Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32312e302f32342d3234203d3e20313336373932.roa
File:                     3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (raw, json)
Hash identifier:          niWZqVlthYTcU7CfrAYH3CrLBO3uGIcVzLYe1SwnHJg=
Subject key identifier:   5B:03:B1:3F:FE:90:3D:B0:EB:E1:AE:E5:FD:EC:F3:0D:44:DD:2B:84
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       7AD67D8BCA6EC359812AC4FC61D37A9BBA525F51
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32312e302f32342d3234203d3e20313336373932.roa
Signing time:             Fri 01 Sep 2023 11:14:35 +0000
ROA not before:           Fri 01 Sep 2023 11:09:35 +0000
ROA not after:            Fri 30 Aug 2024 11:14:35 +0000
asID:                     136792
IP address blocks:        103.96.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 May 2024 01:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d6:7d:8b:ca:6e:c3:59:81:2a:c4:fc:61:d3:7a:9b:ba:52:5f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Sep  1 11:09:35 2023 GMT
            Not After : Aug 30 11:14:35 2024 GMT
        Subject: CN=5B03B13FFE903DB0EBE1AEE5FDECF30D44DD2B84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:70:3b:7b:80:98:5c:a1:9d:c8:20:de:b0:97:
                    d3:39:73:76:6d:64:d0:af:96:e8:05:a3:31:a8:d1:
                    0e:dc:f3:9d:90:0b:13:55:c1:ec:71:23:20:a1:00:
                    f0:e7:ea:78:15:91:48:1f:cf:ad:0e:3a:24:68:64:
                    bc:16:8a:96:bd:d6:d0:83:5a:41:6c:55:17:9d:23:
                    e6:93:2e:a7:15:17:ea:5c:15:78:75:5e:13:61:69:
                    ca:ed:00:53:db:34:56:b7:4d:38:94:0c:a2:35:ed:
                    cb:a2:46:0d:39:70:73:41:8f:1c:48:7e:38:e6:c2:
                    f6:bc:a6:68:d9:b6:f7:4e:1a:2f:2a:e4:a7:3e:f1:
                    91:0f:b1:66:68:41:ed:51:2a:30:98:f3:5a:d5:97:
                    96:f6:b3:2b:f6:b6:4e:38:cb:5d:5b:90:0f:c1:c1:
                    a2:66:8e:7e:8f:df:d6:e4:4d:83:c0:13:cb:0f:1c:
                    f7:86:22:91:1b:01:ca:3e:14:07:63:27:ec:26:da:
                    f4:05:bb:d1:a2:3d:6a:c2:ac:f6:e1:ad:12:62:78:
                    d5:c9:1f:1c:ac:05:ee:81:89:2c:5f:b6:0c:db:73:
                    61:d6:ad:45:71:21:e9:63:27:8c:ea:61:f7:a0:13:
                    b6:8a:ee:98:38:3e:c2:fc:3e:17:47:7a:56:ae:c0:
                    a0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:03:B1:3F:FE:90:3D:B0:EB:E1:AE:E5:FD:EC:F3:0D:44:DD:2B:84
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32312e302f32342d3234203d3e20313336373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:dd:5b:af:dd:4c:96:7b:b3:b9:24:8e:91:d0:42:e2:59:28:
         93:57:9f:de:2b:4a:36:e2:74:74:de:31:c1:11:df:ab:c6:42:
         c7:89:a0:cb:53:75:59:da:34:cf:31:39:5f:c9:d2:48:8e:e0:
         b9:f5:af:07:47:48:8c:a2:b3:00:0a:80:07:7f:a0:80:59:74:
         f9:1c:8b:12:38:3a:52:c1:9e:aa:15:9a:73:67:33:88:90:f2:
         a4:74:84:25:11:00:09:af:0f:30:b0:4d:68:ac:1e:96:20:cf:
         e9:b8:3f:5d:e4:f7:9f:09:79:d3:bd:1e:97:e1:17:e0:05:4e:
         cf:f0:89:a2:e5:ff:d3:58:a4:cd:66:02:4a:e7:e7:04:20:44:
         44:d9:16:8e:e3:af:a9:5f:97:f1:31:60:0a:ac:ff:4c:06:8d:
         68:d3:b1:ac:b7:ea:92:4d:25:fc:3a:35:24:62:39:db:89:f1:
         0f:ef:0b:56:9e:2e:a6:7a:ea:90:5d:ff:5a:66:f4:b1:52:ea:
         4a:fc:57:af:60:cb:e3:30:0e:77:34:2b:b5:a8:a2:66:ad:28:
         7e:90:e2:50:97:e0:95:c3:71:71:bf:02:21:4a:9d:a8:07:e3:
         73:25:21:e0:1f:97:d9:c9:9a:c3:a7:b3:18:6a:6e:9f:8d:ea:
         7a:6e:d1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 02:18:51 2024 by rpki-client on console-fra.rpki-client.org