Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9127EEB0000/0/3130332e34392e34302e302f32342d3234203d3e203630373831.roa
File:                     3130332e34392e34302e302f32342d3234203d3e203630373831.roa (raw, json)
Hash identifier:          StQcUJyxIUAYGqA/t1ju0hqk9uIXXDiq/hlsysqbTT0=
Subject key identifier:   E7:69:FA:20:C8:A6:69:0C:35:DC:28:56:E5:3A:24:E0:F2:4C:95:18
Certificate issuer:       /CN=A9127EEB0000/serialNumber=130F57124A8921F00083A228FEBE2B78373015E3
Certificate serial:       0CAB50E045B8CD875DD57332ABFE079A7825149A
Authority key identifier: 13:0F:57:12:4A:89:21:F0:00:83:A2:28:FE:BE:2B:78:37:30:15:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ew9XEkqJIfAAg6Io_r4reDcwFeM.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/3130332e34392e34302e302f32342d3234203d3e203630373831.roa
Signing time:             Mon 18 Nov 2024 07:59:03 +0000
ROA not before:           Mon 18 Nov 2024 07:54:03 +0000
ROA not after:            Mon 17 Nov 2025 07:59:03 +0000
asID:                     60781
IP address blocks:        103.49.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.crl
                          rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ew9XEkqJIfAAg6Io_r4reDcwFeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 02:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ab:50:e0:45:b8:cd:87:5d:d5:73:32:ab:fe:07:9a:78:25:14:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127EEB0000/serialNumber=130F57124A8921F00083A228FEBE2B78373015E3
        Validity
            Not Before: Nov 18 07:54:03 2024 GMT
            Not After : Nov 17 07:59:03 2025 GMT
        Subject: CN=E769FA20C8A6690C35DC2856E53A24E0F24C9518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3f:47:f5:53:30:5d:86:fe:bc:3b:b5:87:a7:
                    48:b5:27:ac:61:69:84:af:c2:34:c3:4f:40:4b:19:
                    58:87:1b:c9:b3:5e:31:42:49:e7:19:f7:a0:d4:aa:
                    24:d6:60:8d:8f:0b:2c:2a:03:03:5a:47:02:07:39:
                    5f:f5:da:f6:98:bb:85:fe:47:e3:f4:9d:ed:00:8f:
                    1a:d2:c2:c1:65:81:78:06:44:75:37:c1:7d:bc:57:
                    f4:82:53:83:5c:18:85:c6:d3:53:4b:74:d4:52:4b:
                    ba:61:c8:d0:9d:2f:d7:5f:37:11:34:db:21:a1:e6:
                    31:df:66:30:0f:bf:6b:76:10:dd:c7:76:ee:1a:cb:
                    f7:b2:2c:4e:e3:79:b4:de:fb:d0:dc:bc:ca:cc:c2:
                    06:12:e7:ca:b5:f9:6d:e6:3b:a1:84:60:91:b2:4b:
                    b6:74:6e:83:62:aa:a7:c4:20:36:59:60:fa:89:07:
                    43:29:56:5d:f2:63:58:99:59:8c:0e:7e:6c:93:87:
                    8e:a3:56:b1:a3:91:38:2e:b2:1b:ac:9c:15:19:a2:
                    2c:c5:50:02:04:b8:11:77:52:e2:c3:b3:be:09:34:
                    55:cf:56:53:e2:9f:d7:9a:96:24:9a:4a:ca:48:66:
                    03:d9:20:79:de:8d:b8:5c:bf:95:5c:2b:37:ef:29:
                    b0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:69:FA:20:C8:A6:69:0C:35:DC:28:56:E5:3A:24:E0:F2:4C:95:18
            X509v3 Authority Key Identifier:
                keyid:13:0F:57:12:4A:89:21:F0:00:83:A2:28:FE:BE:2B:78:37:30:15:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ew9XEkqJIfAAg6Io_r4reDcwFeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/3130332e34392e34302e302f32342d3234203d3e203630373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:72:20:ae:31:f8:27:1c:69:44:ab:65:e0:2d:b7:1b:ef:35:
         48:7b:2c:fc:86:a7:c7:8b:6e:df:b4:c7:e9:96:cf:02:54:5c:
         5e:ec:e3:9e:74:b9:a0:8e:26:9d:cd:b8:6c:3f:cb:1a:e5:25:
         ef:f8:cf:d4:62:36:80:5c:ee:c6:58:fb:e8:7b:5e:55:88:24:
         09:ce:3d:a1:2b:66:75:76:0a:f0:7c:5d:7e:f0:ad:80:a9:ed:
         57:fd:d4:49:9e:7a:f8:cf:9c:d7:33:f1:c6:8f:cf:81:75:91:
         7d:c9:27:72:30:61:bc:5d:b9:41:3e:d6:c7:b5:d1:9c:aa:5f:
         e6:8b:f0:cd:6e:c9:fd:e9:d5:e0:58:b4:1e:d2:47:d0:90:3e:
         1e:0b:d7:a4:a3:aa:54:87:01:90:b6:bf:93:ec:47:d4:42:f6:
         bd:75:b6:19:6f:f1:44:15:4e:55:d9:27:f2:aa:46:fc:14:c1:
         6b:ca:62:94:b3:a9:1a:47:bc:29:d9:f8:33:66:ef:a3:f1:1f:
         61:f8:8f:71:19:08:ab:3d:a0:41:6b:13:8b:a3:56:b9:8f:b8:
         07:eb:3e:84:67:0f:54:23:c4:94:49:c9:53:2e:35:a4:a3:0a:
         6e:3a:80:6f:33:6f:ad:30:dc:61:d6:eb:5b:9c:09:5a:14:87:
         95:4a:41:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:39:56 2024 by rpki-client on console-ams.rpki-client.org