Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91BE6D70000/0/3130332e3137352e32372e302f32342d3234203d3e20383334.roa
File:                     3130332e3137352e32372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          WCJlZvhAgQe2Qe28+bHkNDmIkAmhFntm+GFi+JKHYI8=
Subject key identifier:   FD:0A:80:BA:1C:A5:B5:27:8D:8A:6D:12:15:AE:0F:45:66:AE:F8:5A
Certificate issuer:       /CN=A91BE6D70000/serialNumber=BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB
Certificate serial:       2C070FAC721B32ACED8CA7F24646242E251117B7
Authority key identifier: BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/3130332e3137352e32372e302f32342d3234203d3e20383334.roa
Signing time:             Thu 15 Feb 2024 00:01:29 +0000
ROA not before:           Wed 14 Feb 2024 23:56:29 +0000
ROA not after:            Thu 13 Feb 2025 00:01:29 +0000
asID:                     834
IP address blocks:        103.175.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.crl
                          rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 01:21:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:07:0f:ac:72:1b:32:ac:ed:8c:a7:f2:46:46:24:2e:25:11:17:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE6D70000/serialNumber=BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB
        Validity
            Not Before: Feb 14 23:56:29 2024 GMT
            Not After : Feb 13 00:01:29 2025 GMT
        Subject: CN=FD0A80BA1CA5B5278D8A6D1215AE0F4566AEF85A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e0:e8:18:71:c4:dc:49:43:91:4e:4a:4d:15:
                    19:95:4f:d9:73:1e:66:54:0a:bb:62:34:9b:48:f0:
                    dc:e4:07:5e:83:c2:1a:1b:e1:85:17:57:85:f3:5d:
                    77:e1:40:ea:a2:fa:b9:98:14:f7:88:88:03:a8:b6:
                    e6:49:c0:47:59:a9:b9:3a:ea:a6:06:a8:f5:94:1a:
                    c4:8f:63:5e:9c:66:54:45:21:1e:57:b3:48:d7:52:
                    4c:e9:f8:2c:f8:a6:7d:43:b2:2b:b4:44:8c:d9:5d:
                    33:c0:59:a6:fa:13:d8:09:9b:0a:1d:10:3a:fb:1d:
                    da:10:2f:2f:a0:84:12:1f:0c:e6:bf:5f:71:78:1d:
                    b1:f3:fb:ef:7c:d9:46:e3:ce:ab:51:b1:ed:bd:4f:
                    fc:80:52:b7:ff:da:e9:97:2c:40:cb:79:94:47:1d:
                    53:d0:71:89:37:bf:a6:87:e7:67:7f:b4:41:a4:20:
                    8c:94:50:ee:83:68:62:eb:07:6b:ec:1e:b8:b1:20:
                    5d:21:8a:f8:af:f3:25:08:03:15:db:9c:c0:43:67:
                    35:88:cd:ca:cd:3b:b2:ee:9c:85:74:cf:ee:d6:92:
                    be:ca:51:22:f7:6d:b7:b8:0a:05:a7:d5:c9:0e:63:
                    7d:7e:c6:e7:82:58:3e:b7:8b:ed:b0:96:82:a5:ee:
                    90:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0A:80:BA:1C:A5:B5:27:8D:8A:6D:12:15:AE:0F:45:66:AE:F8:5A
            X509v3 Authority Key Identifier:
                keyid:BE:DE:DD:0A:BC:1A:F2:93:7E:D3:1D:36:03:3B:7C:AB:04:8B:89:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/BEDEDD0ABC1AF2937ED31D36033B7CAB048B89BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vt7dCrwa8pN-0x02Azt8qwSLibs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91BE6D70000/0/3130332e3137352e32372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:e2:09:ad:b6:1e:58:34:d1:ec:56:33:61:85:2b:81:e9:89:
         70:24:af:c5:a0:b7:b7:25:e6:83:27:18:2b:d6:59:a8:5d:65:
         5c:6b:47:89:92:78:bb:99:5b:3c:2b:1b:9e:b9:96:29:59:7c:
         1a:9b:45:b4:79:60:7c:a9:08:68:49:bb:9f:ab:89:09:95:ec:
         2e:e1:40:b2:cd:98:7a:19:d3:47:7d:0f:4b:69:a5:17:59:95:
         59:69:b8:76:2b:d2:8c:8b:b6:bc:6a:2a:a1:71:13:24:4d:9f:
         3b:d2:2d:99:24:41:b7:7a:67:db:3b:14:0c:da:7f:3a:51:d9:
         92:4b:13:8d:53:06:60:2e:22:84:a3:07:90:7a:eb:f5:d1:9d:
         bd:72:64:6c:50:c4:4a:3d:64:ad:6a:84:20:8d:4b:d2:cc:c0:
         c8:a6:b9:b3:5f:33:ba:9b:32:60:31:26:93:07:d0:40:91:cc:
         1f:94:51:e3:89:9e:6f:7a:22:8b:a9:9b:ee:56:85:73:2f:25:
         6c:0f:b8:8e:8a:ae:fd:eb:6d:ad:a3:64:45:91:d6:42:9a:dd:
         54:3c:cd:71:c2:2c:9a:4a:ac:9e:d0:e9:e4:bd:8b:36:25:9a:
         81:e2:da:25:fa:0c:1c:c8:ed:70:a7:41:84:3f:8a:0e:6f:e1:
         d8:db:de:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:21:41 2024 by rpki-client on console-fra.rpki-client.org