Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9127EEB0000/0/3130332e34392e34302e302f32342d3234203d3e203630373831.roa
File:                     3130332e34392e34302e302f32342d3234203d3e203630373831.roa (raw, json)
Hash identifier:          5x0PESxgsU2fyNXBtLbl3ofnoMKnashULR0dafxPv+Y=
Subject key identifier:   9A:DE:DC:D6:C5:87:82:87:B6:40:0C:4A:B4:8F:38:89:53:D6:B8:C6
Certificate issuer:       /CN=A9127EEB0000/serialNumber=130F57124A8921F00083A228FEBE2B78373015E3
Certificate serial:       7792AE579191C7A6A896CE8E1E1A11F12AD7D44D
Authority key identifier: 13:0F:57:12:4A:89:21:F0:00:83:A2:28:FE:BE:2B:78:37:30:15:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ew9XEkqJIfAAg6Io_r4reDcwFeM.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/3130332e34392e34302e302f32342d3234203d3e203630373831.roa
Signing time:             Mon 18 Dec 2023 07:18:27 +0000
ROA not before:           Mon 18 Dec 2023 07:13:27 +0000
ROA not after:            Mon 16 Dec 2024 07:18:27 +0000
asID:                     60781
IP address blocks:        103.49.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.crl
                          rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ew9XEkqJIfAAg6Io_r4reDcwFeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 04:09:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:92:ae:57:91:91:c7:a6:a8:96:ce:8e:1e:1a:11:f1:2a:d7:d4:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127EEB0000/serialNumber=130F57124A8921F00083A228FEBE2B78373015E3
        Validity
            Not Before: Dec 18 07:13:27 2023 GMT
            Not After : Dec 16 07:18:27 2024 GMT
        Subject: CN=9ADEDCD6C5878287B6400C4AB48F388953D6B8C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:09:14:dd:0f:8b:67:94:8c:80:75:0c:b4:ba:
                    70:8a:6d:6f:d2:99:6b:5b:3d:fa:60:ea:fc:df:b3:
                    ad:ba:5e:46:eb:b6:64:e7:37:51:4a:25:02:6f:d9:
                    ba:0f:10:7e:11:c1:50:ee:7e:fa:01:cd:63:25:6f:
                    18:d7:6a:76:9e:6a:b2:7f:c9:26:2d:f4:2b:47:f6:
                    ac:19:69:e8:3a:20:2e:ee:30:f8:24:9c:2e:54:35:
                    a0:00:c4:74:43:e9:f2:7c:56:f6:e7:f9:c0:f6:ab:
                    94:e6:cb:a4:e0:1f:49:43:37:be:ae:0c:95:03:ac:
                    72:45:29:ce:3c:0f:6b:de:81:39:99:d9:06:f0:82:
                    bc:65:a0:04:98:2a:a1:36:cf:5d:07:db:85:37:b4:
                    d6:07:af:d5:f8:5f:cb:0e:f7:f1:b1:ee:22:58:2e:
                    95:c7:cc:29:ef:bc:f5:19:bd:37:fc:19:1d:fb:98:
                    b8:fb:c4:57:91:17:59:9b:c6:5b:15:7c:37:3e:cb:
                    52:b2:63:d2:7d:ba:c5:1f:d0:e4:a0:1d:c5:d8:08:
                    bd:cd:ab:e0:65:eb:a8:91:bd:61:1a:91:82:79:de:
                    26:db:3d:a9:e7:20:5f:71:8d:00:c7:d6:fb:1a:06:
                    d7:6a:8c:cc:9b:ce:86:7f:8c:b1:54:77:a7:de:93:
                    a9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DE:DC:D6:C5:87:82:87:B6:40:0C:4A:B4:8F:38:89:53:D6:B8:C6
            X509v3 Authority Key Identifier:
                keyid:13:0F:57:12:4A:89:21:F0:00:83:A2:28:FE:BE:2B:78:37:30:15:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ew9XEkqJIfAAg6Io_r4reDcwFeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/3130332e34392e34302e302f32342d3234203d3e203630373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:15:bb:c3:8f:d3:8e:91:a0:97:64:98:4b:07:df:f8:64:c2:
         7e:89:fc:a7:41:63:f9:ba:91:4e:65:e8:83:20:76:74:32:0d:
         2a:9d:07:3e:c1:ff:16:7e:2f:7b:7c:bc:41:b6:dd:29:9f:92:
         a9:c6:cb:e5:78:93:8e:77:80:0d:54:7b:09:de:97:a4:d1:d8:
         6f:2a:5e:ba:45:40:a1:ab:86:70:ef:3b:3f:d2:db:fd:6f:af:
         48:c0:25:5f:40:53:f9:8f:52:9a:ae:68:10:8a:66:72:ae:e4:
         a9:2c:f8:e2:89:39:d4:55:c7:1f:2f:78:4d:30:2e:17:06:55:
         29:fc:ee:9b:50:b2:41:55:0e:01:84:08:34:01:ad:62:4e:2a:
         79:44:0c:33:75:2c:aa:c6:d3:55:67:1f:8b:05:5e:52:ed:be:
         9a:d5:97:3e:9f:47:7c:78:51:d9:f1:af:99:7b:4f:c2:2d:59:
         f6:a2:34:50:96:7b:0d:49:83:46:83:78:af:f0:2d:98:63:2c:
         74:50:f4:29:9f:1b:a9:1a:fd:5e:43:9a:46:02:b4:97:60:10:
         8e:b5:31:ab:6f:a9:9b:fa:0e:ca:d2:ff:15:d5:49:8f:77:9e:
         b2:15:6b:5f:de:63:b3:7a:c4:76:90:99:e4:99:14:91:e4:60:
         ae:8a:ae:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 05:13:06 2024 by rpki-client on console-fra.rpki-client.org