Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a3a2f34382d3438203d3e20313336373932.roa
File:                     323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (raw, json)
Hash identifier:          sFkl5q2nnBlpmHXXAiz0Z7LlS2dknxOWwXvF/BC3ClU=
Subject key identifier:   07:21:0B:50:96:9E:A9:6C:A6:58:1D:2D:EB:2B:F8:B6:37:8F:6A:1D
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       146D3CECAD5C9EFC919467BB58D5DB7FD245E846
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a3a2f34382d3438203d3e20313336373932.roa
Signing time:             Fri 01 Sep 2023 11:14:35 +0000
ROA not before:           Fri 01 Sep 2023 11:09:35 +0000
ROA not after:            Fri 30 Aug 2024 11:14:35 +0000
asID:                     136792
IP address blocks:        2401:73c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 05:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:6d:3c:ec:ad:5c:9e:fc:91:94:67:bb:58:d5:db:7f:d2:45:e8:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Sep  1 11:09:35 2023 GMT
            Not After : Aug 30 11:14:35 2024 GMT
        Subject: CN=07210B50969EA96CA6581D2DEB2BF8B6378F6A1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c1:1f:fc:f1:f2:e0:ea:1d:21:cd:04:34:cf:
                    cd:76:a1:c3:5b:54:ac:bc:e9:2b:80:38:81:c7:ac:
                    6c:03:e3:b7:a1:7a:79:af:1f:35:bf:70:aa:8d:c1:
                    55:5e:a6:c0:d6:77:56:1d:45:70:4c:bb:8e:79:16:
                    fd:e8:88:56:4d:09:30:2b:bd:ef:09:77:49:2f:32:
                    e3:61:31:bf:ca:1f:f8:24:6d:37:3e:bd:5d:fe:a6:
                    84:0b:1b:04:66:a0:c3:c1:6a:9a:e5:8d:b3:63:8b:
                    a4:1d:77:95:15:9a:02:8a:65:6c:c1:e2:28:e3:9c:
                    99:f1:f1:b6:2f:24:c4:9a:cf:79:76:ae:6e:18:74:
                    0d:57:cf:ef:68:f4:22:81:f9:2d:97:06:00:d0:16:
                    fd:d6:41:a6:d3:2e:bb:42:d4:c6:4d:f5:b6:c7:a8:
                    03:ba:7a:dd:ac:63:af:08:45:8d:4f:14:9f:dd:cc:
                    68:d7:6f:cc:eb:44:0e:f6:66:c6:63:3b:56:c8:c0:
                    3d:33:c7:d5:c3:6e:98:f1:78:ad:44:6a:6d:87:28:
                    f2:2f:49:bf:f1:e3:88:9c:d2:24:ca:8a:23:23:cf:
                    e7:bc:f9:db:55:43:dc:81:e6:f7:58:13:34:03:67:
                    02:bd:a3:d9:ad:c1:8b:52:ad:06:4b:b9:4d:b6:0c:
                    e8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:21:0B:50:96:9E:A9:6C:A6:58:1D:2D:EB:2B:F8:B6:37:8F:6A:1D
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a3a2f34382d3438203d3e20313336373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:73c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:23:9a:49:cd:f7:d3:ec:2b:0a:0f:2c:f2:80:86:02:72:2c:
         c8:a9:3f:40:00:b4:7d:c8:7c:c5:7a:62:ce:69:a0:f6:4f:39:
         c2:be:33:2f:e3:10:ae:d2:82:42:ec:7a:72:29:0b:14:61:26:
         87:f1:b1:b1:d1:eb:42:4d:86:d1:c2:99:7f:80:3f:85:66:4f:
         c9:f2:87:48:f1:32:b4:83:7f:65:c9:2e:68:f4:a0:02:69:97:
         35:1a:89:3e:7f:26:85:b9:04:76:7a:da:48:16:e7:61:06:c6:
         19:11:3e:0b:ce:7f:d6:51:72:c0:7b:ef:da:35:e5:c1:80:bf:
         11:f9:89:7a:51:18:41:45:7e:ee:09:bd:6c:c0:1d:bf:dd:93:
         40:5a:12:d6:04:2c:8e:42:1a:15:d3:9c:0b:eb:aa:9d:4d:e7:
         99:f6:2b:f5:cb:6c:f2:72:96:56:12:fd:1b:d4:75:d8:64:91:
         d6:2e:1e:b7:b7:44:14:ae:f8:e3:a0:d4:2a:ac:8b:75:39:e8:
         3d:51:a9:4b:73:42:36:4c:39:0a:a4:51:1c:4a:70:d8:3e:39:
         b1:8f:bd:6d:a6:cc:64:a4:8d:65:4c:e2:67:57:0b:ab:80:8f:
         32:fc:67:42:cd:97:7b:39:bd:12:ea:42:3b:21:d1:b5:7f:5e:
         95:35:9c:6d
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUFG087K1cnvyRlGe7WNXbf9JF6EYwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOTJBOTgwMDAwMTEwLwYDVQQFEyg5ODlEMzJENUI2
MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyMB4XDTIzMDkwMTExMDkzNVoX
DTI0MDgzMDExMTQzNVowMzExMC8GA1UEAxMoMDcyMTBCNTA5NjlFQTk2Q0E2NTgx
RDJERUIyQkY4QjYzNzhGNkExRDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANzBH/zx8uDqHSHNBDTPzXahw1tUrLzpK4A4gcesbAPjt6F6ea8fNb9wqo3B
VV6mwNZ3Vh1FcEy7jnkW/eiIVk0JMCu97wl3SS8y42Exv8of+CRtNz69Xf6mhAsb
BGagw8FqmuWNs2OLpB13lRWaAoplbMHiKOOcmfHxti8kxJrPeXaubhh0DVfP72j0
IoH5LZcGANAW/dZBptMuu0LUxk31tseoA7p63axjrwhFjU8Un93MaNdvzOtEDvZm
xmM7VsjAPTPH1cNumPF4rURqbYco8i9Jv/HjiJzSJMqKIyPP57z521VD3IHm91gT
NANnAr2j2a3Bi1KtBku5TbYM6DUCAwEAAaOCAhQwggIQMB0GA1UdDgQWBBQHIQtQ
lp6pbKZYHS3rK/i2N49qHTAfBgNVHSMEGDAWgBSYnTLVtirJOJKGwXylB4vQBm8e
EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5ODAwMDAvMC85ODlEMzJE
NUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9tSjB5MWJZcXlU
aVNoc0Y4cFFlTDBBWnZIaEkuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUH
MAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTJB
OTgwMDAwLzAvMzIzNDMwMzEzYTM3MzM2MzMwM2EzYTJmMzQzODJkMzQzODIwM2Qz
ZTIwMzEzMzM2MzczOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIG
CCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJAFzwAAAMA0GCSqGSIb3DQEBCwUA
A4IBAQBFI5pJzffT7CsKDyzygIYCcizIqT9AALR9yHzFemLOaaD2TznCvjMv4xCu
0oJC7HpyKQsUYSaH8bGx0etCTYbRwpl/gD+FZk/J8odI8TK0g39lyS5o9KACaZc1
Gok+fyaFuQR2etpIFudhBsYZET4Lzn/WUXLAe+/aNeXBgL8R+Yl6URhBRX7uCb1s
wB2/3ZNAWhLWBCyOQhoV05wL66qdTeeZ9iv1y2zycpZWEv0b1HXYZJHWLh63t0QU
rvjjoNQqrIt1Oeg9UalLc0I2TDkKpFEcSnDYPjmxj71tpsxkpI1lTOJnVwurgI8y
/GdCzZd7Ob0S6kI7IdG1f16VNZxt
-----END CERTIFICATE-----
Generated at Sun Jun 2 04:50:24 2024 by rpki-client on console-ams.rpki-client.org