Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a3a2f33322d3332203d3e20313336373932.roa
File:                     323430313a373363303a3a2f33322d3332203d3e20313336373932.roa (raw, json)
Hash identifier:          hMoqRvtcHp5MAB1nMbAqi7DRxy2c4cpG5EiQHRdMR9U=
Subject key identifier:   13:55:4E:69:CA:94:C5:53:95:24:53:02:2B:F3:97:61:83:43:72:BD
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       0FD1C9925220336E608BCBA73B3263EDAE8FB076
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a3a2f33322d3332203d3e20313336373932.roa
Signing time:             Fri 02 Aug 2024 11:24:33 +0000
ROA not before:           Fri 02 Aug 2024 11:19:33 +0000
ROA not after:            Fri 01 Aug 2025 11:24:33 +0000
asID:                     136792
IP address blocks:        2401:73c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 08:54:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d1:c9:92:52:20:33:6e:60:8b:cb:a7:3b:32:63:ed:ae:8f:b0:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Aug  2 11:19:33 2024 GMT
            Not After : Aug  1 11:24:33 2025 GMT
        Subject: CN=13554E69CA94C553952453022BF39761834372BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6f:2f:31:4d:8a:12:15:b3:9d:d9:88:86:54:
                    fa:48:3c:dd:c3:9a:2a:a9:44:56:0b:38:c4:10:49:
                    bb:92:22:25:00:5f:dd:3e:5e:97:02:24:28:cd:ad:
                    30:2c:8e:25:37:7b:ea:99:fa:54:c7:35:a0:e3:74:
                    b7:65:04:b4:4a:d6:36:da:6a:0a:e3:13:a0:6f:c0:
                    2b:b7:e0:e9:fa:46:ff:8e:f8:0b:e3:f4:cb:f0:fe:
                    4c:f1:cc:54:d7:86:03:85:bf:f6:f3:77:22:84:4c:
                    5b:18:c0:26:1d:db:ec:e4:80:c6:1c:93:c3:f9:5f:
                    08:7f:a0:9d:ba:12:25:2a:c3:d3:d5:31:49:8d:c1:
                    5f:03:4d:79:8e:5d:c2:45:fd:f4:88:7c:c9:39:5f:
                    59:01:10:d6:ee:4a:8c:2d:a9:8c:c5:67:e0:a9:f9:
                    cd:c6:ec:0d:6e:fc:2d:c3:49:27:03:0c:4c:35:da:
                    2b:5d:ab:07:a8:79:90:fe:74:b8:37:52:b8:4a:87:
                    4c:dd:b5:6f:7e:9a:97:41:24:26:81:f7:7c:46:3d:
                    84:cd:7e:af:21:b3:bc:76:ba:27:6d:99:ab:02:80:
                    1e:65:c8:15:e5:51:cb:1a:59:1a:bd:01:5d:3c:20:
                    7a:c9:44:2b:a2:c5:00:20:57:fe:33:f4:dc:d3:a6:
                    64:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:55:4E:69:CA:94:C5:53:95:24:53:02:2B:F3:97:61:83:43:72:BD
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a3a2f33322d3332203d3e20313336373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:73c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:d3:41:6a:e1:13:1f:f0:a8:3b:be:89:a1:51:1f:c6:14:6f:
         68:4c:17:ce:3c:7e:29:7f:27:0f:cc:51:79:8c:a4:e6:5e:78:
         c6:9a:27:0a:29:05:b8:9d:5c:5a:7b:2a:ef:07:3a:81:9f:ec:
         f3:1f:02:2b:fe:6d:87:03:4e:dd:4a:da:06:bc:5f:bf:cc:75:
         a6:f7:ac:7e:b0:17:e8:5f:46:82:45:2b:79:0f:81:26:80:54:
         e3:5e:8b:2f:ce:83:44:31:7b:2f:8b:48:df:dc:ac:19:94:a2:
         61:d0:73:41:26:9a:b2:1b:47:f3:12:25:dd:1c:b5:89:00:0a:
         bd:f7:83:d7:40:e0:dc:72:4e:1d:38:71:62:6e:3e:96:21:b3:
         17:53:b1:4f:6f:2f:ba:71:a9:9e:5a:c2:b7:92:94:e5:54:03:
         57:60:fc:a0:8a:ed:aa:7f:ba:78:45:63:c0:3c:03:9c:ed:4d:
         64:b7:00:80:44:bb:04:d8:87:e1:91:3f:90:c1:12:bb:34:9a:
         bd:99:b6:44:28:9d:1d:2c:3d:d9:bd:71:8d:25:51:9b:3f:fc:
         14:dc:da:0e:60:6e:73:ac:98:c7:6c:85:c2:97:7d:19:ac:9b:
         7d:e8:ce:f3:9e:79:fc:08:c4:f3:96:38:44:6b:7b:86:49:09:
         44:13:9a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:15:28 2024 by rpki-client on console-ams.rpki-client.org