Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32302e302f32342d3234203d3e20313336373932.roa
File:                     3130332e39362e32302e302f32342d3234203d3e20313336373932.roa (raw, json)
Hash identifier:          ZqgJMkEE+Gc01jyYKV6RIqm2fEEb3IP+zRkqR7gBnHs=
Subject key identifier:   64:BC:48:8E:EF:5D:FC:34:E9:4D:BC:6A:71:E7:6C:69:BE:0D:52:DF
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       7773AD09F577E7973FA9EFA14FA1793031ECB6B0
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32302e302f32342d3234203d3e20313336373932.roa
Signing time:             Fri 02 Aug 2024 11:24:33 +0000
ROA not before:           Fri 02 Aug 2024 11:19:33 +0000
ROA not after:            Fri 01 Aug 2025 11:24:33 +0000
asID:                     136792
IP address blocks:        103.96.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 03:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:73:ad:09:f5:77:e7:97:3f:a9:ef:a1:4f:a1:79:30:31:ec:b6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Aug  2 11:19:33 2024 GMT
            Not After : Aug  1 11:24:33 2025 GMT
        Subject: CN=64BC488EEF5DFC34E94DBC6A71E76C69BE0D52DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3c:59:19:06:78:c1:cf:cc:56:06:ce:eb:2b:
                    49:7e:03:49:ec:47:85:d5:3a:00:11:69:44:e3:d4:
                    6c:32:21:0a:b8:78:f7:da:d2:56:8f:b3:98:ec:f5:
                    9f:80:4c:aa:b1:71:d4:a1:2d:9c:f0:db:2b:e9:43:
                    75:8f:9a:4d:e9:c8:11:21:d7:b0:f1:ac:d3:0c:39:
                    5f:15:21:8e:88:93:dd:40:b6:60:61:a2:a2:2b:a5:
                    3e:5c:98:82:88:28:a5:7a:b0:bd:02:0f:bc:88:2d:
                    97:fb:14:08:b4:12:92:fd:da:8c:2e:68:c7:42:03:
                    e9:28:a0:3f:d5:f6:dd:4c:eb:bf:14:67:eb:81:53:
                    37:d2:97:f3:e1:12:08:c0:2f:ed:82:18:5b:2f:4a:
                    97:35:e1:33:0e:86:76:43:e6:19:f8:6a:fc:2c:19:
                    f7:77:66:30:30:9e:10:ac:3c:75:ad:48:9b:37:dd:
                    22:0c:a0:42:57:8b:40:32:c6:89:0c:e7:6a:e9:aa:
                    2c:5e:cb:e9:20:09:86:e1:de:6b:91:7e:ea:52:d2:
                    f1:1c:50:e1:8f:fa:bb:c9:39:23:e1:3c:2c:8f:18:
                    4c:6c:c7:4a:d1:e7:0d:6e:0e:4a:05:98:2d:ff:69:
                    26:e9:05:3b:7d:53:3c:69:78:28:9d:a5:20:1b:dc:
                    08:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BC:48:8E:EF:5D:FC:34:E9:4D:BC:6A:71:E7:6C:69:BE:0D:52:DF
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32302e302f32342d3234203d3e20313336373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:31:75:18:cf:fd:cc:e9:67:7b:8d:9e:d7:19:72:42:7f:b1:
         c6:e3:98:3d:28:75:5b:02:89:b1:ee:0c:d0:1e:3e:09:b5:9a:
         20:f5:f2:e9:fe:da:94:78:a6:77:8b:ef:ff:83:9d:ea:4f:68:
         fa:e3:ae:b8:7c:c6:e5:3d:5d:e2:fc:22:5b:47:56:01:d5:f5:
         da:32:99:60:4b:f3:50:3e:67:92:a1:70:b2:36:e9:68:95:2c:
         b6:75:c8:85:80:db:8e:74:08:9d:b3:7d:ed:ab:9f:16:f8:1e:
         81:ab:3c:ae:4e:df:82:93:6f:83:a2:ca:17:72:db:58:26:64:
         06:dd:d4:22:4a:1f:24:56:f5:bb:86:d7:c3:28:c2:ad:a9:1a:
         67:e0:c3:f8:e7:79:4f:94:f7:b1:dc:bb:50:08:5a:2b:25:92:
         b5:db:fd:f2:8e:4b:ec:75:60:d1:9c:92:dc:1b:a6:1f:5a:67:
         77:f2:c4:cd:3f:34:40:32:d4:d6:cc:bd:7a:e1:0a:ad:11:1b:
         15:d8:5f:e7:69:94:90:7b:8b:f7:ab:c8:31:b8:4c:d2:88:ad:
         16:1a:2b:3d:21:47:7a:9f:05:89:c3:88:18:cc:8a:4f:c4:48:
         b9:b0:7c:6d:a2:be:98:a4:1f:d5:9f:3f:0c:e7:ee:7a:c2:cc:
         22:ec:25:01
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgIUd3OtCfV355c/qe+hT6F5MDHstrAwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxOTJBOTgwMDAwMTEwLwYDVQQFEyg5ODlEMzJENUI2
MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyMB4XDTI0MDgwMjExMTkzM1oX
DTI1MDgwMTExMjQzM1owMzExMC8GA1UEAxMoNjRCQzQ4OEVFRjVERkMzNEU5NERC
QzZBNzFFNzZDNjlCRTBENTJERjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL88WRkGeMHPzFYGzusrSX4DSexHhdU6ABFpROPUbDIhCrh499rSVo+zmOz1
n4BMqrFx1KEtnPDbK+lDdY+aTenIESHXsPGs0ww5XxUhjoiT3UC2YGGioiulPlyY
gogopXqwvQIPvIgtl/sUCLQSkv3ajC5ox0ID6SigP9X23UzrvxRn64FTN9KX8+ES
CMAv7YIYWy9KlzXhMw6GdkPmGfhq/CwZ93dmMDCeEKw8da1ImzfdIgygQleLQDLG
iQznaumqLF7L6SAJhuHea5F+6lLS8RxQ4Y/6u8k5I+E8LI8YTGzHStHnDW4OSgWY
Lf9pJukFO31TPGl4KJ2lIBvcCJkCAwEAAaOCAhEwggINMB0GA1UdDgQWBBRkvEiO
7138NOlNvGpx52xpvg1S3zAfBgNVHSMEGDAWgBSYnTLVtirJOJKGwXylB4vQBm8e
EjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE5MkE5ODAwMDAvMC85ODlEMzJE
NUI2MkFDOTM4OTI4NkMxN0NBNTA3OEJEMDA2NkYxRTEyLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9tSjB5MWJZcXlU
aVNoc0Y4cFFlTDBBWnZIaEkuY2VyMIGLBggrBgEFBQcBCwR/MH0wewYIKwYBBQUH
MAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRvcnkvQTkxOTJB
OTgwMDAwLzAvMzEzMDMzMmUzOTM2MmUzMjMwMmUzMDJmMzIzNDJkMzIzNDIwM2Qz
ZTIwMzEzMzM2MzczOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2AUMA0GCSqGSIb3DQEBCwUAA4IB
AQDNMXUYz/3M6Wd7jZ7XGXJCf7HG45g9KHVbAomx7gzQHj4JtZog9fLp/tqUeKZ3
i+//g53qT2j64664fMblPV3i/CJbR1YB1fXaMplgS/NQPmeSoXCyNulolSy2dciF
gNuOdAids33tq58W+B6BqzyuTt+Ck2+DosoXcttYJmQG3dQiSh8kVvW7htfDKMKt
qRpn4MP453lPlPex3LtQCForJZK12/3yjkvsdWDRnJLcG6YfWmd38sTNPzRAMtTW
zL164QqtERsV2F/naZSQe4v3q8gxuEzSiK0WGis9IUd6nwWJw4gYzIpPxEi5sHxt
or6YpB/Vnz8M5+56wswi7CUB
-----END CERTIFICATE-----
Generated at Tue Nov 26 05:18:39 2024 by rpki-client on console-fra.rpki-client.org