Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132392e302f32342d3234203d3e203531383437.roa
File:                     3130332e3233382e3132392e302f32342d3234203d3e203531383437.roa (raw, json)
Hash identifier:          zTb8ql1p6Fs6BB0oV1g0J8hnu59nBjyUuyB+lufxxN0=
Subject key identifier:   8C:35:77:81:ED:DD:7E:21:50:D2:F6:F2:E8:C4:79:5D:5A:1D:19:61
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       7F92452A2FE83BCF6115772C4F2A5661EF4A34F3
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132392e302f32342d3234203d3e203531383437.roa
Signing time:             Wed 17 Jan 2024 16:03:08 +0000
ROA not before:           Wed 17 Jan 2024 15:58:08 +0000
ROA not after:            Wed 15 Jan 2025 16:03:08 +0000
asID:                     51847
IP address blocks:        103.238.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Jun 2024 23:07:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:92:45:2a:2f:e8:3b:cf:61:15:77:2c:4f:2a:56:61:ef:4a:34:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: Jan 17 15:58:08 2024 GMT
            Not After : Jan 15 16:03:08 2025 GMT
        Subject: CN=8C357781EDDD7E2150D2F6F2E8C4795D5A1D1961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1c:5e:d0:b7:11:ee:95:bd:82:27:fb:e3:a0:
                    de:38:64:f1:37:78:4a:66:07:e5:93:a5:0a:34:0c:
                    1b:92:65:ba:9e:2b:f7:ea:53:70:95:44:78:83:11:
                    90:fb:f6:b9:b2:c3:5d:c6:18:6d:7d:e2:7d:82:67:
                    96:25:7c:af:fe:d5:5a:1a:56:c3:22:1c:d0:af:a9:
                    30:c8:b4:18:b7:11:f0:62:05:ce:95:05:43:ff:cf:
                    f4:4b:27:04:0c:5e:49:af:66:59:04:d7:4c:17:8c:
                    c3:3f:d2:4b:d9:05:dd:06:f2:e6:28:d9:7d:f3:6e:
                    ba:b8:ec:de:2a:b1:b5:02:cb:e4:5a:94:5e:70:fa:
                    fc:df:25:88:9e:d7:b2:99:5e:ce:a9:d0:a6:18:70:
                    d5:ce:e9:a6:8f:a2:6e:88:e5:d1:f1:0a:78:10:76:
                    cd:ae:cb:e9:0a:73:3a:1d:c9:85:ee:68:b4:d3:de:
                    8c:ff:28:71:05:3a:f2:66:cb:70:6c:84:64:77:e2:
                    9c:bd:b9:b4:60:ad:b9:40:14:31:8e:6d:43:65:86:
                    06:e5:d2:d5:53:b5:f3:0a:d5:37:cf:ab:c3:fc:f0:
                    11:17:98:96:9d:82:6a:98:ff:74:b9:15:0b:90:a7:
                    2a:0f:d6:9d:ea:4a:1b:eb:18:4d:7b:db:95:4a:1a:
                    c9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:35:77:81:ED:DD:7E:21:50:D2:F6:F2:E8:C4:79:5D:5A:1D:19:61
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132392e302f32342d3234203d3e203531383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:36:21:2d:fe:00:7c:27:2c:13:79:18:2d:1a:c7:ed:f6:b4:
         70:76:09:c5:07:0e:a8:53:bc:18:fe:b7:57:a1:4c:d4:6e:32:
         d7:4f:bf:bc:4d:61:e8:f0:19:c2:c4:de:e9:d3:a2:b6:f7:cc:
         8f:f6:65:58:0e:6b:a7:2a:fc:dc:ee:a0:31:6b:82:86:5c:37:
         3f:04:98:11:cf:f2:f9:ef:45:a6:b0:d8:c9:51:3e:6d:a5:72:
         84:1d:f1:29:88:29:8a:4b:6a:09:48:8e:85:01:64:06:1b:af:
         9a:01:98:16:39:e9:ae:b3:0d:73:fa:02:54:a4:68:ea:46:1c:
         d6:3b:b3:17:3f:bd:20:b7:13:a0:27:c6:44:05:b7:60:e0:cf:
         8a:af:b5:14:12:99:b0:8e:90:cc:b7:ea:d6:c2:14:d9:c6:ed:
         3e:a4:30:de:d9:b9:e0:fc:ae:46:9a:58:e5:c8:0e:c0:0f:f7:
         36:bd:a5:c9:d0:b7:76:5b:ff:8f:be:6a:87:4b:1a:35:0b:75:
         b2:b4:4b:33:7c:57:60:06:44:a4:6f:28:b1:d0:30:49:f9:57:
         d4:d6:be:5e:6a:e4:ce:e9:80:72:60:f6:52:2b:c2:96:97:d2:
         a1:09:0e:0e:ca:5e:0e:f0:f8:12:a3:fe:4d:76:6b:33:11:1f:
         40:ae:f0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 22:20:14 2024 by rpki-client on console-fra.rpki-client.org