Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa
File:                     323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa (raw, json)
Hash identifier:          9b7VFtbzcnnUx2J6rArFgrGPOOdWZcbJYsCzShwO+BA=
Subject key identifier:   8A:28:58:E9:25:13:C3:2A:BC:B3:C1:B0:EC:F0:2A:E1:9D:2E:8A:D0
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       47CD87BAE0EB9C6016E6F65FEB1947D249CADD73
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa
Signing time:             Fri 02 Aug 2024 11:24:33 +0000
ROA not before:           Fri 02 Aug 2024 11:19:33 +0000
ROA not after:            Fri 01 Aug 2025 11:24:33 +0000
asID:                     136792
IP address blocks:        2401:73c0:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 08:54:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:cd:87:ba:e0:eb:9c:60:16:e6:f6:5f:eb:19:47:d2:49:ca:dd:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Aug  2 11:19:33 2024 GMT
            Not After : Aug  1 11:24:33 2025 GMT
        Subject: CN=8A2858E92513C32ABCB3C1B0ECF02AE19D2E8AD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:50:98:8b:71:2b:58:a0:c4:d8:4c:4a:15:8c:
                    20:36:18:7c:1b:63:b9:5e:4c:01:ac:d0:66:ad:a0:
                    45:8b:a3:69:c7:cb:3e:10:42:d5:86:c2:71:79:be:
                    5f:2f:5b:08:5b:5b:77:ac:ee:f5:73:01:0a:34:34:
                    e4:b0:2e:53:7b:ff:d6:f2:43:f9:94:83:ac:c1:94:
                    0e:e1:34:47:38:4c:fa:55:00:55:e8:1f:aa:57:24:
                    c9:10:f4:3f:b7:83:72:69:24:3f:5b:92:20:46:3c:
                    35:f3:bb:ee:c0:93:f1:a0:bc:7e:1b:04:e2:1d:a5:
                    f9:55:b2:d0:39:eb:bc:13:30:64:e8:6c:27:57:8b:
                    ae:e3:8e:4f:89:33:13:44:c1:76:44:da:72:3b:51:
                    12:7b:5d:13:1e:54:33:ad:d9:4d:90:84:6e:cd:ff:
                    06:d7:00:16:90:09:f5:c7:aa:ec:1b:8e:df:1a:c6:
                    6c:a7:9d:a2:02:d7:5d:2b:59:8b:e4:50:17:e9:f1:
                    51:53:30:7f:7a:68:23:7f:2b:7b:94:f5:5f:b1:61:
                    7a:b5:21:0b:b9:ec:be:b0:87:31:13:ac:61:4f:42:
                    44:10:21:1f:00:77:96:4e:9d:47:d6:9f:ba:91:17:
                    8f:0f:80:50:c4:ec:c3:ec:6f:66:17:af:c5:15:67:
                    01:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:28:58:E9:25:13:C3:2A:BC:B3:C1:B0:EC:F0:2A:E1:9D:2E:8A:D0
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a313a3a2f34382d3438203d3e20313336373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:73c0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:fe:63:41:3f:ec:b4:f9:f6:16:0b:67:b5:90:e5:59:ec:b4:
         a9:3d:c9:38:c7:63:24:ea:95:a8:6d:6d:8a:63:41:92:88:01:
         60:2f:d1:f7:55:f6:d5:c8:3a:9f:20:10:38:55:2b:a8:8d:89:
         ac:08:0f:51:7a:8d:8c:b5:92:5e:7f:d6:66:c4:ce:e1:7b:d2:
         21:2b:f3:84:04:c5:cb:3f:05:68:c4:c4:4f:57:d0:bf:00:ba:
         07:37:ba:fd:5d:77:e1:35:43:b6:48:59:3c:09:1d:ff:bf:cd:
         08:62:cb:b8:89:3a:10:3e:06:b4:ea:19:8f:0d:0d:59:74:3b:
         85:da:fd:81:97:a6:b4:fd:e0:23:1b:cb:f6:2b:47:3b:cb:00:
         61:76:93:56:72:12:6e:c1:86:f9:1e:b9:cd:e1:da:53:73:e2:
         40:df:97:df:1d:c2:fe:c7:2e:89:8e:8f:10:a3:f0:7c:e1:07:
         76:0f:de:14:55:2a:44:8f:51:e0:df:55:32:04:81:82:49:83:
         30:ec:e8:36:7f:20:32:f0:f0:0e:2f:07:65:55:42:a0:ac:57:
         b6:32:a4:c7:e5:99:7e:98:14:67:20:b3:08:aa:ac:d0:e0:c6:
         11:9e:52:34:20:57:3b:2f:8b:5d:0a:ed:0e:21:64:8a:1e:be:
         0f:67:52:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org