Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa
File:                     323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          8qHvH7dtq74i47oKyRKQgg7EQpHJWlRUDrVKXbacbLM=
Subject key identifier:   FC:23:22:E3:47:9F:C4:0F:50:AD:AA:FD:8A:D3:6F:8E:24:DE:C6:FD
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       1BE59DBBC0A1725865CD925EC49097EB493F3E53
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa
Signing time:             Thu 17 Aug 2023 09:25:55 +0000
ROA not before:           Thu 17 Aug 2023 09:20:55 +0000
ROA not after:            Thu 15 Aug 2024 09:25:55 +0000
asID:                     14618
IP address blocks:        2401:73c0:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 22:49:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:e5:9d:bb:c0:a1:72:58:65:cd:92:5e:c4:90:97:eb:49:3f:3e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Aug 17 09:20:55 2023 GMT
            Not After : Aug 15 09:25:55 2024 GMT
        Subject: CN=FC2322E3479FC40F50ADAAFD8AD36F8E24DEC6FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b2:7f:e5:84:11:e4:a7:64:d7:27:47:7f:4d:
                    e8:bb:ca:d2:cf:0f:e7:51:ec:02:d8:26:6f:7c:73:
                    4e:e1:e4:2d:d2:1d:d7:2c:73:f2:13:cd:b7:c9:84:
                    79:04:03:e3:25:59:23:30:f4:34:10:be:c7:3b:c0:
                    4c:39:b1:2e:27:96:e2:4a:b7:10:ca:19:bf:24:f4:
                    83:f8:48:56:f6:1d:eb:f0:86:50:d7:d7:5a:ac:6e:
                    9f:c6:a2:d3:7d:e5:09:0e:3a:82:ea:39:3c:a1:d7:
                    44:83:3d:11:5c:62:99:c7:c7:28:39:9c:06:57:d5:
                    56:cb:5b:b5:3b:15:a3:e5:7d:00:8b:2b:4d:43:b1:
                    d5:59:7a:54:6f:15:a2:07:ed:1e:1e:4f:d7:bd:88:
                    aa:19:9f:67:61:65:85:34:6a:fc:58:91:cf:62:9e:
                    1c:9a:ba:02:93:07:0a:8a:72:35:12:f6:70:6e:2c:
                    dc:12:c7:e8:d6:99:fe:60:a3:2d:f4:00:03:6d:aa:
                    0c:b7:6b:73:8e:bf:8b:f1:03:46:a9:eb:99:0d:8a:
                    a2:16:78:64:d7:03:5f:93:54:22:33:9b:29:8d:e4:
                    9c:ac:dd:64:d4:a3:cb:a0:99:d7:44:76:80:e9:3b:
                    6c:78:19:64:f0:b7:ba:52:80:d5:3b:d2:47:e7:bd:
                    5d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:23:22:E3:47:9F:C4:0F:50:AD:AA:FD:8A:D3:6F:8E:24:DE:C6:FD
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a343a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:73c0:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:22:b6:54:78:0c:58:e0:7c:fe:ff:4f:98:73:1f:81:69:5e:
         3e:5a:76:fa:16:e1:5a:7a:0b:c5:61:cb:cb:29:fd:29:5c:08:
         66:72:ae:35:61:b9:63:bd:5d:f8:4c:c8:a5:9f:b7:df:6d:a7:
         28:6e:87:ab:a1:4c:d6:69:bf:68:21:76:26:34:cd:59:73:11:
         7a:44:8d:05:71:77:89:aa:06:74:f5:92:20:8d:46:80:6f:bd:
         94:51:77:0e:00:66:0f:92:9d:cd:49:7b:70:f3:aa:ae:59:b4:
         d8:0c:5e:bf:01:77:44:71:c5:3a:c4:27:20:f5:0e:8d:2a:20:
         2c:a5:19:68:b1:07:6a:08:0e:fa:d4:ef:99:9b:e6:4d:a1:66:
         ed:f2:cf:a5:4f:9e:c3:20:8d:9b:c3:50:78:bb:9a:f0:6a:bc:
         83:21:c8:3c:04:45:c1:74:63:21:30:77:43:f4:9a:2e:2a:ba:
         ae:91:6f:c9:d5:28:74:96:83:d5:11:60:f6:ce:1e:0c:b7:0b:
         31:a6:92:f8:a5:52:b3:b4:f2:70:df:a7:bc:f5:ea:09:3f:db:
         fb:c0:3a:29:5d:93:31:7d:a3:a4:4f:5b:89:96:15:d5:82:71:
         57:38:83:83:bc:3a:c3:58:18:66:e7:a5:1d:04:9c:21:7e:6e:
         ec:1e:28:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:21:40 2024 by rpki-client on console-fra.rpki-client.org