Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9127EEB0000/0/3130332e34392e34312e302f32342d3234203d3e20323036313530.roa
File:                     3130332e34392e34312e302f32342d3234203d3e20323036313530.roa (raw, json)
Hash identifier:          Zl/k8hek4FF2ugApRyMvZfhd17cRgCGiY7i/HejrNRA=
Subject key identifier:   2D:60:0F:AD:C4:4C:DA:9A:F3:67:97:76:89:D1:3B:A2:88:15:60:E6
Certificate issuer:       /CN=A9127EEB0000/serialNumber=130F57124A8921F00083A228FEBE2B78373015E3
Certificate serial:       A75E15F4DEED4FD1FFEADF3D168725D874D018
Authority key identifier: 13:0F:57:12:4A:89:21:F0:00:83:A2:28:FE:BE:2B:78:37:30:15:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ew9XEkqJIfAAg6Io_r4reDcwFeM.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/3130332e34392e34312e302f32342d3234203d3e20323036313530.roa
Signing time:             Mon 18 Nov 2024 07:59:03 +0000
ROA not before:           Mon 18 Nov 2024 07:54:03 +0000
ROA not after:            Mon 17 Nov 2025 07:59:03 +0000
asID:                     206150
IP address blocks:        103.49.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.crl
                          rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ew9XEkqJIfAAg6Io_r4reDcwFeM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 02:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a7:5e:15:f4:de:ed:4f:d1:ff:ea:df:3d:16:87:25:d8:74:d0:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127EEB0000/serialNumber=130F57124A8921F00083A228FEBE2B78373015E3
        Validity
            Not Before: Nov 18 07:54:03 2024 GMT
            Not After : Nov 17 07:59:03 2025 GMT
        Subject: CN=2D600FADC44CDA9AF367977689D13BA2881560E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:71:f1:1c:3b:64:61:46:97:e6:2d:2b:27:ac:
                    a1:2f:39:f4:a4:d0:8c:29:cc:3d:ee:6e:d1:eb:86:
                    fc:1f:3e:21:d3:40:8c:2b:68:1f:05:af:59:d8:92:
                    51:4d:c9:8b:c5:18:29:9b:40:8f:0f:14:c6:d3:59:
                    7c:c8:06:4e:1e:1b:83:fc:dc:2e:13:d9:ae:47:5b:
                    f7:ca:56:8d:a4:3e:a7:4b:de:45:e1:77:46:f2:12:
                    47:9d:85:e1:0d:4b:e5:33:ae:52:6b:20:04:5b:18:
                    9b:f9:38:68:c5:82:af:a9:d2:a7:1e:97:1b:c5:20:
                    71:12:ea:17:03:58:66:77:86:55:59:da:07:d6:3d:
                    b7:7d:06:87:5d:20:5f:fc:44:2d:99:2c:14:83:91:
                    78:f1:f4:a9:53:a1:e1:20:23:e8:5b:a2:ec:14:05:
                    33:b3:fd:e7:a5:7c:40:a9:13:37:b4:1c:2a:3b:42:
                    bc:4c:cd:b0:10:3c:0f:56:71:cc:9e:f4:6a:0c:b0:
                    69:de:61:7b:50:0b:c1:32:37:7c:2b:fd:53:c2:55:
                    51:91:7d:d8:bd:5b:10:07:a4:41:2b:40:1d:9f:39:
                    2e:22:a7:81:ef:da:c3:6a:9a:e1:25:59:ff:ab:02:
                    c9:5b:4c:89:d5:b5:70:24:14:64:bc:f0:1f:e3:e5:
                    79:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:60:0F:AD:C4:4C:DA:9A:F3:67:97:76:89:D1:3B:A2:88:15:60:E6
            X509v3 Authority Key Identifier:
                keyid:13:0F:57:12:4A:89:21:F0:00:83:A2:28:FE:BE:2B:78:37:30:15:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/130F57124A8921F00083A228FEBE2B78373015E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ew9XEkqJIfAAg6Io_r4reDcwFeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9127EEB0000/0/3130332e34392e34312e302f32342d3234203d3e20323036313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:38:f9:98:5a:e0:a8:d5:aa:0a:9e:91:7f:fc:60:60:86:e4:
         5d:df:dd:55:41:1e:11:e3:0e:02:f5:e1:7f:84:29:bd:d1:12:
         5f:1f:b7:78:39:a5:60:d5:e7:d0:b6:20:77:2c:63:21:1c:1a:
         e4:26:18:71:1d:5c:28:7f:09:3e:5b:14:af:3f:88:e6:6e:6d:
         83:14:b6:b2:8b:db:a3:57:38:a1:99:41:e7:57:16:44:0c:a3:
         e0:d1:61:af:d6:8d:02:c0:3f:4b:4f:e4:75:35:d5:50:34:d8:
         26:81:0f:87:c5:10:b4:52:c8:c1:a2:45:7d:28:b5:49:23:5a:
         7e:e6:7a:82:63:46:a9:05:d4:9d:9c:ba:36:59:58:ba:aa:35:
         56:28:3e:6a:7a:6f:b0:83:7a:66:06:fe:10:c4:27:33:70:c5:
         7a:12:f0:99:d4:02:47:e2:e8:10:a6:4f:cb:3c:b1:0b:5e:99:
         40:d4:4c:30:15:79:65:1d:b7:11:ae:79:c7:b0:e8:ae:ef:a6:
         af:0c:f3:01:19:3f:5d:de:09:94:bc:12:83:e8:59:59:e4:66:
         20:d7:64:c8:9a:d1:98:b8:61:87:31:99:66:d5:9c:49:49:1c:
         bc:9a:33:fc:6c:ed:85:82:49:d1:b8:13:e6:db:2e:b7:f8:5d:
         45:ea:18:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:39:56 2024 by rpki-client on console-ams.rpki-client.org