Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/20/3130332e3136392e39322e302f32332d3234203d3e2038383838.roa
File:                     3130332e3136392e39322e302f32332d3234203d3e2038383838.roa (raw, json)
Hash identifier:          rf8878OxT73Bl1kcdlm+bDonaPAStvU9sqK+yhacA4g=
Subject key identifier:   15:77:E8:E9:0E:DC:3C:66:8A:A5:55:65:3E:BB:53:BE:CB:B7:C4:A9
Certificate issuer:       /CN=A91C44A00000/serialNumber=E3098182BCB9AA102ECB2221A767B98E6ECCC310
Certificate serial:       5339D1D1B9B61BF6922CADD1397915DBBEA17754
Authority key identifier: E3:09:81:82:BC:B9:AA:10:2E:CB:22:21:A7:67:B9:8E:6E:CC:C3:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wmBgry5qhAuyyIhp2e5jm7MwxA.cer
Subject info access:      rsync://0.sb/repo/sb/20/3130332e3136392e39322e302f32332d3234203d3e2038383838.roa
Signing time:             Fri 22 Sep 2023 10:19:40 +0000
ROA not before:           Fri 22 Sep 2023 10:14:40 +0000
ROA not after:            Fri 20 Sep 2024 10:19:40 +0000
asID:                     8888
IP address blocks:        103.169.92.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://0.sb/repo/sb/20/E3098182BCB9AA102ECB2221A767B98E6ECCC310.crl
                          rsync://0.sb/repo/sb/20/E3098182BCB9AA102ECB2221A767B98E6ECCC310.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wmBgry5qhAuyyIhp2e5jm7MwxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 19:26:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:39:d1:d1:b9:b6:1b:f6:92:2c:ad:d1:39:79:15:db:be:a1:77:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C44A00000/serialNumber=E3098182BCB9AA102ECB2221A767B98E6ECCC310
        Validity
            Not Before: Sep 22 10:14:40 2023 GMT
            Not After : Sep 20 10:19:40 2024 GMT
        Subject: CN=1577E8E90EDC3C668AA555653EBB53BECBB7C4A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:62:83:b8:94:2d:1a:44:1d:61:61:41:fe:63:
                    0e:91:7f:3d:fd:bf:0b:d6:19:fb:0b:70:3e:71:d9:
                    c1:52:40:ba:a1:ac:e9:67:e7:c3:06:05:63:c8:70:
                    62:9b:73:cd:66:98:a4:b5:af:12:4d:82:c1:5d:40:
                    53:c7:db:4c:ba:21:66:fd:54:50:b1:9b:cd:b5:fa:
                    5e:87:24:f7:cd:1e:56:e3:e2:5f:7a:f2:c1:b8:63:
                    e6:0d:2b:94:01:c4:06:68:55:c2:d0:ad:2b:c2:57:
                    5e:c9:d4:c5:e2:a4:af:28:72:76:b6:03:41:b6:46:
                    ed:a0:a3:8a:04:ad:68:d4:7a:d6:37:23:64:c8:b1:
                    f1:4a:33:e3:c0:00:03:f7:d3:a2:7f:d1:2a:fc:ae:
                    55:e9:8a:d7:8c:70:2d:a6:9a:aa:37:6b:2d:5a:a5:
                    c0:85:d7:f4:a1:aa:9a:93:4a:48:de:6e:fa:d4:1c:
                    e1:4d:dc:36:fc:fe:a3:33:da:fb:c3:b3:1c:10:2c:
                    23:33:8e:a2:60:0b:6e:72:5c:52:66:7f:c0:4c:b4:
                    b6:03:d6:10:73:56:e5:b6:dd:86:e4:a3:bb:ba:d2:
                    68:8f:e6:cd:90:5f:f1:cd:ea:07:56:a8:9e:1b:37:
                    e3:cf:2f:71:e0:60:75:bc:6b:69:f5:2f:5b:4e:b5:
                    58:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:77:E8:E9:0E:DC:3C:66:8A:A5:55:65:3E:BB:53:BE:CB:B7:C4:A9
            X509v3 Authority Key Identifier:
                keyid:E3:09:81:82:BC:B9:AA:10:2E:CB:22:21:A7:67:B9:8E:6E:CC:C3:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/20/E3098182BCB9AA102ECB2221A767B98E6ECCC310.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wmBgry5qhAuyyIhp2e5jm7MwxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/20/3130332e3136392e39322e302f32332d3234203d3e2038383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:0b:c5:dc:8d:2c:32:0e:f0:39:e2:e6:c1:39:fe:a3:17:c8:
         b5:07:33:b8:85:85:47:b2:a5:57:9c:6a:de:be:c9:97:8c:e7:
         4e:d4:54:23:09:0b:ee:84:4e:05:62:5d:37:b0:40:eb:1f:e9:
         5d:ca:d7:7e:0f:cd:c4:1c:b0:5c:1b:50:46:45:0a:33:74:dd:
         88:ad:e3:32:7c:a3:bd:1c:69:d9:d4:b2:50:99:6d:17:29:44:
         1f:ae:5b:98:8f:17:cb:5e:38:29:fe:68:66:c5:9f:14:e8:1b:
         9d:2a:7e:9a:2b:04:ea:b6:6e:6f:a1:27:3d:90:51:29:d7:f6:
         fb:41:e6:54:68:78:d7:07:3c:13:a9:8d:40:1f:57:b6:81:73:
         fe:b3:54:cf:b1:65:05:0f:61:da:0d:16:6d:94:3d:e7:cd:77:
         62:05:8c:3d:7f:43:1f:2b:36:42:7d:3f:1c:fa:a2:2b:b0:02:
         9d:38:ed:0f:5a:74:be:a0:ac:22:2c:02:68:9b:3f:eb:8d:ed:
         13:72:c1:36:d8:af:b9:f3:87:8c:25:2c:ea:9c:1d:2b:06:31:
         73:cf:65:53:23:1f:e3:7a:a7:b8:f4:79:6e:f4:e2:bd:bc:7c:
         5d:3e:72:88:e0:01:8e:bc:ce:f5:70:a7:5c:e2:e4:41:b5:9c:
         34:ad:70:bc
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgIUUznR0bm2G/aSLK3ROXkV276hd1QwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQzQ0QTAwMDAwMTEwLwYDVQQFEyhFMzA5ODE4MkJD
QjlBQTEwMkVDQjIyMjFBNzY3Qjk4RTZFQ0NDMzEwMB4XDTIzMDkyMjEwMTQ0MFoX
DTI0MDkyMDEwMTk0MFowMzExMC8GA1UEAxMoMTU3N0U4RTkwRURDM0M2NjhBQTU1
NTY1M0VCQjUzQkVDQkI3QzRBOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANhig7iULRpEHWFhQf5jDpF/Pf2/C9YZ+wtwPnHZwVJAuqGs6WfnwwYFY8hw
YptzzWaYpLWvEk2CwV1AU8fbTLohZv1UULGbzbX6Xock980eVuPiX3rywbhj5g0r
lAHEBmhVwtCtK8JXXsnUxeKkryhydrYDQbZG7aCjigStaNR61jcjZMix8Uoz48AA
A/fTon/RKvyuVemK14xwLaaaqjdrLVqlwIXX9KGqmpNKSN5u+tQc4U3cNvz+ozPa
+8OzHBAsIzOOomALbnJcUmZ/wEy0tgPWEHNW5bbdhuSju7rSaI/mzZBf8c3qB1ao
nhs3488vceBgdbxrafUvW061WFMCAwEAAaOCAdQwggHQMB0GA1UdDgQWBBQVd+jp
Dtw8ZoqlVWU+u1O+y7fEqTAfBgNVHSMEGDAWgBTjCYGCvLmqEC7LIiGnZ7mObszD
EDAOBgNVHQ8BAf8EBAMCB4AwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly8wLnNi
L3JlcG8vc2IvMjAvRTMwOTgxODJCQ0I5QUExMDJFQ0IyMjIxQTc2N0I5OEU2RUND
QzMxMC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvNHdtQmdyeTVxaEF1eXlJaHAyZTVqbTdNd3hBLmNlcjBsBggrBgEF
BQcBCwRgMF4wXAYIKwYBBQUHMAuGUHJzeW5jOi8vMC5zYi9yZXBvL3NiLzIwLzMx
MzAzMzJlMzEzNjM5MmUzOTMyMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzgzODM4
Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnqVwwDQYJKoZIhvcNAQELBQADggEBAHcLxdyNLDIO8Dni
5sE5/qMXyLUHM7iFhUeypVecat6+yZeM507UVCMJC+6ETgViXTewQOsf6V3K134P
zcQcsFwbUEZFCjN03Yit4zJ8o70cadnUslCZbRcpRB+uW5iPF8teOCn+aGbFnxTo
G50qfporBOq2bm+hJz2QUSnX9vtB5lRoeNcHPBOpjUAfV7aBc/6zVM+xZQUPYdoN
Fm2UPefNd2IFjD1/Qx8rNkJ9Pxz6oiuwAp047Q9adL6grCIsAmibP+uN7RNywTbY
r7nzh4wlLOqcHSsGMXPPZVMjH+N6p7j0eW704r28fF0+cojgAY68zvVwp1zi5EG1
nDStcLw=
-----END CERTIFICATE-----
Generated at Wed May 8 21:02:05 2024 by rpki-client on console-fra.rpki-client.org