Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa
File:                     323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa (raw, json)
Hash identifier:          EpUsVOQyAsYw0HesoFdtkY5jTfWDz5cp/Z7rGqdyJlY=
Subject key identifier:   60:B9:D4:13:FC:A4:96:AC:63:EA:A1:31:0B:DC:96:0C:24:EB:C3:D9
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       7663231D7EFA821B207F714D29F31B0AFDF6FFB0
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa
Signing time:             Thu 18 Jul 2024 10:18:22 +0000
ROA not before:           Thu 18 Jul 2024 10:13:22 +0000
ROA not after:            Thu 17 Jul 2025 10:18:22 +0000
asID:                     136792
IP address blocks:        2401:73c0:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 08:54:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:63:23:1d:7e:fa:82:1b:20:7f:71:4d:29:f3:1b:0a:fd:f6:ff:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Jul 18 10:13:22 2024 GMT
            Not After : Jul 17 10:18:22 2025 GMT
        Subject: CN=60B9D413FCA496AC63EAA1310BDC960C24EBC3D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7a:a1:81:b5:03:d9:80:bb:11:2d:b2:74:24:
                    49:63:a2:fe:4d:70:04:d5:7a:d5:ec:8b:05:92:aa:
                    24:86:ce:b4:48:93:b6:cd:7a:59:07:52:d8:b9:a9:
                    96:5c:fa:be:36:24:69:3e:fb:42:9f:13:5b:96:46:
                    77:b0:da:1f:95:6c:b0:47:c8:5a:ac:2a:d9:dd:93:
                    63:fd:89:07:7c:25:8b:87:3d:0e:73:af:82:32:37:
                    cb:27:38:cb:6e:5f:7f:35:18:4a:bd:3f:af:f1:ca:
                    9b:f4:26:7e:63:be:33:78:1f:0f:17:8d:3a:30:cf:
                    eb:bc:9a:7f:ee:22:3f:fb:c1:87:0c:99:07:61:1f:
                    3d:4b:75:dd:13:df:30:8f:52:60:f8:f3:ee:f8:e0:
                    3e:6d:d5:25:85:f0:dc:72:2a:9c:e7:09:28:b2:9f:
                    77:0e:63:5a:78:69:40:6a:b8:31:b8:18:33:da:f6:
                    5b:67:e9:f1:63:81:6c:d4:59:05:6c:1c:1a:52:4d:
                    b0:1c:38:5c:14:6d:dd:7d:c2:7b:bc:e8:a5:5c:45:
                    8e:58:a3:b0:92:6a:60:b9:8b:52:64:1d:cd:f8:41:
                    80:90:06:c7:c5:c7:09:02:2a:93:e3:4f:46:60:d1:
                    f8:e1:fe:d2:f1:ab:6a:12:7e:16:2c:7a:60:22:d7:
                    ac:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B9:D4:13:FC:A4:96:AC:63:EA:A1:31:0B:DC:96:0C:24:EB:C3:D9
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a343a3a2f34382d3438203d3e20313336373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:73c0:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:1d:c8:92:a2:8e:25:2a:f2:4d:76:05:76:4f:58:f0:6c:53:
         6b:a3:c4:93:c4:9e:29:34:93:c9:89:37:5b:6f:9c:65:93:8e:
         3c:95:86:1c:dc:02:8d:5d:2d:8d:56:e0:5a:c5:18:23:2e:fc:
         8f:c2:8b:40:10:6c:e1:2b:b3:91:47:75:ce:10:59:e8:e2:9c:
         80:cd:31:d2:cf:1e:25:4f:fe:7a:e2:9a:17:e2:90:26:7c:ca:
         c2:17:a4:d5:ef:40:be:ca:b5:04:ed:c8:15:92:80:c5:a1:2f:
         b7:a8:23:83:d7:83:97:65:a3:a9:e4:b0:eb:0b:e0:60:22:fc:
         38:34:5d:7a:28:6c:7e:a5:53:83:6c:48:fe:9c:5d:ca:b8:ba:
         f0:00:1e:ee:9d:04:70:58:7b:c8:a7:52:e6:40:21:a0:ca:1c:
         8c:25:ab:a3:c0:d5:e5:bf:77:c3:20:eb:2d:d4:4a:78:0c:10:
         52:a5:c8:98:00:46:25:71:ea:c4:c2:ad:04:a6:e2:68:c7:e9:
         af:a9:75:4c:a4:b9:77:91:2d:f0:b0:86:91:f9:1d:be:d3:26:
         27:ba:d2:a9:40:35:26:87:ef:3c:f0:75:12:99:78:42:51:2d:
         e9:66:4b:71:68:88:ce:94:6d:bc:1d:b1:cb:51:8e:8e:05:39:
         f1:3f:6d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:28 2024 by rpki-client on console-ams.rpki-client.org