Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/31/323430343a393534303a3a2f33322d3438203d3e203234323432.roa
File:                     323430343a393534303a3a2f33322d3438203d3e203234323432.roa (raw, json)
Hash identifier:          cQZroKN8ztrKQnUySkbP0xXsDqHsFf6v3xh+Z/xvQ4I=
Subject key identifier:   7E:A3:0D:F6:AB:A7:87:5E:02:33:80:DF:BC:89:96:B8:73:0A:E0:31
Certificate issuer:       /CN=A9124B5E0000/serialNumber=81C294D4B365DC4172B5A21B67F05B20D6B87A62
Certificate serial:       10C6AE54EA256B9B1623F3162B053B4F67DB044D
Authority key identifier: 81:C2:94:D4:B3:65:DC:41:72:B5:A2:1B:67:F0:5B:20:D6:B8:7A:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gcKU1LNl3EFytaIbZ_BbINa4emI.cer
Subject info access:      rsync://0.sb/repo/sb/31/323430343a393534303a3a2f33322d3438203d3e203234323432.roa
Signing time:             Fri 22 Sep 2023 10:19:39 +0000
ROA not before:           Fri 22 Sep 2023 10:14:39 +0000
ROA not after:            Fri 20 Sep 2024 10:19:39 +0000
asID:                     24242
IP address blocks:        2404:9540::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://0.sb/repo/sb/31/81C294D4B365DC4172B5A21B67F05B20D6B87A62.crl
                          rsync://0.sb/repo/sb/31/81C294D4B365DC4172B5A21B67F05B20D6B87A62.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gcKU1LNl3EFytaIbZ_BbINa4emI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 01:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c6:ae:54:ea:25:6b:9b:16:23:f3:16:2b:05:3b:4f:67:db:04:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124B5E0000/serialNumber=81C294D4B365DC4172B5A21B67F05B20D6B87A62
        Validity
            Not Before: Sep 22 10:14:39 2023 GMT
            Not After : Sep 20 10:19:39 2024 GMT
        Subject: CN=7EA30DF6ABA7875E023380DFBC8996B8730AE031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d7:67:8e:e7:8e:9b:27:0b:a9:be:c8:20:8a:
                    e9:13:ae:2c:0a:b7:2d:01:e5:61:1c:7c:90:01:69:
                    4b:1d:00:6d:ea:f5:e4:a0:e2:28:49:fc:ef:42:cf:
                    e7:33:a2:77:48:0d:7c:2a:7d:11:fa:20:46:98:04:
                    4c:00:f1:3d:7c:5c:47:c1:a6:ae:77:b9:78:e5:7b:
                    4b:cb:11:b1:ee:5d:bb:03:75:cd:67:67:d6:e4:6d:
                    34:8c:08:40:4d:ac:20:59:8a:09:b0:c5:2c:47:9f:
                    50:37:6e:01:8c:58:00:01:10:9b:09:b0:fa:fe:fb:
                    80:75:8a:28:9b:39:03:b2:bc:e4:8f:04:bb:43:81:
                    eb:1c:04:b5:a8:d2:e0:14:4c:cc:1f:b2:a0:90:cb:
                    39:b7:fc:07:ef:25:27:97:86:d0:a5:96:c2:78:cb:
                    ae:60:e2:69:5e:85:d8:a1:5b:95:77:84:de:7f:68:
                    0a:e1:db:11:b2:f6:21:8d:03:21:a8:04:23:96:f9:
                    a3:e7:c8:0b:8e:53:89:8f:15:10:f5:59:63:7d:49:
                    a9:d1:fa:8a:97:13:8c:02:eb:23:30:7b:90:96:85:
                    54:e6:7d:b5:f7:ce:43:95:f9:41:e6:98:7e:1a:89:
                    7d:d9:0c:83:32:34:bb:61:ee:1f:31:49:91:42:7c:
                    b6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A3:0D:F6:AB:A7:87:5E:02:33:80:DF:BC:89:96:B8:73:0A:E0:31
            X509v3 Authority Key Identifier:
                keyid:81:C2:94:D4:B3:65:DC:41:72:B5:A2:1B:67:F0:5B:20:D6:B8:7A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/31/81C294D4B365DC4172B5A21B67F05B20D6B87A62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gcKU1LNl3EFytaIbZ_BbINa4emI.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/31/323430343a393534303a3a2f33322d3438203d3e203234323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:9540::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:38:82:21:d2:bb:e0:af:69:2a:49:5c:ba:d8:ab:f6:da:22:
         49:d6:8e:9a:10:e0:7e:85:f0:0f:c2:26:8c:4f:51:94:09:9e:
         d1:40:00:be:34:40:aa:7a:65:ab:3c:6b:78:bc:c4:38:51:32:
         53:32:fc:e9:7e:b1:f5:2f:ef:b9:82:6f:2c:9c:d9:41:6a:b3:
         20:a1:17:d2:14:d8:ee:2f:ea:3b:e0:9d:bf:2a:5d:fa:d0:c1:
         5b:72:d3:43:98:f8:3e:58:1f:78:37:4b:c6:22:02:15:e9:7d:
         f0:b9:84:ad:0b:23:8a:70:ef:66:b0:97:b7:76:e0:0c:53:18:
         ae:58:c4:52:8e:61:36:2a:22:cc:8b:b5:46:86:41:21:e6:45:
         f1:f9:31:df:df:4a:c6:15:31:84:c8:ea:91:0c:8e:4d:48:61:
         ca:2a:d9:51:bf:93:93:ba:fd:ea:33:4b:e1:a7:29:bc:c7:e0:
         54:66:72:a1:94:08:6b:e1:1a:a6:33:20:86:82:93:eb:72:b9:
         6c:8b:0d:79:ad:c5:63:49:36:0c:b9:48:a6:da:7d:63:b2:56:
         20:b4:2b:bc:d7:00:56:21:0e:28:d7:9e:48:e2:b4:ab:f3:68:
         5e:41:8b:a9:9a:08:3f:30:0b:aa:88:df:77:36:2c:a3:8a:79:
         7e:02:de:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 02:36:12 2024 by rpki-client on console-ams.rpki-client.org