Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32332e302f32342d3234203d3e20313336373932.roa
File:                     3130332e39362e32332e302f32342d3234203d3e20313336373932.roa (raw, json)
Hash identifier:          U0n2ppmOv5X9DgR0q0q7abU874/vqRpNAUuDbc7CaBs=
Subject key identifier:   0C:B0:C5:85:70:7D:F0:78:12:B4:F3:4B:FC:B8:FF:99:2A:AD:59:45
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       14A04DAB2ADEBB5C1869E9EF5DC53672BB7FE03B
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32332e302f32342d3234203d3e20313336373932.roa
Signing time:             Fri 01 Sep 2023 11:14:34 +0000
ROA not before:           Fri 01 Sep 2023 11:09:34 +0000
ROA not after:            Fri 30 Aug 2024 11:14:34 +0000
asID:                     136792
IP address blocks:        103.96.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 May 2024 15:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:a0:4d:ab:2a:de:bb:5c:18:69:e9:ef:5d:c5:36:72:bb:7f:e0:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Sep  1 11:09:34 2023 GMT
            Not After : Aug 30 11:14:34 2024 GMT
        Subject: CN=0CB0C585707DF07812B4F34BFCB8FF992AAD5945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e6:9f:f0:64:8c:01:96:9e:68:e9:3f:dc:b0:
                    84:b3:54:f1:11:d9:fb:78:99:23:fc:f6:9f:1e:44:
                    10:6e:c4:47:11:39:1d:0f:2d:20:11:ce:13:60:34:
                    3c:9f:24:de:67:a9:6d:4a:eb:5d:ee:54:a1:6a:63:
                    46:8c:fb:91:de:fa:01:3c:62:b1:d2:d8:6c:b4:3c:
                    e5:ad:00:c0:95:cb:a9:89:d9:45:ea:2e:7a:e8:1b:
                    6a:d5:8a:6d:65:1a:6f:a1:43:94:ea:62:25:5a:e4:
                    13:fb:9a:d1:9f:5d:ae:c4:da:ed:fc:ec:2b:6b:96:
                    20:a9:7c:db:78:67:f7:66:ff:cd:95:50:f3:1c:d8:
                    d4:64:92:5f:2f:52:a2:67:19:13:e5:fc:c9:f7:1f:
                    7e:f6:d1:6c:0e:ef:e2:0a:1b:87:47:5f:e5:83:bc:
                    c4:8e:30:7f:4d:b5:92:97:57:2d:0d:c9:cd:6c:08:
                    ce:cd:e9:0c:08:ad:e8:c7:c7:9d:7a:97:1c:6e:fe:
                    1f:da:4c:d0:d3:71:35:f8:a5:62:44:8a:10:d0:9c:
                    0a:5b:75:95:02:99:19:eb:24:52:e0:d7:f6:39:a8:
                    b3:70:ae:07:56:4f:c9:e2:f3:03:9d:9f:55:70:65:
                    5c:fd:f8:04:1d:15:63:88:af:4d:98:0f:c2:04:15:
                    41:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B0:C5:85:70:7D:F0:78:12:B4:F3:4B:FC:B8:FF:99:2A:AD:59:45
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/3130332e39362e32332e302f32342d3234203d3e20313336373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:15:93:a9:fe:92:ba:31:0e:7c:8b:27:26:9a:21:af:ac:6a:
         13:b3:8f:4d:7d:de:16:03:08:04:9b:7c:10:bb:c1:61:66:d8:
         6c:24:07:f9:c7:17:7c:8d:96:6f:a8:3d:f6:13:63:64:3f:a3:
         35:e2:e7:03:f4:43:f1:3e:3b:36:32:21:59:4b:96:af:35:5d:
         51:c8:cf:13:2b:e1:0a:f6:47:63:75:90:6b:c1:89:0a:9b:8e:
         a5:71:3d:b5:50:5e:d9:2d:82:51:8f:d1:39:0d:9a:55:46:5c:
         ba:85:d5:a7:1c:0e:59:86:0d:69:ba:f2:2a:f9:8f:50:9f:e2:
         53:50:bd:cd:da:a0:db:99:10:c2:e2:a1:2b:d8:75:ab:da:e8:
         9f:7a:07:89:4c:59:ec:61:5a:df:68:75:62:99:0d:dd:69:e8:
         5e:a0:63:13:31:2c:bf:c8:f2:9d:7e:6e:72:f1:68:38:54:83:
         4e:80:f8:31:2b:1f:4c:9a:9b:69:df:ec:b2:0a:44:e8:e7:c5:
         4a:c6:cf:23:48:fb:11:55:db:6b:29:85:40:9b:c0:aa:92:b5:
         6d:4c:a4:a7:e0:95:c5:2a:9b:fe:9a:2a:84:f1:65:24:b4:ba:
         d4:fe:39:cf:af:e9:e8:d1:f6:87:0a:0f:bb:56:4d:0f:83:70:
         3a:37:38:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:25:25 2024 by rpki-client on console-ams.rpki-client.org