Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/31/3130332e3133362e3134342e302f32322d3234203d3e203233383538.roa
File:                     3130332e3133362e3134342e302f32322d3234203d3e203233383538.roa (raw, json)
Hash identifier:          iH2oia2Pml9f/9XwlXkYYtECRIy+if9oRn7xcLzgjjY=
Subject key identifier:   77:84:F5:75:18:3B:16:98:C0:D9:8C:73:A5:8A:21:C4:42:A4:77:B6
Certificate issuer:       /CN=A9124B5E0000/serialNumber=81C294D4B365DC4172B5A21B67F05B20D6B87A62
Certificate serial:       56FD28A30F0D9203F999D4578406438AE8AFEFC0
Authority key identifier: 81:C2:94:D4:B3:65:DC:41:72:B5:A2:1B:67:F0:5B:20:D6:B8:7A:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gcKU1LNl3EFytaIbZ_BbINa4emI.cer
Subject info access:      rsync://0.sb/repo/sb/31/3130332e3133362e3134342e302f32322d3234203d3e203233383538.roa
Signing time:             Fri 23 Aug 2024 10:47:02 +0000
ROA not before:           Fri 23 Aug 2024 10:42:02 +0000
ROA not after:            Fri 22 Aug 2025 10:47:02 +0000
asID:                     23858
IP address blocks:        103.136.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://0.sb/repo/sb/31/81C294D4B365DC4172B5A21B67F05B20D6B87A62.crl
                          rsync://0.sb/repo/sb/31/81C294D4B365DC4172B5A21B67F05B20D6B87A62.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gcKU1LNl3EFytaIbZ_BbINa4emI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 18:44:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:fd:28:a3:0f:0d:92:03:f9:99:d4:57:84:06:43:8a:e8:af:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124B5E0000/serialNumber=81C294D4B365DC4172B5A21B67F05B20D6B87A62
        Validity
            Not Before: Aug 23 10:42:02 2024 GMT
            Not After : Aug 22 10:47:02 2025 GMT
        Subject: CN=7784F575183B1698C0D98C73A58A21C442A477B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:38:88:7f:44:33:6c:1f:23:98:8d:fc:a0:f7:
                    77:8f:c6:15:d2:7c:f0:ee:4d:af:24:f6:d4:40:4a:
                    ee:41:0a:4c:4d:7a:75:e2:e0:47:c6:5f:00:82:78:
                    5f:fe:94:f1:16:0a:86:30:b8:ce:53:54:02:a9:5a:
                    d3:b0:df:38:0b:bc:39:68:ee:10:ff:a5:74:39:ea:
                    24:fb:a6:bc:0f:ea:c4:41:04:78:84:5c:c8:85:34:
                    57:c1:4d:d0:19:b6:be:d3:6e:71:62:0e:1b:25:fe:
                    cc:91:49:61:84:d4:c8:18:f3:52:4f:4a:e6:5d:fd:
                    a6:bc:00:33:da:1d:21:75:58:4d:97:11:32:5b:b9:
                    af:0e:68:64:04:6f:1c:88:fc:5d:d4:97:fc:59:c4:
                    39:29:8b:ea:d7:c2:4a:2c:1b:a0:d3:00:1e:c7:17:
                    66:2d:d4:01:d4:16:eb:f6:a5:1c:b1:df:f5:45:66:
                    ce:47:b0:b7:38:ad:55:0a:2e:7d:fa:ea:a3:7b:0c:
                    5f:ef:1d:ea:46:f4:4c:88:52:c4:c3:87:e6:e0:8a:
                    b4:cc:b0:74:4f:e7:a8:af:f1:2d:25:e8:35:50:7d:
                    4f:37:84:36:a1:8a:33:81:cf:79:6f:f3:f7:b1:c1:
                    94:95:14:27:41:ab:b3:51:88:e6:db:bf:01:7e:0d:
                    08:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:84:F5:75:18:3B:16:98:C0:D9:8C:73:A5:8A:21:C4:42:A4:77:B6
            X509v3 Authority Key Identifier:
                keyid:81:C2:94:D4:B3:65:DC:41:72:B5:A2:1B:67:F0:5B:20:D6:B8:7A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/31/81C294D4B365DC4172B5A21B67F05B20D6B87A62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gcKU1LNl3EFytaIbZ_BbINa4emI.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/31/3130332e3133362e3134342e302f32322d3234203d3e203233383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:a2:61:ab:0b:5e:e7:e1:0b:e0:cc:fa:b3:9d:93:4a:90:dd:
         21:7d:fc:90:72:3a:39:03:c5:6d:89:f1:8b:91:a9:9c:4b:59:
         fb:cf:84:08:ae:e5:44:27:35:79:b3:58:37:4c:ab:ee:4f:cc:
         1a:e3:f8:b2:01:cc:d9:b4:9b:3b:32:c5:c2:d6:c9:11:6e:58:
         fe:d1:f7:c4:47:12:bb:73:9b:fb:b1:36:14:6d:2e:75:d5:49:
         8c:86:69:2a:61:47:a7:d0:43:44:d1:ae:5e:08:9c:b8:34:ff:
         b4:0f:2f:41:c9:83:04:a1:37:67:e0:ab:62:09:64:28:28:2e:
         a0:32:6e:bb:5e:7f:fb:c8:25:50:76:3a:5f:ca:54:f6:d1:30:
         c8:6e:89:e0:d4:af:ab:72:52:27:d7:87:ce:75:14:8f:a0:61:
         3b:7f:43:61:23:fb:69:d6:c6:05:ec:cb:15:e0:20:df:51:67:
         20:80:d2:c4:72:72:43:58:5d:a2:ec:d3:22:b3:fd:e6:c5:0d:
         10:98:1f:12:71:72:bc:c5:6d:36:e8:a1:fa:a0:48:64:51:98:
         c8:36:fd:f0:4f:bd:20:f3:42:ce:34:36:fb:af:26:36:d6:42:
         4a:c6:ae:97:83:af:53:56:de:93:61:39:f3:9e:e6:f6:95:39:
         60:88:22:c0
-----BEGIN CERTIFICATE-----
MIIE5TCCA82gAwIBAgIUVv0oow8NkgP5mdRXhAZDiuiv78AwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMjRCNUUwMDAwMTEwLwYDVQQFEyg4MUMyOTRENEIz
NjVEQzQxNzJCNUEyMUI2N0YwNUIyMEQ2Qjg3QTYyMB4XDTI0MDgyMzEwNDIwMloX
DTI1MDgyMjEwNDcwMlowMzExMC8GA1UEAxMoNzc4NEY1NzUxODNCMTY5OEMwRDk4
QzczQTU4QTIxQzQ0MkE0NzdCNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKI4iH9EM2wfI5iN/KD3d4/GFdJ88O5NryT21EBK7kEKTE16deLgR8ZfAIJ4
X/6U8RYKhjC4zlNUAqla07DfOAu8OWjuEP+ldDnqJPumvA/qxEEEeIRcyIU0V8FN
0Bm2vtNucWIOGyX+zJFJYYTUyBjzUk9K5l39prwAM9odIXVYTZcRMlu5rw5oZARv
HIj8XdSX/FnEOSmL6tfCSiwboNMAHscXZi3UAdQW6/alHLHf9UVmzkewtzitVQou
ffrqo3sMX+8d6kb0TIhSxMOH5uCKtMywdE/nqK/xLSXoNVB9TzeENqGKM4HPeW/z
97HBlJUUJ0Grs1GI5tu/AX4NCCkCAwEAAaOCAdgwggHUMB0GA1UdDgQWBBR3hPV1
GDsWmMDZjHOliiHEQqR3tjAfBgNVHSMEGDAWgBSBwpTUs2XcQXK1ohtn8Fsg1rh6
YjAOBgNVHQ8BAf8EBAMCB4AwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly8wLnNi
L3JlcG8vc2IvMzEvODFDMjk0RDRCMzY1REM0MTcyQjVBMjFCNjdGMDVCMjBENkI4
N0E2Mi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvZ2NLVTFMTmwzRUZ5dGFJYlpfQmJJTmE0ZW1JLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vMC5zYi9yZXBvL3NiLzMxLzMx
MzAzMzJlMzEzMzM2MmUzMTM0MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjMz
MzgzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCZ4iQMA0GCSqGSIb3DQEBCwUAA4IBAQC1omGrC17n
4QvgzPqznZNKkN0hffyQcjo5A8VtifGLkamcS1n7z4QIruVEJzV5s1g3TKvuT8wa
4/iyAczZtJs7MsXC1skRblj+0ffERxK7c5v7sTYUbS511UmMhmkqYUen0ENE0a5e
CJy4NP+0Dy9ByYMEoTdn4KtiCWQoKC6gMm67Xn/7yCVQdjpfylT20TDIbong1K+r
clIn14fOdRSPoGE7f0NhI/tp1sYF7MsV4CDfUWcggNLEcnJDWF2i7NMis/3mxQ0Q
mB8ScXK8xW026KH6oEhkUZjINv3wT70g80LONDb7ryY21kJKxq6Xg69TVt6TYTnz
nub2lTlgiCLA
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:44 2024 by rpki-client on console-fra.rpki-client.org