Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/1/323030313a6466343a353134643a3a2f34382d3438203d3e20313533333436.roa
File:                     323030313a6466343a353134643a3a2f34382d3438203d3e20313533333436.roa (raw, json)
Hash identifier:          jyXrkPBz5fGYB/J2XrdnQ2pHXTSOM5q35/ywqUmR/bY=
Subject key identifier:   EC:B6:19:27:15:9F:67:4B:4A:1C:89:22:7F:83:42:F0:C9:3F:81:F6
Certificate issuer:       /CN=A917447B0000/serialNumber=7A443962573EC01D5131651F90F46DA19AFC21D2
Certificate serial:       742DCB53B0ED2D098AA5DD1E34E5E7E867E7C8C5
Authority key identifier: 7A:44:39:62:57:3E:C0:1D:51:31:65:1F:90:F4:6D:A1:9A:FC:21:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ekQ5Ylc-wB1RMWUfkPRtoZr8IdI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A917447B0000/1/323030313a6466343a353134643a3a2f34382d3438203d3e20313533333436.roa
Signing time:             Sat 28 Sep 2024 16:30:19 +0000
ROA not before:           Sat 28 Sep 2024 16:25:19 +0000
ROA not after:            Sat 27 Sep 2025 16:30:19 +0000
asID:                     153346
IP address blocks:        2001:df4:514d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.crl
                          rsync://rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ekQ5Ylc-wB1RMWUfkPRtoZr8IdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Oct 2024 11:18:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2d:cb:53:b0:ed:2d:09:8a:a5:dd:1e:34:e5:e7:e8:67:e7:c8:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917447B0000/serialNumber=7A443962573EC01D5131651F90F46DA19AFC21D2
        Validity
            Not Before: Sep 28 16:25:19 2024 GMT
            Not After : Sep 27 16:30:19 2025 GMT
        Subject: CN=ECB61927159F674B4A1C89227F8342F0C93F81F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1e:67:4c:1a:ca:80:a6:d2:1b:4f:8d:62:57:
                    62:fb:cb:40:22:35:5c:d5:88:c7:5b:37:cb:cf:59:
                    95:5f:91:77:a1:d9:ed:f4:12:76:26:03:be:92:06:
                    e9:2f:33:57:eb:11:e8:dd:1c:96:cf:08:7e:07:56:
                    7a:f9:63:5d:64:88:6c:6d:de:3e:e8:94:11:eb:6f:
                    43:e7:c7:64:e1:4b:ec:b4:31:39:9b:fb:40:ce:87:
                    8d:a6:a4:d4:a6:67:ab:69:fb:97:b6:13:08:1f:87:
                    75:0d:6b:6e:1b:f5:4b:7c:20:fc:6a:47:b6:26:07:
                    82:16:98:4b:78:cc:75:29:b7:cb:16:f8:5f:ad:9f:
                    fb:19:7e:0c:fa:e3:01:00:9a:4a:68:90:d3:c7:d7:
                    ba:ca:de:7b:96:77:27:74:16:7e:e7:87:aa:eb:06:
                    61:75:c6:ee:27:44:d7:ae:cd:15:5d:1c:f7:6b:69:
                    00:4f:db:d0:1b:c0:3a:3f:54:59:28:80:0a:fe:dd:
                    1b:7f:47:8f:78:70:84:df:e7:9d:7e:f1:c2:4d:b1:
                    18:57:27:b0:46:3c:08:b1:d6:3b:75:23:73:58:c6:
                    b3:6a:66:23:e4:09:3a:75:34:4c:e2:37:59:ca:09:
                    30:6d:03:15:6c:bf:7e:5c:8d:0d:ed:f6:d5:e9:a1:
                    eb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B6:19:27:15:9F:67:4B:4A:1C:89:22:7F:83:42:F0:C9:3F:81:F6
            X509v3 Authority Key Identifier:
                keyid:7A:44:39:62:57:3E:C0:1D:51:31:65:1F:90:F4:6D:A1:9A:FC:21:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/7A443962573EC01D5131651F90F46DA19AFC21D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ekQ5Ylc-wB1RMWUfkPRtoZr8IdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/323030313a6466343a353134643a3a2f34382d3438203d3e20313533333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:514d::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:ac:a3:6d:45:34:58:95:6d:f5:fa:11:73:9f:51:ed:d8:0a:
         5c:16:6f:4f:b4:04:e9:e9:94:c6:29:dd:ab:4d:e7:97:87:8c:
         8c:be:65:8c:d4:05:6b:8c:bc:01:4d:7d:c9:15:20:2b:44:34:
         0e:4f:ad:ef:5c:7b:b1:b3:45:53:84:47:8c:b3:d7:04:4d:dd:
         b1:72:5d:6d:0b:c2:e9:60:3c:ce:e4:7a:b7:54:ae:6f:71:37:
         6d:92:ad:ac:a0:a1:4d:7a:0b:6a:80:de:89:1b:48:e0:55:4f:
         b3:6f:a0:5e:0e:5b:a0:eb:03:f3:52:52:5d:65:da:1c:4c:0d:
         76:c6:e6:8a:97:15:cf:2b:d5:6a:ef:3f:7a:0f:8d:90:cf:d7:
         b1:92:f1:ee:2e:6d:2b:aa:f4:0e:4d:3b:89:c4:75:e3:c9:15:
         a2:23:3a:4c:5d:4b:8f:cc:3f:54:87:98:a5:6f:84:5b:33:a5:
         0a:b6:a1:11:d3:97:89:c0:3a:47:aa:9b:14:0e:00:6a:9a:6f:
         0c:83:ca:71:12:44:28:24:c9:40:a5:cd:28:4e:07:3d:1c:12:
         4e:f6:e7:3d:c5:fb:60:b6:5b:50:d5:1d:ab:3d:11:ab:7d:96:
         d3:93:23:19:53:c8:d2:06:74:84:e9:38:01:00:ea:32:b1:5d:
         73:47:4b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 10:01:56 2024 by rpki-client on console-ams.rpki-client.org