Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32322e302f32342d3234203d3e20313336373932.roa
File:                     3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (raw, json)
Hash identifier:          T0XkhaLBz35dnuPKfdN9b92e/uHNEvwvcMG1ALVwJ24=
Subject key identifier:   AA:D0:80:13:B4:67:0C:F1:7D:A8:A6:75:5B:FA:DB:60:04:97:C3:77
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       5278AA5EF6771E9E2AA863B7ABE46CF379FD1D1B
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32322e302f32342d3234203d3e20313336373932.roa
Signing time:             Fri 01 Sep 2023 11:14:35 +0000
ROA not before:           Fri 01 Sep 2023 11:09:35 +0000
ROA not after:            Fri 30 Aug 2024 11:14:35 +0000
asID:                     136792
IP address blocks:        103.96.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 05:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:78:aa:5e:f6:77:1e:9e:2a:a8:63:b7:ab:e4:6c:f3:79:fd:1d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Sep  1 11:09:35 2023 GMT
            Not After : Aug 30 11:14:35 2024 GMT
        Subject: CN=AAD08013B4670CF17DA8A6755BFADB600497C377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7e:cd:be:29:87:bd:6f:a6:2a:f2:16:89:69:
                    76:1d:95:06:f7:27:f4:64:44:11:b8:d1:56:58:0e:
                    13:7c:17:71:35:7c:6d:04:c4:39:05:33:0d:b2:a8:
                    4c:04:70:73:d4:3c:83:a9:cf:48:ac:f6:b2:34:91:
                    4c:cf:68:3c:c4:53:a2:9c:35:99:95:39:d4:db:2d:
                    a3:d0:f0:76:1d:28:58:3d:f0:bf:1c:a4:c1:f9:67:
                    98:3b:09:6c:bb:9a:72:b0:85:99:9e:85:4f:b3:75:
                    8a:a4:71:19:a2:f6:e9:b1:9a:cc:1f:b3:f1:c2:4b:
                    82:ef:cf:18:02:d7:94:a8:ef:c9:36:81:28:b5:95:
                    72:91:a2:0a:f5:a4:3d:9a:34:4d:ed:6d:06:cc:42:
                    3a:53:48:e1:bc:63:bc:5d:9a:fc:79:ac:75:7b:30:
                    f4:ff:48:8e:f1:fd:3e:d2:33:48:10:64:8e:ca:39:
                    48:15:cb:5c:86:dd:6f:65:2d:c4:a6:f7:cc:c4:16:
                    4d:99:7a:c9:13:e6:73:58:0f:7b:df:24:68:ec:b7:
                    0f:84:6b:86:cd:39:8a:4d:83:08:8d:81:86:ca:11:
                    13:fb:71:84:f9:b8:10:7e:aa:44:f7:e5:9f:0a:98:
                    26:43:e3:81:b0:4d:b0:fd:83:b9:ab:18:2b:d9:a3:
                    60:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D0:80:13:B4:67:0C:F1:7D:A8:A6:75:5B:FA:DB:60:04:97:C3:77
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32322e302f32342d3234203d3e20313336373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:0b:82:dc:8f:11:c1:b6:32:c2:21:ca:99:5a:7a:e1:10:01:
         9f:6d:e1:1b:74:66:0b:88:84:f4:d5:4f:0b:ab:1c:f9:dc:d3:
         f7:3b:cf:5d:e3:f8:bf:10:1d:ca:4b:db:c5:6e:3d:91:84:23:
         67:9f:c4:eb:03:48:7f:a5:4a:c6:dc:1e:dd:f0:1b:66:40:ed:
         4a:cd:b0:93:5d:a0:19:bd:16:66:f1:24:2c:c2:b0:08:35:73:
         b1:00:bd:da:5e:6f:78:9d:a8:8b:ee:9a:5e:90:ec:ba:cb:bf:
         7e:83:f8:6b:d5:da:0c:59:79:7f:32:82:13:ac:3d:62:fa:c6:
         22:bf:f1:75:43:87:e3:f1:b1:d1:2c:ef:e9:15:a4:b4:96:88:
         c9:35:73:08:56:a5:97:91:d9:f5:b7:e4:cb:03:e8:86:fb:25:
         81:d3:8b:94:70:e7:ae:66:7a:b6:f6:2c:58:5f:46:f7:64:c1:
         39:bf:f6:57:1f:e6:80:1f:da:cb:3e:96:e5:16:15:0d:aa:17:
         67:58:7a:72:45:ce:5e:40:33:61:70:17:c5:35:1d:e7:5e:b9:
         d3:ce:13:a7:1f:db:31:c6:d3:53:a6:d1:5b:66:ec:26:cb:83:
         29:52:50:02:ef:c1:36:fa:3b:29:d9:3a:d5:50:9b:20:e1:d8:
         2f:1a:2d:6f
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUUniqXvZ3Hp4qqGO3q+Rs83n9HRswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOTJBOTgwMDAwMTEwLwYDVQQFEyg5ODlEMzJENUI2
MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyMB4XDTIzMDkwMTExMDkzNVoX
DTI0MDgzMDExMTQzNVowMzExMC8GA1UEAxMoQUFEMDgwMTNCNDY3MENGMTdEQThB
Njc1NUJGQURCNjAwNDk3QzM3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMh+zb4ph71vpiryFolpdh2VBvcn9GREEbjRVlgOE3wXcTV8bQTEOQUzDbKo
TARwc9Q8g6nPSKz2sjSRTM9oPMRTopw1mZU51Nsto9Dwdh0oWD3wvxykwflnmDsJ
bLuacrCFmZ6FT7N1iqRxGaL26bGazB+z8cJLgu/PGALXlKjvyTaBKLWVcpGiCvWk
PZo0Te1tBsxCOlNI4bxjvF2a/HmsdXsw9P9IjvH9PtIzSBBkjso5SBXLXIbdb2Ut
xKb3zMQWTZl6yRPmc1gPe98kaOy3D4Rrhs05ik2DCI2BhsoRE/txhPm4EH6qRPfl
nwqYJkPjgbBNsP2DuasYK9mjYK8CAwEAAaOCAhEwggINMB0GA1UdDgQWBBSq0IAT
tGcM8X2opnVb+ttgBJfDdzAfBgNVHSMEGDAWgBSYnTLVtirJOJKGwXylB4vQBm8e
EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5ODAwMDAvMC85ODlEMzJE
NUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9tSjB5MWJZcXlU
aVNoc0Y4cFFlTDBBWnZIaEkuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUH
MAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTJB
OTgwMDAwLzAvMzEzMDMzMmUzOTM2MmUzMjMyMmUzMDJmMzIzNDJkMzIzNDIwM2Qz
ZTIwMzEzMzM2MzczOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2AWMA0GCSqGSIb3DQEBCwUAA4IB
AQCiC4LcjxHBtjLCIcqZWnrhEAGfbeEbdGYLiIT01U8Lqxz53NP3O89d4/i/EB3K
S9vFbj2RhCNnn8TrA0h/pUrG3B7d8BtmQO1KzbCTXaAZvRZm8SQswrAINXOxAL3a
Xm94naiL7ppekOy6y79+g/hr1doMWXl/MoITrD1i+sYiv/F1Q4fj8bHRLO/pFaS0
lojJNXMIVqWXkdn1t+TLA+iG+yWB04uUcOeuZnq29ixYX0b3ZME5v/ZXH+aAH9rL
PpblFhUNqhdnWHpyRc5eQDNhcBfFNR3nXrnTzhOnH9sxxtNTptFbZuwmy4MpUlAC
78E2+jsp2TrVUJsg4dgvGi1v
-----END CERTIFICATE-----
Generated at Sun Jun 2 04:50:24 2024 by rpki-client on console-ams.rpki-client.org