Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32322e302f32342d3234203d3e20313336373932.roa
File:                     3130332e39362e32322e302f32342d3234203d3e20313336373932.roa (raw, json)
Hash identifier:          IhaBjAH5AzMgzvRaQixC+njTbKcwrp3/F2CTwVuq0Jw=
Subject key identifier:   7C:32:9F:B8:B7:D9:4F:9A:EB:23:E0:61:A3:7A:23:F0:DA:77:12:1D
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       4C12AA1F16295660040B522CACAF91F59A90357F
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32322e302f32342d3234203d3e20313336373932.roa
Signing time:             Fri 02 Aug 2024 11:24:32 +0000
ROA not before:           Fri 02 Aug 2024 11:19:32 +0000
ROA not after:            Fri 01 Aug 2025 11:24:32 +0000
asID:                     136792
IP address blocks:        103.96.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 08:54:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:12:aa:1f:16:29:56:60:04:0b:52:2c:ac:af:91:f5:9a:90:35:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Aug  2 11:19:32 2024 GMT
            Not After : Aug  1 11:24:32 2025 GMT
        Subject: CN=7C329FB8B7D94F9AEB23E061A37A23F0DA77121D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c1:98:59:b0:53:a7:07:12:ff:98:2a:96:f9:
                    a8:95:55:80:e5:c5:09:19:cd:20:29:2b:1e:dc:58:
                    09:d6:30:34:2c:2c:53:a6:63:78:4c:48:dc:1b:07:
                    88:ce:4e:d7:7b:1e:61:1e:4b:63:e6:5c:e7:12:7c:
                    74:d5:d0:8c:7f:d9:72:67:50:e9:e9:5a:b1:40:ac:
                    c8:80:3a:45:98:26:e2:ce:0c:be:0f:3c:34:23:46:
                    7e:66:09:0b:67:ff:7a:8d:ca:3d:6e:1d:b0:66:13:
                    c6:5b:a0:7a:4c:ed:87:5b:c1:91:4f:32:da:5b:dc:
                    b2:06:ed:2c:f2:24:35:31:47:83:2e:33:35:a4:42:
                    ba:48:58:19:36:d3:16:83:d3:81:91:f8:6f:da:ab:
                    65:bd:52:0c:78:8c:9d:a3:23:c1:04:fb:08:60:03:
                    02:d4:4c:e6:2f:21:88:d0:0a:23:97:13:ae:7f:a1:
                    b0:06:1b:6f:e0:22:ef:fe:78:db:f5:79:63:42:55:
                    4a:5a:36:ab:a9:d2:81:27:0a:d2:6d:7c:23:59:44:
                    05:ea:cb:a0:f6:fe:e8:a5:7d:1c:4f:2f:86:24:3b:
                    97:ac:84:67:82:e1:dc:ec:f6:64:c2:39:86:72:b4:
                    af:04:39:58:9f:ba:fc:fb:94:f6:41:34:55:cb:d4:
                    6c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:32:9F:B8:B7:D9:4F:9A:EB:23:E0:61:A3:7A:23:F0:DA:77:12:1D
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32322e302f32342d3234203d3e20313336373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:21:7a:de:ef:cb:f0:98:dd:19:2a:cd:42:fc:a3:3d:fc:a0:
         8b:af:67:e8:75:0b:eb:dd:d5:43:82:ec:57:5b:80:d7:d3:b2:
         2e:75:06:06:d1:42:e1:89:6b:fe:eb:7b:c9:9d:9a:fe:0a:47:
         64:12:73:1f:f7:27:bb:f7:81:66:02:a5:30:8c:ea:b5:70:d4:
         36:b6:44:43:ce:b3:b5:d5:20:f9:f5:60:56:75:d8:98:a5:24:
         79:f3:1d:5b:68:00:4e:4b:69:ce:98:ac:9b:a1:11:0b:92:98:
         5f:0d:ff:1c:b5:30:63:fd:a0:df:65:3a:34:2a:52:94:d6:db:
         af:c6:61:01:31:f5:8d:3f:e3:40:00:da:f0:8c:03:90:70:a5:
         6c:0c:af:ae:74:cf:bf:86:ab:86:e6:88:16:dd:0a:1e:a7:4b:
         c2:9c:03:bc:7e:15:38:6e:cf:d0:ec:e5:78:5e:ab:40:d6:44:
         4b:83:0c:cf:ce:8d:08:33:f5:84:18:dc:a6:93:c0:66:55:82:
         08:73:73:17:72:73:bc:85:c4:d2:c3:69:f6:55:0d:07:fd:eb:
         2c:7e:7c:ae:c7:65:c7:ef:3a:cf:1c:ec:2f:3b:6c:ed:e5:ee:
         d0:ea:47:cf:99:07:5d:41:9f:4b:6e:a2:51:7c:56:fe:71:35:
         51:a3:bd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org