Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/3130332e3234382e35302e302f32332d3234203d3e20313437303230.roa
File:                     3130332e3234382e35302e302f32332d3234203d3e20313437303230.roa (raw, json)
Hash identifier:          dZCb0NNFa0t8qRGSq9V6Zny0WChx1nzDMlS1sNzpGkc=
Subject key identifier:   36:9A:A4:64:92:72:31:07:F7:3C:C4:8F:22:B3:03:9D:2C:50:94:8E
Certificate issuer:       /CN=A9150E4D0000/serialNumber=6228A3C6D637801692F7D7D48251DAD36A3CDB7F
Certificate serial:       4617E177AE5AB5B9E6C3454924EE39DE18A5D6A2
Authority key identifier: 62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/3130332e3234382e35302e302f32332d3234203d3e20313437303230.roa
Signing time:             Mon 28 Oct 2024 09:48:59 +0000
ROA not before:           Mon 28 Oct 2024 09:43:59 +0000
ROA not after:            Mon 27 Oct 2025 09:48:59 +0000
asID:                     147020
IP address blocks:        103.248.50.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.crl
                          rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 13:04:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:17:e1:77:ae:5a:b5:b9:e6:c3:45:49:24:ee:39:de:18:a5:d6:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E4D0000/serialNumber=6228A3C6D637801692F7D7D48251DAD36A3CDB7F
        Validity
            Not Before: Oct 28 09:43:59 2024 GMT
            Not After : Oct 27 09:48:59 2025 GMT
        Subject: CN=369AA46492723107F73CC48F22B3039D2C50948E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3b:14:69:23:ed:a2:c3:0a:97:46:cc:ff:2f:
                    97:99:99:53:88:6f:47:a1:d3:a8:80:b3:a7:d7:52:
                    d4:27:75:e4:73:4a:e8:f3:8b:4a:c2:da:36:2c:69:
                    97:26:47:15:2c:2c:90:46:c3:97:c6:a5:18:52:2c:
                    21:a1:84:17:87:b1:30:4a:3b:bf:fa:ed:a9:f5:a6:
                    c4:f6:89:9a:33:8b:cc:af:fc:9c:88:85:01:53:72:
                    9e:f7:cc:1a:62:a9:d5:29:be:0f:05:67:f2:3c:50:
                    bc:a1:a4:35:2b:5a:4e:c5:32:38:b6:fe:e5:93:9d:
                    df:25:e7:81:24:d7:94:c9:73:fe:17:6e:56:14:fa:
                    ad:9e:a8:fb:34:69:dd:f1:08:04:80:2d:5d:09:59:
                    23:c5:72:3f:39:05:f7:9e:6d:c0:6b:94:52:22:07:
                    c8:d3:0d:66:ff:36:5f:ac:e6:cd:7d:fc:f5:ee:eb:
                    1c:08:8a:b5:58:47:de:d8:19:33:04:99:0a:e5:40:
                    3c:e2:06:7d:03:63:f0:06:c8:33:72:49:2a:ea:1c:
                    02:0d:d5:4a:c4:15:e3:69:ff:8f:e1:23:83:b1:59:
                    0a:3b:52:3c:43:71:03:af:9d:8f:03:7d:e6:8c:d1:
                    13:5e:2d:4c:60:3d:a2:da:58:a7:96:5f:08:51:ea:
                    49:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:9A:A4:64:92:72:31:07:F7:3C:C4:8F:22:B3:03:9D:2C:50:94:8E
            X509v3 Authority Key Identifier:
                keyid:62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/3130332e3234382e35302e302f32332d3234203d3e20313437303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:20:28:b4:30:d9:3a:75:f0:d0:19:37:29:0e:9e:f6:67:10:
         41:0a:77:d1:27:df:cd:63:a7:ec:b1:95:3a:c5:96:79:f3:28:
         7d:55:a7:94:cd:a7:2a:fc:3e:94:ca:db:5b:e5:48:bd:06:c7:
         77:56:f4:86:26:2c:53:ba:92:ea:eb:1d:30:73:5f:1e:d3:e3:
         25:24:a6:eb:67:ad:d3:07:24:52:ac:fd:41:0d:36:e7:1c:fb:
         b8:c2:f1:43:b2:d1:c8:18:9a:0d:b8:80:a6:b9:37:79:5f:5d:
         2a:ec:69:3f:d4:a0:9e:09:5c:7c:dc:fc:bc:41:5d:a6:24:d1:
         02:65:5c:1e:3d:1f:28:bc:0e:77:0f:b3:27:08:9a:71:75:a8:
         06:e1:52:ad:87:a3:14:cd:c8:35:08:40:11:3c:fa:5b:cf:d3:
         39:de:87:04:31:66:6c:97:86:32:28:fc:8d:4e:0f:d9:37:04:
         9f:dc:1d:ea:66:9d:c1:fe:c9:f1:fe:78:3a:96:a9:c5:7c:31:
         d5:9c:90:4b:78:75:ab:8d:b7:b3:6a:ff:88:7f:30:da:f2:de:
         9a:89:62:55:7b:23:c1:de:8d:1e:5c:72:b2:d3:d3:e5:57:f1:
         96:be:e3:87:3c:c0:b3:75:02:ce:e7:b3:f3:47:cb:95:77:f5:
         79:a2:e1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:14:38 2024 by rpki-client on console-ams.rpki-client.org