Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a323030303a3a2f33362d3438203d3e20313437303230.roa
File:                     323430313a323036303a323030303a3a2f33362d3438203d3e20313437303230.roa (raw, json)
Hash identifier:          gPG8l3OXv2nZ75Sb3JVWXTUkACkZtrgOXoNSpOUaoI0=
Subject key identifier:   E2:AD:CE:B8:15:A6:5B:C0:6A:8A:88:33:0A:05:EE:94:6B:3C:1B:E3
Certificate issuer:       /CN=A9150E4D0000/serialNumber=6228A3C6D637801692F7D7D48251DAD36A3CDB7F
Certificate serial:       5E1025A723CA0CACBADB888F9AD2C3398045D911
Authority key identifier: 62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a323030303a3a2f33362d3438203d3e20313437303230.roa
Signing time:             Sat 01 Jun 2024 22:06:14 +0000
ROA not before:           Sat 01 Jun 2024 22:01:14 +0000
ROA not after:            Sat 31 May 2025 22:06:14 +0000
asID:                     147020
IP address blocks:        2401:2060:2000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.crl
                          rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 13:04:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:10:25:a7:23:ca:0c:ac:ba:db:88:8f:9a:d2:c3:39:80:45:d9:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E4D0000/serialNumber=6228A3C6D637801692F7D7D48251DAD36A3CDB7F
        Validity
            Not Before: Jun  1 22:01:14 2024 GMT
            Not After : May 31 22:06:14 2025 GMT
        Subject: CN=E2ADCEB815A65BC06A8A88330A05EE946B3C1BE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:74:0f:e7:3e:a4:c2:06:17:1f:fb:78:36:cd:
                    ef:b3:3c:95:7a:35:2e:a1:01:dc:e6:a8:74:15:9a:
                    24:a5:79:ce:cd:b2:b0:3c:a3:5d:31:ae:0c:39:97:
                    6c:00:eb:12:1e:3f:33:aa:84:45:88:07:ee:58:b2:
                    ff:1a:4e:4f:5f:d4:91:72:19:8c:ce:d6:cd:b3:d1:
                    6b:c7:25:6a:2c:a3:68:28:cb:5d:17:0b:c0:d2:64:
                    92:1d:3b:bf:c8:81:fc:37:ee:e6:10:87:27:35:f2:
                    8f:38:aa:52:56:1f:28:ba:ef:8a:32:4d:29:86:07:
                    7a:c4:c2:81:5c:57:a2:84:36:97:22:03:2d:62:55:
                    a9:23:1e:86:9b:18:e3:29:a0:70:60:a3:d5:ad:66:
                    46:75:b3:9f:2a:0f:dc:9f:cb:2d:e5:7f:f1:79:16:
                    02:9e:6f:21:08:37:a0:06:dd:db:a3:14:02:c4:66:
                    b7:98:56:85:56:a7:70:fa:40:60:09:c6:ef:00:d1:
                    03:c3:86:ba:4e:77:a8:d5:56:b4:41:c5:4c:bf:c3:
                    17:74:d2:0d:84:22:dc:4d:33:3b:9a:7f:e1:26:43:
                    5c:fe:8a:ef:f8:fa:dd:51:ed:a4:90:42:2f:49:fd:
                    9d:ff:fc:55:f2:ca:ee:57:a7:94:62:cd:de:4f:42:
                    33:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:AD:CE:B8:15:A6:5B:C0:6A:8A:88:33:0A:05:EE:94:6B:3C:1B:E3
            X509v3 Authority Key Identifier:
                keyid:62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a323030303a3a2f33362d3438203d3e20313437303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2060:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         02:8a:91:72:1e:75:d8:b1:4b:9f:19:b0:8a:5a:ff:c3:03:85:
         01:46:02:3e:8c:be:05:b7:dd:11:44:18:ef:88:e0:5e:7e:b2:
         a0:44:aa:19:1e:7d:1c:c7:a9:51:a6:d3:7e:c3:9e:ca:5e:51:
         10:7b:2a:c3:e1:c2:17:70:38:ef:20:eb:15:56:fe:83:d3:95:
         e3:9b:f9:f8:f0:9d:63:58:ee:23:d6:db:33:01:35:ca:52:a6:
         94:16:a7:60:d9:fc:92:6f:c0:67:fe:6d:8b:59:f5:e7:02:75:
         0e:62:42:65:6f:83:9e:0c:16:b0:d9:8d:8d:6f:56:fb:74:7a:
         f1:54:f1:7c:2f:0d:00:d6:d7:a5:da:08:4e:2d:c9:4e:0c:8f:
         47:5f:05:71:58:50:68:30:2a:e9:b3:0b:85:c5:87:fa:9e:f9:
         0f:6e:61:9f:9c:6e:a7:07:c7:d5:5c:ac:47:56:55:a1:b6:50:
         11:00:51:2c:7b:c1:bc:76:92:bb:b3:ab:ea:78:83:06:49:94:
         4a:f6:94:f7:4a:77:6b:98:f9:91:59:d2:41:94:d5:74:cf:ac:
         34:5b:c0:ef:a2:81:67:53:c5:44:d2:d2:76:b3:ad:64:72:e6:
         d7:72:b7:94:ca:cf:4d:4a:15:ce:54:43:9b:3e:31:40:e0:81:
         65:33:86:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:14:38 2024 by rpki-client on console-ams.rpki-client.org