e:60:ba:80:90:21:21:c5:4c:56:c4:61:37:35:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127EEB0000/serialNumber=130F57124A8921F00083A228FEBE2B78373015E3
        Validity
            Not Before: Dec 18 07:13:48 2023 GMT
            Not After : Dec 16 07:18:48 2024 GMT
        Subject: CN=C6BA3A6FD60799DD0023DCE7E66B92537BC5E5F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6d:c8:59:1c:c9:23:6e:cc:ab:86:de:63:cf:
                    20:fa:1c:ab:3c:9e:b4:3c:a0:05:8a:c3:4d:c1:cf:
                    e0:b9:6c:5c:11:af:e5:b3:42:c1:57:24:81:ad:80:
                    00:c9:c5:cb:8d:44:f1:5d:28:a3:c2:43:46:f1:fb:
                    60:78:19:9c:42:1f:75:72:31:c0:f0:fd:a2:5b:4e:
                    a5:78:ac:03:50:61:89:90:8b:b3:f7:9c:d6:f9:ea:
                    c9:ab:13:fa:20:2a:3e:10:0e:ff:af:42:eb:9e:f0:
                    30:1e:60:76:3c:a2:a1:84:88:cc:8a:40:73:00:d6:
                    49:6d:d7:47:ea:51:21:d5:5f:0a:d0:3a:94:47:d5:
                    20:c1:eb:6b:0e:49:8b:20:5f:66:23:0e:58:ee:45:
                    da:59:ba:78:2f:74:28:3d:46:b8:89:4b:5f:c3:ee:
                    1b:73:ff:01:91:99:ff:ac:81:46:cc:e8:25:36:61:
                    8a:69:8a:9c:94:f9:ce:f0:08:0b:ee:a5:82:85:d6:
                    ba:14:ea:80:d6:c2:17:94:3c:93:6e:a4:cd:f3:0a:
                    8a:b9:19:8b:96:0b:9f:e3:2c:17:b7:f2:53:7b:22:
                    37:5f:61:b6:f2:ae:d5:c8:19:95:55:1e:e1:cb:f9:
                    cb:32:14:00:17:2c:9a:e7:3a:b7:ae:20:84:e4:2b:
                    40:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BA:3A:6F:D6:07:99:DD:00:23:DC:E7:E6:6B:92:53:7B:C5:E5:F3
            X509v3 Authority Key Identifier:
                keyid:13:0F:57:12:4A:89:21:F0:00:83:A2:28:FE:BE:2B:78:37:30:15:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ew9XEkqJIfAAg6Io_r4reDcwFeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/3130332e34392e34312e302f32342d3234203d3e20323036313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:7e:dd:2b:2b:ed:14:34:a5:82:79:03:77:c6:f6:4e:78:94:
         33:e0:27:22:19:91:8f:39:e2:2a:2e:40:dd:ae:e6:c6:9d:9c:
         21:7c:6f:32:9d:e5:a4:1a:3a:b1:f7:a8:7d:a4:58:79:53:40:
         12:f2:07:80:89:0e:52:0f:fa:f1:7b:db:27:58:9b:22:ad:94:
         6e:19:fe:db:3e:58:91:a7:9c:06:15:1b:4e:79:04:97:b2:6f:
         dc:c4:72:46:23:b1:36:4d:e1:0c:a2:ca:24:ad:07:db:a2:49:
         28:c5:fa:f1:02:c0:85:de:4a:df:75:d2:1f:2b:25:68:52:7b:
         75:91:0b:20:aa:07:99:32:32:10:58:9f:7c:06:63:dd:87:aa:
         02:33:f7:a4:53:a4:c0:ed:85:1f:bc:58:e7:51:f7:e4:2f:e8:
         b1:11:9c:24:42:09:21:ca:ee:52:47:a1:48:14:86:32:f1:84:
         e0:74:44:1e:3a:1d:04:49:5f:72:e8:a5:f8:49:3d:86:21:04:
         e9:f6:02:f1:de:6a:08:d6:e3:35:3a:2a:d0:2c:c2:dc:57:06:
         d9:f1:8e:6a:24:13:4d:28:e9:bb:d3:9d:29:db:3f:7d:9f:27:
         de:24:9e:7f:58:c8:29:00:54:36:a1:17:9b:4f:2f:a9:72:e7:
         35:bf:4d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 21:33:21 2024 by rpki-client on console-fra.rpki-client.org