Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a613030303a3a2f33362d3336203d3e20313437303230.roa
File:                     323430313a323036303a613030303a3a2f33362d3336203d3e20313437303230.roa (raw, json)
Hash identifier:          MKfMjJ5TpoAcS0RoIjPaUqgCChV2FoLRtYqM8x/DCcY=
Subject key identifier:   6B:07:78:8F:D8:0B:6A:40:C4:66:00:95:BE:DA:21:81:D8:05:84:30
Certificate issuer:       /CN=A9150E4D0000/serialNumber=6228A3C6D637801692F7D7D48251DAD36A3CDB7F
Certificate serial:       72AB2D3AA8202EEC5598986DB948076788AA9755
Authority key identifier: 62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a613030303a3a2f33362d3336203d3e20313437303230.roa
Signing time:             Wed 21 Aug 2024 04:11:09 +0000
ROA not before:           Wed 21 Aug 2024 04:06:09 +0000
ROA not after:            Wed 20 Aug 2025 04:11:09 +0000
asID:                     147020
IP address blocks:        2401:2060:a000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.crl
                          rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 13:04:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:ab:2d:3a:a8:20:2e:ec:55:98:98:6d:b9:48:07:67:88:aa:97:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E4D0000/serialNumber=6228A3C6D637801692F7D7D48251DAD36A3CDB7F
        Validity
            Not Before: Aug 21 04:06:09 2024 GMT
            Not After : Aug 20 04:11:09 2025 GMT
        Subject: CN=6B07788FD80B6A40C4660095BEDA2181D8058430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ad:c3:67:86:b8:74:78:64:2b:e2:a9:7a:73:
                    14:10:bd:b0:28:46:5f:f6:2d:3e:d5:71:71:4b:18:
                    e8:0d:f5:87:1b:14:1e:4c:d9:f0:6d:66:71:6e:2b:
                    ed:0e:2e:b1:05:d2:ed:93:86:8a:28:e4:86:47:e6:
                    4d:83:7e:fc:9b:5b:ee:0d:ab:ae:3f:05:6f:fa:c7:
                    1a:74:11:66:13:c2:5f:0e:86:07:48:f1:13:79:3e:
                    bb:e5:b7:ee:24:c7:e2:82:63:57:e7:38:8f:28:67:
                    07:36:a2:9a:a9:0c:88:13:3f:16:a2:ab:ff:ae:34:
                    a9:77:f2:8a:7d:62:89:db:4b:a8:00:0e:f6:19:23:
                    d3:ec:b3:8e:03:fa:9e:d6:75:05:18:6a:cb:89:b8:
                    20:4d:0e:60:fa:27:40:2b:62:da:de:65:6a:bb:70:
                    61:68:a5:0c:e6:e0:aa:15:6a:30:02:d2:60:4b:17:
                    a0:b5:54:01:16:2d:3e:ec:a6:0d:60:f1:5e:d1:be:
                    54:50:2b:f2:d9:d7:c7:f4:48:51:1e:f4:f2:a4:ea:
                    67:59:1d:d3:d1:18:80:2e:fb:22:db:5a:34:8a:8e:
                    49:9d:dd:8e:94:4d:fc:2b:e5:8b:cc:08:4c:d7:02:
                    1e:ac:84:6e:86:6d:f5:60:4e:62:d7:60:4a:93:66:
                    e1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:07:78:8F:D8:0B:6A:40:C4:66:00:95:BE:DA:21:81:D8:05:84:30
            X509v3 Authority Key Identifier:
                keyid:62:28:A3:C6:D6:37:80:16:92:F7:D7:D4:82:51:DA:D3:6A:3C:DB:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/6228A3C6D637801692F7D7D48251DAD36A3CDB7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiijxtY3gBaS99fUglHa02o8238.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/323430313a323036303a613030303a3a2f33362d3336203d3e20313437303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:2060:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         9a:04:5e:2c:4a:d3:42:91:d9:32:48:ac:45:db:3e:94:c7:04:
         95:55:b5:db:c8:8e:cf:04:80:17:ec:3f:6e:a8:c9:40:48:e4:
         84:ba:f2:af:51:f7:29:af:e0:1a:0f:df:c1:fa:1e:71:9c:6c:
         6f:5f:26:92:da:8f:0f:81:07:e9:1b:9c:2b:d4:94:55:aa:75:
         c9:53:0c:8b:a4:16:04:44:30:71:f0:80:0b:f2:f8:6e:74:8d:
         2f:e0:5d:cc:73:31:e8:35:09:0f:96:78:78:36:bf:bd:86:1c:
         cc:dc:c7:91:44:67:4f:99:e9:be:17:f5:44:79:a4:c9:bd:3e:
         7a:7c:e9:b0:ca:76:7d:78:c8:62:87:3f:e8:57:af:e8:03:3f:
         b0:61:4d:92:f5:13:be:9f:81:0a:ec:90:7a:ba:51:b4:cd:a9:
         b4:65:35:03:95:d8:5e:64:a6:0f:c8:e5:98:2a:0a:07:27:73:
         45:92:b4:b3:3c:ff:d0:af:59:05:f2:fd:a0:f4:63:3c:61:ba:
         df:71:37:fc:de:b9:d7:ac:de:25:a0:b4:46:1f:36:24:e3:59:
         11:85:cb:d6:4c:59:ce:6f:4b:b6:90:21:51:41:51:01:15:ab:
         67:47:14:0c:34:b2:45:ae:1a:bd:69:e4:cd:e9:50:90:83:fc:
         81:da:15:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:14:38 2024 by rpki-client on console-ams.rpki-client.org