Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa
File:                     323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (raw, json)
Hash identifier:          n5SJyxnO6NVFaGxK0qycUh6AtoaQCIlKjuShPLkuFzs=
Subject key identifier:   2C:F5:A1:D0:91:A8:04:48:27:88:25:3E:FF:88:08:49:F3:7D:4D:C5
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       64D6CFEB6A7F5CF602EE9470A5FD555F4723002A
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa
Signing time:             Fri 01 Sep 2023 11:14:35 +0000
ROA not before:           Fri 01 Sep 2023 11:09:35 +0000
ROA not after:            Fri 30 Aug 2024 11:14:35 +0000
asID:                     136792
IP address blocks:        2401:73c0:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 05:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:d6:cf:eb:6a:7f:5c:f6:02:ee:94:70:a5:fd:55:5f:47:23:00:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Sep  1 11:09:35 2023 GMT
            Not After : Aug 30 11:14:35 2024 GMT
        Subject: CN=2CF5A1D091A804482788253EFF880849F37D4DC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bc:b0:52:d5:6a:42:ac:a6:88:6d:e7:34:66:
                    cf:aa:e9:bb:9a:e5:77:b6:97:77:d5:31:c8:9a:41:
                    a2:85:24:24:2b:4b:15:e0:2d:84:10:82:f4:fe:f5:
                    6a:06:66:87:b5:95:54:e1:67:67:f4:e6:c1:8a:a5:
                    a6:55:eb:cf:55:70:ab:a1:ca:ca:44:5f:73:c0:f1:
                    0f:37:7a:5f:75:14:a0:56:af:4d:71:d3:2c:35:1a:
                    13:cc:1e:d7:f5:94:c4:c5:be:8c:e9:ab:05:55:9d:
                    ad:d4:9b:19:5b:96:55:35:04:bb:1f:26:d1:03:47:
                    85:77:b6:07:5b:9b:c5:98:41:82:a6:82:f9:05:3b:
                    25:7e:7f:d9:83:17:3b:ea:cb:91:a1:12:10:fc:7e:
                    f4:22:c1:59:e4:46:82:28:e4:af:12:85:36:b4:9f:
                    2e:16:54:d7:1a:a4:ea:8c:58:b2:da:2d:4a:a0:4c:
                    e4:69:a4:50:17:86:00:c3:76:f1:99:a0:3c:6e:8c:
                    c1:4d:28:47:d4:d5:98:9b:f4:82:f0:21:d2:08:da:
                    70:2d:72:ff:46:85:e9:4e:35:c5:45:e6:0a:b9:05:
                    b0:24:a8:10:fe:e1:d8:43:a0:47:4d:c5:ba:6a:de:
                    a6:6e:fe:98:27:0d:e8:42:87:1a:49:61:17:7e:46:
                    a3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F5:A1:D0:91:A8:04:48:27:88:25:3E:FF:88:08:49:F3:7D:4D:C5
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:73c0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         c2:17:1d:a2:2d:c7:4a:7f:72:8b:1c:c6:00:25:81:00:cc:a4:
         4b:ac:93:03:e7:1d:6a:5e:b8:21:9a:84:da:d6:bb:38:12:db:
         5c:f3:ae:2c:95:90:16:3c:52:22:62:2d:1b:19:ac:c4:d3:63:
         e7:d9:4b:dd:4b:bf:20:22:ba:0b:d5:a2:f7:88:5d:17:9d:75:
         d1:fa:5e:e4:1c:c8:0e:2a:93:7b:e4:1f:e8:e2:0b:c4:2c:8b:
         f9:f0:95:ad:23:e3:77:55:7f:a3:da:50:c9:ab:26:aa:b5:6c:
         90:06:be:84:ce:a3:07:31:87:82:8e:10:36:05:d2:b6:0c:d8:
         2b:e0:8d:7f:1e:85:57:6a:c7:c4:9e:5a:00:d8:ca:2a:d9:71:
         8b:37:35:97:3a:99:c8:0f:f8:de:cb:05:52:5b:b5:b8:87:a5:
         e8:7f:de:39:96:8b:63:50:19:a9:df:d7:71:25:69:51:5c:b9:
         72:6a:71:c2:8f:ae:3c:28:4f:ce:fd:8e:b2:f6:1e:fc:e7:cf:
         21:2a:e7:c4:af:d8:62:72:2f:cd:72:27:8b:68:eb:f1:83:17:
         e4:2c:cb:94:e1:f5:30:9d:47:41:9f:3a:02:1a:9b:f3:87:15:
         ce:a2:8e:d7:b1:97:83:fe:f6:1c:75:9f:76:27:18:f3:8d:ea:
         81:30:06:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:42:26 2024 by rpki-client on console-fra.rpki-client.org