Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa
File:                     323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (raw, json)
Hash identifier:          3O8RmvpKNDuovdCulkRSAzWomSmmsM0jR5uwbm4hKYY=
Subject key identifier:   AD:7C:21:FC:38:B7:08:CD:A6:24:60:42:1B:8C:E6:45:C9:5B:9F:C0
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       2B42AAA13753FF69663073896E55A4DFA8603D55
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa
Signing time:             Thu 17 Aug 2023 09:25:35 +0000
ROA not before:           Thu 17 Aug 2023 09:20:35 +0000
ROA not after:            Thu 15 Aug 2024 09:25:35 +0000
asID:                     136792
IP address blocks:        2401:73c0:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 19 May 2024 15:38:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:42:aa:a1:37:53:ff:69:66:30:73:89:6e:55:a4:df:a8:60:3d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Aug 17 09:20:35 2023 GMT
            Not After : Aug 15 09:25:35 2024 GMT
        Subject: CN=AD7C21FC38B708CDA62460421B8CE645C95B9FC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6a:59:79:af:07:65:21:3f:8e:b0:a7:d7:bd:
                    89:df:ab:1f:67:be:16:5a:8e:37:87:3b:b1:27:1d:
                    79:70:a8:29:49:b4:40:3e:0e:d8:8c:f5:39:18:57:
                    3e:f2:5f:af:db:c5:23:f2:bf:c7:0e:7c:8b:3d:d1:
                    ea:f7:e7:e3:be:3f:2a:0f:8d:10:f4:52:9e:04:1d:
                    55:4c:fe:f9:9a:32:39:72:f0:b5:4e:94:f3:6b:47:
                    e1:b7:c1:5b:39:32:e2:2f:17:cc:65:c2:74:7a:9e:
                    f6:20:61:6d:76:8d:12:79:06:93:af:60:05:dd:a3:
                    82:c2:39:f7:fc:2b:3f:4a:62:b0:87:13:ee:e9:31:
                    d9:f5:3b:df:04:b9:78:af:eb:cc:66:af:c1:03:26:
                    80:3e:39:64:eb:cc:fb:28:a1:27:61:48:b9:da:41:
                    e5:b1:4d:6d:44:fa:67:c9:2a:f3:9c:13:e2:79:7f:
                    1e:82:0b:ff:e4:66:47:da:ff:63:1e:6d:95:3b:04:
                    b0:ef:76:d7:d7:10:cd:6d:97:85:c9:ed:48:54:90:
                    41:42:b6:43:be:55:61:51:6c:80:fb:8d:48:18:17:
                    9b:be:12:c8:8d:f5:fa:8c:f6:3a:9b:88:35:66:a6:
                    d7:44:f0:32:cb:51:78:78:c9:9c:77:85:72:dc:64:
                    fd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7C:21:FC:38:B7:08:CD:A6:24:60:42:1B:8C:E6:45:C9:5B:9F:C0
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:73c0:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:5e:88:6e:b6:51:60:b7:a4:79:ef:6e:c6:4c:bd:50:6b:14:
         7e:d4:79:cf:60:4c:c0:fd:3e:5c:eb:a9:af:f4:04:3f:06:64:
         06:15:cf:26:ef:87:98:66:8a:11:e8:f0:b3:46:ef:27:89:c5:
         4a:6a:b5:e1:30:75:1e:09:88:23:b1:c3:46:c2:6f:4b:bb:cc:
         51:74:34:f2:42:e0:45:37:a8:b1:b2:dd:fd:cb:6f:c7:87:36:
         84:33:b5:03:84:86:4e:3a:21:82:cb:0b:94:73:c9:5d:b6:aa:
         16:a1:37:08:39:20:f5:c4:ae:a9:f4:76:34:60:3c:27:e5:d6:
         68:d1:e8:17:f8:e9:38:d5:85:4a:e2:c2:1a:62:82:28:20:29:
         2a:de:3e:14:f0:4b:b1:d8:d0:65:01:d7:36:83:1e:a0:af:25:
         88:01:0e:54:78:63:9e:c3:f2:66:68:37:b8:fb:6d:62:d4:26:
         d3:2c:f6:12:5a:03:bb:9d:58:ec:dd:38:f8:91:e1:5a:bd:ee:
         5b:61:d0:60:02:5f:c5:96:58:8b:25:83:e9:44:84:e0:30:12:
         67:86:aa:ca:9e:42:00:c5:f7:31:ef:45:0c:f7:ed:f3:11:3d:
         ac:31:7f:91:d3:bb:d2:cc:ed:e6:75:d5:77:21:71:34:ff:8c:
         c5:9a:1a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 16:25:25 2024 by rpki-client on console-ams.rpki-client.org