Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91857810000/0/3130332e3134312e36382e302f32332d3234203d3e20383334.roa
File:                     3130332e3134312e36382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          oZ1FfZRe8bZrSaP+qYylXbwCltzBW73qMGRdZbl2km8=
Subject key identifier:   7D:C4:46:D9:34:EB:92:5F:DE:76:4E:A3:91:EF:10:BF:67:95:32:88
Certificate issuer:       /CN=A91857810000/serialNumber=BECEB6F76A19B81208F3D3402617F51AE69E8C24
Certificate serial:       0A8E969BEF180B15D5320FA561FCC03DEBF3F63F
Authority key identifier: BE:CE:B6:F7:6A:19:B8:12:08:F3:D3:40:26:17:F5:1A:E6:9E:8C:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vs6292oZuBII89NAJhf1GuaejCQ.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91857810000/0/3130332e3134312e36382e302f32332d3234203d3e20383334.roa
Signing time:             Fri 12 Jan 2024 12:32:52 +0000
ROA not before:           Fri 12 Jan 2024 12:27:52 +0000
ROA not after:            Fri 10 Jan 2025 12:32:52 +0000
asID:                     834
IP address blocks:        103.141.68.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91857810000/0/BECEB6F76A19B81208F3D3402617F51AE69E8C24.crl
                          rsync://rpki.sub.apnic.net/repository/A91857810000/0/BECEB6F76A19B81208F3D3402617F51AE69E8C24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vs6292oZuBII89NAJhf1GuaejCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 01:37:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:8e:96:9b:ef:18:0b:15:d5:32:0f:a5:61:fc:c0:3d:eb:f3:f6:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91857810000/serialNumber=BECEB6F76A19B81208F3D3402617F51AE69E8C24
        Validity
            Not Before: Jan 12 12:27:52 2024 GMT
            Not After : Jan 10 12:32:52 2025 GMT
        Subject: CN=7DC446D934EB925FDE764EA391EF10BF67953288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d8:70:16:48:f2:e8:9c:0d:67:8f:fa:cd:ac:
                    ab:b3:16:8b:ae:d4:d8:d1:9b:2e:1c:53:85:c1:84:
                    f3:f5:d5:0f:56:27:6c:ce:01:93:5f:cc:8a:5f:dc:
                    4a:6e:00:dd:1d:54:6e:99:03:7c:c4:47:22:8d:24:
                    0e:c4:23:63:ec:33:ba:31:e4:17:9c:0a:00:c1:d9:
                    fd:6f:64:4b:5b:36:71:4d:ae:0c:c8:43:59:bd:a4:
                    62:e6:82:c5:09:85:1c:cb:1b:ae:d4:1c:72:6f:df:
                    41:2d:86:9c:1d:cc:4a:42:fb:52:2c:3b:36:14:8d:
                    ec:ab:86:f7:8e:76:ce:ce:e0:18:ff:e7:8c:84:d0:
                    60:88:a0:aa:c2:51:7a:98:fd:a6:79:44:91:02:9e:
                    5c:7f:af:9e:54:91:d1:03:36:1c:ab:1f:78:b0:80:
                    62:84:be:e5:6e:00:49:ce:73:38:72:bc:9a:b9:e4:
                    b4:f7:d4:64:9e:4a:6a:24:eb:80:78:48:a6:3e:e8:
                    78:e0:94:ca:65:eb:8d:9e:3b:13:fb:de:40:53:af:
                    81:9d:5d:47:06:54:2e:bc:88:65:56:be:70:67:67:
                    9a:45:d1:1b:df:6b:f8:8b:1c:8f:fc:02:27:64:cf:
                    19:ad:93:02:ec:eb:ca:9a:20:22:be:51:22:f9:a3:
                    8f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C4:46:D9:34:EB:92:5F:DE:76:4E:A3:91:EF:10:BF:67:95:32:88
            X509v3 Authority Key Identifier:
                keyid:BE:CE:B6:F7:6A:19:B8:12:08:F3:D3:40:26:17:F5:1A:E6:9E:8C:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91857810000/0/BECEB6F76A19B81208F3D3402617F51AE69E8C24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vs6292oZuBII89NAJhf1GuaejCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91857810000/0/3130332e3134312e36382e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:ec:78:a9:cb:0e:a8:55:78:12:8e:f6:71:e6:4f:8c:55:0b:
         58:c8:de:c3:a2:cf:fc:24:be:12:6b:5a:7c:07:c4:4e:67:f4:
         64:9c:8b:37:65:6e:ec:4d:9a:a5:16:74:c1:0f:1f:1f:77:06:
         03:0d:22:34:24:2f:40:bd:fa:ce:15:38:30:56:e4:85:3e:cd:
         8e:58:d0:5c:2e:68:0b:1a:15:86:80:49:e6:bd:f3:18:e3:9e:
         8d:33:87:93:bf:b6:4b:e5:b7:84:c9:70:cd:99:4e:41:86:f5:
         7a:77:80:b9:bf:42:e8:7a:2c:ca:c4:b8:fd:08:aa:18:5b:78:
         b5:20:47:dc:d0:d2:8d:88:c6:1a:03:ad:41:ad:e7:c7:07:e6:
         59:2e:d8:0f:14:af:e4:6c:ea:b1:38:38:ca:c6:b2:94:0b:cb:
         e3:ed:dd:23:e3:37:c6:31:f6:6d:e0:b4:21:51:5b:03:31:58:
         82:72:e2:08:a8:0b:66:ba:aa:44:15:2d:86:dc:1f:74:eb:fe:
         c5:b5:89:f3:25:12:6c:74:60:da:34:c8:4a:6c:64:0e:59:42:
         9a:c6:17:6d:db:16:82:8f:6b:a5:b8:55:4b:94:f6:e4:0a:ff:
         14:34:c7:ae:11:d0:c3:2c:d2:84:aa:45:8e:b6:ff:b0:5c:27:
         52:57:c3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:12:22 2024 by rpki-client on console-ams.rpki-client.org