Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32312e302f32342d3234203d3e20313336373932.roa
File:                     3130332e39362e32312e302f32342d3234203d3e20313336373932.roa (raw, json)
Hash identifier:          EILeVm2wqjdcdAxUUWHvxGy4DxMGxeBIJfbsJHdbTE4=
Subject key identifier:   43:6F:6A:F6:92:C2:4B:41:16:75:B4:00:AF:55:98:8F:FA:65:EE:7C
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       2B96B156896DCADFE65C27E7D6F26E78A576EE51
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32312e302f32342d3234203d3e20313336373932.roa
Signing time:             Fri 02 Aug 2024 11:24:33 +0000
ROA not before:           Fri 02 Aug 2024 11:19:33 +0000
ROA not after:            Fri 01 Aug 2025 11:24:33 +0000
asID:                     136792
IP address blocks:        103.96.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 08:54:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:96:b1:56:89:6d:ca:df:e6:5c:27:e7:d6:f2:6e:78:a5:76:ee:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Aug  2 11:19:33 2024 GMT
            Not After : Aug  1 11:24:33 2025 GMT
        Subject: CN=436F6AF692C24B411675B400AF55988FFA65EE7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:45:3d:7b:58:d6:7b:0c:12:c4:28:e9:d5:55:
                    7b:1a:5a:d5:b7:32:95:09:75:ba:e6:b4:c6:93:4f:
                    13:d9:c5:95:04:ac:c2:d3:5e:75:4b:18:42:26:26:
                    da:bb:54:5e:f9:2b:f1:ae:77:25:95:02:97:1d:05:
                    50:e9:e6:55:01:8a:66:53:bf:51:55:ea:09:a4:82:
                    73:58:25:20:e6:89:07:56:13:ab:8c:d7:cd:e6:f3:
                    9d:df:97:be:9a:4b:31:fd:30:d7:3f:67:5e:97:c2:
                    b0:92:a2:55:de:ec:05:1b:b0:d9:cd:fc:73:83:68:
                    50:37:32:7f:f7:73:17:49:dd:fb:47:89:a6:79:09:
                    59:32:5b:dc:7e:32:cd:c9:e4:91:5b:dc:fc:c1:ba:
                    e1:9f:11:a1:cc:36:ed:34:4e:d6:7e:8a:83:63:ed:
                    ff:f0:e1:87:5b:c9:9d:82:f2:0b:66:f5:be:ba:a3:
                    5b:32:7c:8f:a6:37:a5:3c:cd:cb:32:48:82:eb:f3:
                    b5:79:cc:8b:b3:e2:99:1b:79:62:36:fd:12:ff:6e:
                    0d:79:b9:69:b5:d4:b3:50:c0:39:54:61:82:17:13:
                    af:bf:87:98:bf:db:f3:ab:cf:33:54:9c:3c:59:3c:
                    d2:82:a0:77:24:27:88:3f:e7:07:99:b4:2a:b2:b2:
                    a9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6F:6A:F6:92:C2:4B:41:16:75:B4:00:AF:55:98:8F:FA:65:EE:7C
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32312e302f32342d3234203d3e20313336373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d3:56:b4:f3:6d:50:8a:c6:bb:b0:b3:3b:80:6d:17:59:80:1b:
         01:2d:5c:66:75:79:37:d2:3f:f3:bd:dd:77:bf:78:b6:57:b8:
         75:95:b0:66:0e:da:52:e6:f3:80:24:57:f7:e5:08:d1:c9:09:
         41:14:3c:1d:b0:33:3e:88:90:3c:84:16:d0:21:df:0c:d5:bd:
         27:d1:66:12:c5:85:ea:23:b0:4f:f1:a2:ae:b3:5b:c6:fb:bf:
         73:be:b5:e8:bc:19:d1:b9:c3:9a:ed:bd:da:ce:c8:b9:57:8c:
         c6:34:70:9f:02:7e:10:49:bc:c3:4a:b6:5d:99:04:19:48:7f:
         b2:02:7e:f4:5c:00:f3:5b:85:3c:43:84:b9:c9:fc:69:c4:2f:
         35:7e:f6:70:f3:82:06:86:6b:37:33:29:eb:99:39:c3:db:24:
         fb:45:3e:0f:9d:02:43:81:b3:b4:d7:c6:51:7a:2a:ab:d2:71:
         f8:c8:ae:f6:41:1e:35:4a:20:8c:19:75:c1:f2:96:5b:49:6d:
         a0:bf:a3:ca:49:20:5c:1c:c9:64:db:6c:36:71:e8:00:9a:15:
         25:ad:2b:37:b4:c7:10:78:bf:3b:c2:3d:ee:f3:78:3c:ee:b6:
         d4:f2:db:7f:ea:5b:97:ef:cf:01:20:8b:82:a2:25:9b:85:86:
         0b:4d:10:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org