Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa
File:                     323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          hw7ZG+W2FJRDOP/YJmI89LenLugszceN0n5PpL3aqpM=
Subject key identifier:   B2:6E:85:D9:B8:7A:7A:69:18:44:33:8E:9D:06:60:84:89:45:5A:40
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       30F4BBB8EE92104D6DC95A9AD36AA5FA8140F2D9
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa
Signing time:             Thu 18 Jul 2024 10:18:22 +0000
ROA not before:           Thu 18 Jul 2024 10:13:22 +0000
ROA not after:            Thu 17 Jul 2025 10:18:22 +0000
asID:                     14618
IP address blocks:        2401:73c0:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Mar 2025 11:20:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f4:bb:b8:ee:92:10:4d:6d:c9:5a:9a:d3:6a:a5:fa:81:40:f2:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000
        Validity
            Not Before: Jul 18 10:13:22 2024 GMT
            Not After : Jul 17 10:18:22 2025 GMT
        Subject: CN=B26E85D9B87A7A691844338E9D06608489455A40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:92:e6:47:e4:14:b1:3f:0a:41:41:c8:18:b1:
                    6a:46:c8:ee:be:3a:18:c0:53:a6:f3:ef:d5:cb:94:
                    e4:85:89:9e:c7:dd:f1:fe:77:b1:98:4d:79:bf:e2:
                    94:a2:7c:17:7b:58:fe:fb:70:1a:52:59:2e:ea:b4:
                    8b:7c:78:80:bc:3b:78:35:7c:2d:8a:82:b6:05:64:
                    09:b4:c8:7c:22:3f:e9:b4:23:4b:ab:06:82:03:2c:
                    3a:ed:8a:51:5a:4d:dc:e6:7b:14:bb:3b:7e:a2:cd:
                    1c:68:b0:f1:8e:21:9a:06:6c:f5:b5:b0:3c:a2:82:
                    46:38:cb:59:1e:8d:3b:5f:23:cc:43:4b:19:39:3a:
                    56:28:2f:fc:9e:58:ca:13:b6:ce:9b:42:c2:e2:e0:
                    9e:bd:91:39:b8:31:1b:58:68:41:a8:b0:49:9a:1a:
                    65:0b:06:57:4c:12:cc:0c:25:69:c6:a2:b3:f8:69:
                    23:cf:6c:e0:ea:57:92:89:e5:cf:b4:ca:1b:da:39:
                    cf:50:94:ae:60:4c:09:c2:7d:cb:30:66:f1:b5:f7:
                    43:5f:77:c1:55:37:89:53:e6:6d:60:3c:ee:45:97:
                    8d:96:42:48:b3:ed:af:3d:b6:62:a3:d1:46:eb:43:
                    6f:77:13:46:eb:55:63:52:52:99:95:d8:c6:46:50:
                    c4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6E:85:D9:B8:7A:7A:69:18:44:33:8E:9D:06:60:84:89:45:5A:40
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:73c0:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:d9:35:de:2d:4d:8c:7c:f4:db:3b:d1:af:be:4d:22:62:b6:
         9d:39:ae:71:c8:55:2c:9a:db:3e:7c:dc:e3:8e:9f:bd:48:6e:
         97:26:9d:d6:bc:66:93:20:39:35:52:39:ee:ef:a5:79:47:72:
         af:aa:18:fd:5a:1e:f8:30:55:c3:cf:ed:18:a2:8c:29:97:c6:
         28:b1:56:2e:6f:45:91:4a:27:82:3f:e2:d7:4e:eb:7c:9e:71:
         05:e9:90:98:eb:c9:f7:55:b3:7f:1a:5f:5b:85:f6:39:d1:16:
         33:5f:19:48:74:ee:e9:13:88:c3:7e:1a:bf:8b:82:e6:84:da:
         a1:0b:dc:7f:11:cd:56:0c:d6:2f:96:14:4b:f1:13:05:f3:7a:
         7a:f5:20:fc:17:df:fb:ee:b1:e1:8a:53:e3:0d:d3:90:6e:59:
         7d:ae:f5:a0:2c:9c:e9:3e:d8:e3:cc:48:59:99:e4:45:06:dc:
         7e:2e:49:71:71:86:50:41:85:a2:ba:99:f6:1b:4d:5c:d6:ab:
         77:9a:c2:b8:d5:60:38:a2:77:08:99:e8:2b:00:33:88:8c:96:
         50:62:f1:a8:65:92:11:9d:a8:0d:b5:9c:30:42:68:18:e2:d2:
         8b:a6:8a:3a:7b:78:99:3a:1e:47:78:1c:3b:54:72:43:be:8a:
         d7:3e:b3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:29:06 2025 by rpki-client