Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a313030303a3a2f33362d3438203d3e20313437303230.roa
File:                     323430313a323036303a313030303a3a2f33362d3438203d3e20313437303230.roa (raw, json)
Hash identifier:          SHmsWgoH0W5a4MIxTAojgLAEwCWFrmFdKxj2tt7AE10=
Subject key identifier:   F8:99:5F:DC:5D:47:18:50:78:6B:98:97:D5:85:00:1C:0F:E4:FF:17
Certificate issuer:       /CN=A9150E4D0000/serialNumber=6228A3C6D637801692F7D7D48251DAD36A3CDB7F
Certificate serial:       0F92856A76C58BBA6B7A75B23CDF9027C34F3721
Authority key identifier: 62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a313030303a3a2f33362d3438203d3e20313437303230.roa
Signing time:             Sat 01 Jun 2024 22:05:28 +0000
ROA not before:           Sat 01 Jun 2024 22:00:28 +0000
ROA not after:            Sat 31 May 2025 22:05:28 +0000
asID:                     147020
IP address blocks:        2401:2060:1000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.crl
                          rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 13:04:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:92:85:6a:76:c5:8b:ba:6b:7a:75:b2:3c:df:90:27:c3:4f:37:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E4D0000/serialNumber=6228A3C6D637801692F7D7D48251DAD36A3CDB7F
        Validity
            Not Before: Jun  1 22:00:28 2024 GMT
            Not After : May 31 22:05:28 2025 GMT
        Subject: CN=F8995FDC5D471850786B9897D585001C0FE4FF17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b5:b2:57:60:db:6e:b5:27:de:2c:b7:11:7c:
                    6d:6a:66:cc:1d:38:ab:a4:e1:3f:d5:92:89:f3:c0:
                    9f:da:b0:8b:ea:22:a4:b9:df:b7:58:a4:1d:aa:13:
                    c9:ae:4c:57:16:05:48:b1:f0:2c:5d:d1:81:c8:b2:
                    27:a1:9f:24:9e:e5:d7:b2:a3:09:2c:9c:fe:7a:22:
                    f2:3c:d6:7d:70:7c:c2:47:ea:8d:19:37:6a:98:89:
                    b3:eb:cd:21:38:70:bc:59:f1:2f:71:ab:d5:b3:37:
                    ad:1d:58:c5:47:c4:b8:ea:25:65:cd:87:0d:f9:09:
                    ba:d8:e8:f8:92:24:4e:cb:e6:48:11:11:f7:e6:1a:
                    e8:ba:ce:16:4e:77:dd:4b:80:59:1d:fb:3a:d4:a7:
                    42:b8:a4:d9:b8:b5:fc:48:3e:a2:d8:dd:67:d3:ff:
                    79:b0:da:cc:be:7c:9a:e0:98:db:17:b6:05:69:b6:
                    a9:1e:f9:00:e8:ef:0d:cd:ab:d3:27:41:4a:80:81:
                    64:83:6f:3f:fb:ff:c7:49:79:2a:44:e1:f0:f1:73:
                    cb:6d:21:12:80:9c:37:88:5d:72:85:e2:fd:01:da:
                    35:b4:a9:01:1c:ed:11:c3:a8:69:39:eb:e2:fb:a9:
                    e1:da:21:fb:ac:82:e3:f8:3f:16:d5:f4:af:96:d8:
                    d2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:99:5F:DC:5D:47:18:50:78:6B:98:97:D5:85:00:1C:0F:E4:FF:17
            X509v3 Authority Key Identifier:
                keyid:62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a313030303a3a2f33362d3438203d3e20313437303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2060:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5b:6d:7b:0f:e7:e2:fd:15:e5:31:42:95:5f:f4:db:3b:79:54:
         e7:6f:65:32:2b:6c:c9:99:dd:08:cd:64:5f:e1:48:e2:4b:dc:
         0d:b9:5d:ea:7a:b0:ba:75:7c:f3:31:86:a1:a8:42:28:81:ac:
         85:b2:b4:4d:59:4e:32:51:2a:a8:18:21:01:0d:4a:c5:01:0c:
         96:76:2e:8c:e4:bd:21:a8:45:1b:77:fc:18:93:23:4a:b5:45:
         b6:60:e4:aa:63:1f:3c:b5:83:15:e7:44:41:7c:31:a8:a6:69:
         bb:b6:bb:dc:98:e3:8a:d9:aa:ef:d4:a5:61:da:04:0b:8a:d5:
         b4:9a:80:d3:cf:b7:a5:42:c4:a4:78:08:4c:9b:e7:44:3f:4b:
         d5:a7:46:88:bd:82:72:c4:47:38:e5:37:ae:ea:3f:a2:2f:76:
         ff:6b:83:ef:d9:6c:f5:09:8b:d9:88:34:46:d5:56:86:26:56:
         b2:45:98:10:21:17:2c:18:84:24:a1:52:ea:55:5a:9c:f1:67:
         c4:82:6d:13:66:45:a4:94:a2:c8:7d:f8:b5:88:58:95:bc:e0:
         fa:71:87:b1:a9:77:0d:8b:ce:d2:63:70:90:ff:63:c4:da:3c:
         fd:ce:d0:17:e8:3f:86:fd:b5:63:ea:c2:bc:26:3a:8f:c4:11:
         60:6e:77:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:06:07 2024 by rpki-client on console-fra.rpki-client.org