Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/38/323430333a373163303a3a2f33322d3438203d3e2033323538.roa
File:                     323430333a373163303a3a2f33322d3438203d3e2033323538.roa (raw, json)
Hash identifier:          cjzUEIjY3Ip4OQBaUxkt83Wx9KlSyUClKBS92gKykpc=
Subject key identifier:   48:44:53:22:5B:6F:1D:E9:02:53:99:E0:73:E0:12:94:19:41:2A:E1
Certificate issuer:       /CN=A91FD4CC0000/serialNumber=D67C530C8E16B61FF52C085B2786C67ECCD6A909
Certificate serial:       1BD85306F0311F0D96A304F2F8FB07EF93FB9464
Authority key identifier: D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer
Subject info access:      rsync://0.sb/repo/sb/38/323430333a373163303a3a2f33322d3438203d3e2033323538.roa
Signing time:             Fri 10 May 2024 08:47:01 +0000
ROA not before:           Fri 10 May 2024 08:42:01 +0000
ROA not after:            Fri 09 May 2025 08:47:01 +0000
asID:                     3258
IP address blocks:        2403:71c0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl
                          rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 04:39:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d8:53:06:f0:31:1f:0d:96:a3:04:f2:f8:fb:07:ef:93:fb:94:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FD4CC0000/serialNumber=D67C530C8E16B61FF52C085B2786C67ECCD6A909
        Validity
            Not Before: May 10 08:42:01 2024 GMT
            Not After : May  9 08:47:01 2025 GMT
        Subject: CN=484453225B6F1DE9025399E073E0129419412AE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2c:9a:fa:c7:13:22:85:bb:1a:f6:39:26:e0:
                    b7:f0:2c:fc:9e:ff:7a:50:87:e3:9a:68:f7:df:c3:
                    ee:ff:c5:be:81:5f:77:64:fa:a9:7c:db:4d:96:01:
                    5d:2d:aa:32:a8:67:71:7b:98:26:83:d6:57:b3:f7:
                    b1:26:b9:15:46:3c:49:ba:05:59:76:6f:40:f2:eb:
                    dd:af:d2:f7:ea:88:91:21:84:0c:da:98:28:14:57:
                    11:38:e5:1a:ac:46:7b:9d:04:77:b3:70:28:c2:63:
                    c9:82:51:3a:fe:e5:e2:bf:3f:7d:2b:5d:0b:bf:05:
                    f2:6d:7c:1c:9c:19:f7:42:0e:d8:20:e3:8a:99:be:
                    5f:d7:d4:a0:82:85:97:5b:a9:80:e7:88:78:a8:68:
                    f7:de:84:c1:f1:82:fd:19:82:c0:bc:4d:87:85:e0:
                    b0:3a:06:71:77:85:8c:16:88:fd:4c:82:40:f0:36:
                    16:3b:8c:4e:d8:bc:b3:92:c6:1f:a5:18:33:19:9f:
                    6f:a0:ce:9f:58:56:6b:0c:11:71:14:4d:11:99:57:
                    5b:d5:11:d3:c2:8a:63:a7:94:80:31:77:18:5a:82:
                    75:87:5a:6d:1b:e2:ed:e4:81:bb:c0:41:7e:af:39:
                    23:f2:04:01:b7:fe:aa:1f:d8:c8:a5:a7:70:81:63:
                    9e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:44:53:22:5B:6F:1D:E9:02:53:99:E0:73:E0:12:94:19:41:2A:E1
            X509v3 Authority Key Identifier:
                keyid:D6:7C:53:0C:8E:16:B6:1F:F5:2C:08:5B:27:86:C6:7E:CC:D6:A9:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/38/D67C530C8E16B61FF52C085B2786C67ECCD6A909.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nxTDI4Wth_1LAhbJ4bGfszWqQk.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/38/323430333a373163303a3a2f33322d3438203d3e2033323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:71c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:4f:a3:67:74:9e:72:24:b0:55:9b:b8:99:14:41:2b:cc:44:
         20:03:e6:86:5e:35:37:f7:68:88:06:5c:36:e8:7b:ef:6e:62:
         91:7c:2c:35:d8:89:fa:cc:82:cf:22:ab:b2:be:4d:f6:05:41:
         7c:d0:b5:0c:4c:37:f4:7d:a9:e2:17:4d:bd:91:3b:e9:66:7b:
         c6:17:7c:83:6e:f1:00:24:9a:8f:d3:8f:4e:6a:68:83:40:28:
         88:0f:d0:12:72:b3:a1:fc:99:1d:10:3f:3a:87:51:2a:d2:4d:
         07:c5:29:37:02:61:c1:c3:fc:35:6c:18:6f:34:ad:c4:be:42:
         cf:41:25:85:e2:86:2b:9f:d6:b9:58:ce:0f:c5:95:11:b2:98:
         14:68:82:84:e5:17:c1:63:b5:37:ea:41:d8:71:bb:7c:3d:b7:
         1b:72:f4:d2:08:9b:b9:e9:9c:80:34:b6:6d:1a:1a:fd:5e:58:
         72:71:13:4a:4a:ef:fe:32:ac:82:0f:e2:fc:98:81:c7:3b:af:
         de:83:de:25:04:8c:e6:d5:20:1b:f3:c6:51:4e:a6:ab:38:39:
         e4:cb:52:d9:74:b9:34:a3:48:b2:42:7e:b7:7f:48:57:90:39:
         c6:54:9a:7c:d1:41:76:d8:62:a0:ec:31:5f:69:4a:ce:cf:9a:
         57:92:c1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:50:40 2024 by rpki-client on console-fra.rpki-client.org