Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/38/3130332e3132312e3230382e302f32322d3234203d3e2034373835.roa
File:                     3130332e3132312e3230382e302f32322d3234203d3e2034373835.roa (raw, json)
Hash identifier:          vbxYdFg0aegskyQuBPn96h0WGx9iZqRV31LdiP1Xj1U=
Subject key identifier:   C8:37:9B:1F:7F:30:D3:00:ED:46:FA:C0:D8:81:36:12:E4:B8:60:FC
Certificate issuer:       /CN=A91FD4CC0000/serialNumber=D67C530C8E16B61FF52C085B2786C67ECCD6A909
Certificate serial:       54436F4B83C8C3408934ACEED793C1FF4B0E4D08
Authority key identifier: D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer
Subject info access:      rsync://0.sb/repo/sb/38/3130332e3132312e3230382e302f32322d3234203d3e2034373835.roa
Signing time:             Thu 12 Oct 2023 13:27:57 +0000
ROA not before:           Thu 12 Oct 2023 13:22:57 +0000
ROA not after:            Thu 10 Oct 2024 13:27:57 +0000
asID:                     4785
IP address blocks:        103.121.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl
                          rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 16:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:43:6f:4b:83:c8:c3:40:89:34:ac:ee:d7:93:c1:ff:4b:0e:4d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD4CC0000/serialNumber=D67C530C8E16B61FF52C085B2786C67ECCD6A909
        Validity
            Not Before: Oct 12 13:22:57 2023 GMT
            Not After : Oct 10 13:27:57 2024 GMT
        Subject: CN=C8379B1F7F30D300ED46FAC0D8813612E4B860FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:68:b5:f1:4b:73:f3:9d:6e:e1:38:ed:80:
                    a6:91:cb:54:b0:40:9d:24:c8:36:64:25:2a:74:1c:
                    db:24:8e:77:f3:aa:80:d8:e2:c9:74:22:1d:2d:39:
                    9e:06:8a:34:a8:ac:b1:90:66:5e:87:aa:e3:14:b3:
                    5b:78:09:6a:c3:0a:c8:23:a2:78:90:ea:30:b1:d4:
                    ea:2a:d7:95:1d:19:16:9b:ae:a5:59:db:56:81:28:
                    98:3b:1f:53:21:05:f6:71:f6:b3:fb:2f:41:07:c4:
                    1f:08:3d:bb:95:6f:36:8b:6c:31:1c:05:25:be:01:
                    c4:db:2d:d5:9a:53:08:a0:47:0c:67:d2:bc:c0:e6:
                    50:e8:f1:ec:28:5d:05:36:c4:ad:65:df:28:b8:ba:
                    7c:be:02:45:6f:90:89:8c:cc:85:97:b7:f0:f3:17:
                    e9:a6:fe:d9:25:84:9d:0f:20:c6:e3:c3:43:af:de:
                    70:e5:dc:5d:4f:5e:86:38:07:c3:aa:3b:f1:61:19:
                    d6:5a:c1:c1:85:e1:1c:c5:68:11:b7:55:46:7f:82:
                    5b:6d:1a:34:0e:52:e2:ec:14:c6:a6:37:5b:9b:a7:
                    41:ae:91:e7:5e:da:62:99:78:90:93:31:36:03:c2:
                    79:4e:84:eb:f9:3c:0d:6b:59:21:28:0b:fe:0f:a7:
                    81:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:37:9B:1F:7F:30:D3:00:ED:46:FA:C0:D8:81:36:12:E4:B8:60:FC
            X509v3 Authority Key Identifier:
                keyid:D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/38/3130332e3132312e3230382e302f32322d3234203d3e2034373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:a8:bc:c9:33:84:14:64:6f:d3:18:4e:4b:8d:f9:6b:0e:b2:
         47:01:e9:4d:80:e6:27:3c:a1:20:51:54:25:c8:ba:1f:7f:6d:
         c6:b7:18:93:1b:47:c9:1a:d9:a0:a7:e0:57:42:71:a8:8f:82:
         04:22:fc:0c:08:01:a7:97:b2:9b:25:ac:32:ee:c4:67:89:c6:
         05:89:15:9f:61:66:95:75:f1:dc:66:b5:cb:28:86:b8:53:c4:
         50:a7:d2:10:47:b3:d4:c3:28:8c:cc:a7:83:03:4e:d5:37:c4:
         43:65:12:07:19:11:c8:00:8b:aa:93:8b:e2:e7:a1:2d:06:67:
         cc:2c:52:d2:32:e3:b2:f1:63:7a:55:0f:fd:b9:89:5b:0e:22:
         cc:89:35:7b:fe:0f:bf:a4:42:67:ba:76:68:10:47:13:2d:92:
         38:c3:76:2c:fd:51:1b:7a:05:96:f1:4f:51:51:5d:85:8c:7f:
         28:c9:1a:f5:2a:08:14:b1:ec:a8:19:90:94:d4:16:d0:ba:64:
         40:dd:74:11:85:92:7e:ec:c6:84:da:70:40:e1:72:3d:e8:34:
         d6:77:29:32:07:c5:f4:c2:07:e9:c0:59:dc:47:9d:65:9c:cf:
         51:20:ea:e2:15:76:4d:f5:b1:8b:01:4b:d6:09:e1:83:83:6e:
         78:42:a3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 15:13:41 2024 by rpki-client on console-fra.rpki-client.org