Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa
File:                     323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier:          frkJKiCyXYl0O7kTf2GxQ+LkYroq4yDuBKlHPztet/M=
Subject key identifier:   28:FA:39:18:98:D8:85:96:CD:F0:78:13:10:F1:3F:73:D2:6A:A4:1F
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       784E50361814867951747BC5C79E86753F849434
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa
Signing time:             Thu 17 Aug 2023 09:25:46 +0000
ROA not before:           Thu 17 Aug 2023 09:20:46 +0000
ROA not after:            Thu 15 Aug 2024 09:25:46 +0000
asID:                     16509
IP address blocks:        2401:73c0:4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 18:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:4e:50:36:18:14:86:79:51:74:7b:c5:c7:9e:86:75:3f:84:94:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Aug 17 09:20:46 2023 GMT
            Not After : Aug 15 09:25:46 2024 GMT
        Subject: CN=28FA391898D88596CDF0781310F13F73D26AA41F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a5:ac:97:6e:bd:fe:db:12:4d:8f:28:fc:15:
                    49:f4:c7:38:98:a5:ad:71:5e:31:2a:e7:54:fe:d8:
                    de:a6:51:db:2f:33:1d:cf:c6:3c:55:06:65:6e:e7:
                    64:ab:f2:2c:45:8b:87:00:59:5a:9e:01:ea:2f:33:
                    dd:2c:bd:e9:96:3a:b2:6f:30:4a:3c:f1:c8:21:95:
                    ac:70:8c:10:60:aa:73:60:c7:9b:15:51:58:62:f4:
                    8e:4f:96:35:d8:c1:37:ae:16:e7:d0:f9:a4:da:c4:
                    aa:43:30:5d:0b:e5:83:c6:5d:50:d5:d3:77:9d:d0:
                    5c:8d:d2:2e:63:b5:5a:03:9e:49:68:11:72:d1:f0:
                    0d:39:bf:1c:c7:28:62:1a:c7:27:52:17:5f:0c:e1:
                    38:4e:f5:1a:60:b9:f5:49:67:71:66:2d:02:cb:5b:
                    75:f0:ec:d7:d1:8c:74:87:d3:1d:8d:39:e9:ed:ac:
                    8d:57:43:02:f6:b8:16:90:d4:c9:0e:ca:36:3e:e8:
                    b6:dc:26:1d:f2:8f:0f:33:52:9e:fe:af:03:27:e0:
                    24:e6:34:14:63:16:2c:65:f7:ad:32:b0:61:15:bc:
                    14:a5:2b:6d:7d:88:66:b3:c4:27:1d:23:02:24:23:
                    67:9d:3e:94:4b:47:36:21:82:8c:66:b0:11:2c:1c:
                    bf:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FA:39:18:98:D8:85:96:CD:F0:78:13:10:F1:3F:73:D2:6A:A4:1F
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a343a3a2f34382d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:73c0:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:b3:d0:cc:25:f6:20:bd:f5:95:67:53:78:cc:64:2b:93:d8:
         7b:cc:19:1c:bc:d4:40:b0:f7:e0:3b:19:64:6f:62:72:e8:53:
         53:c3:ed:83:1b:95:f3:98:79:97:4b:7f:d7:90:a5:f7:82:51:
         c2:49:41:3f:e7:65:8e:ae:63:c8:16:f0:c1:03:9a:12:94:92:
         b3:14:dd:52:68:ff:33:36:e0:4e:9c:1d:ed:e2:42:2d:f4:af:
         ae:ab:5c:99:67:dd:fe:7e:e3:40:25:04:72:aa:08:d5:e1:7e:
         5a:2e:7f:e8:9f:e5:d8:87:7f:14:93:ff:6c:da:0d:0c:36:12:
         70:65:b3:50:28:5b:90:52:61:f4:dd:bf:45:94:97:e4:72:d4:
         24:9c:90:83:83:36:16:4d:53:12:39:16:63:2b:08:32:65:e1:
         cd:5d:23:e5:8f:d7:24:71:f5:c7:e2:2c:45:43:37:bb:49:6c:
         9f:82:72:6c:33:19:18:d1:a1:5a:04:7e:4d:54:53:53:a3:82:
         63:e2:0e:4d:51:b3:fb:ad:bc:17:f8:31:07:69:32:81:5c:35:
         c7:4d:0d:25:3b:68:7c:f4:d3:80:38:c2:63:9f:83:d0:b7:22:
         fc:ba:c1:fa:99:31:82:e3:b2:8b:e0:16:0b:b3:3c:ba:6c:47:
         96:e8:75:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:05:46 2024 by rpki-client on console-fra.rpki-client.org