Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a3a2f34382d3438203d3e20313336373932.roa
File:                     323430313a373363303a3a2f34382d3438203d3e20313336373932.roa (raw, json)
Hash identifier:          GXLgyQ7nu0rvfFM1r9PFPKlf+Di6lPWHOcSBNwp3/sw=
Subject key identifier:   F8:F1:68:F7:E8:D0:DF:10:DE:3B:FC:32:2F:72:AE:CB:9C:04:C5:6C
Certificate issuer:       /CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
Certificate serial:       3C5EE7E551B3457C2473568724FCF14B7B8D31D7
Authority key identifier: 98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a3a2f34382d3438203d3e20313336373932.roa
Signing time:             Fri 02 Aug 2024 11:24:32 +0000
ROA not before:           Fri 02 Aug 2024 11:19:32 +0000
ROA not after:            Fri 01 Aug 2025 11:24:32 +0000
asID:                     136792
IP address blocks:        2401:73c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 08:54:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:5e:e7:e5:51:b3:45:7c:24:73:56:87:24:fc:f1:4b:7b:8d:31:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A980000/serialNumber=989D32D5B62AC9389286C17CA5078BD0066F1E12
        Validity
            Not Before: Aug  2 11:19:32 2024 GMT
            Not After : Aug  1 11:24:32 2025 GMT
        Subject: CN=F8F168F7E8D0DF10DE3BFC322F72AECB9C04C56C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:65:70:f0:eb:d2:a9:c2:60:2b:35:ba:50:b1:
                    dd:43:1f:eb:2c:38:72:b8:44:19:74:ef:2d:84:c9:
                    82:42:cd:5c:49:e6:48:f5:c7:b2:31:74:1e:14:77:
                    bb:52:aa:b4:ef:cc:43:05:2d:1a:30:a3:d5:04:68:
                    52:33:d7:d8:72:55:18:91:45:c3:99:84:b2:62:77:
                    1b:e1:b7:7f:f2:8c:bd:25:28:50:5f:48:07:81:b7:
                    ab:f2:07:36:93:61:79:21:b4:b8:37:3f:76:9a:99:
                    02:fd:29:df:b9:78:69:87:67:2f:d8:9c:f1:65:62:
                    04:07:ec:83:ba:03:7a:d7:22:1f:42:13:d6:31:15:
                    49:a8:4a:3b:cc:5a:ad:6e:bc:f0:00:c5:ed:81:08:
                    c5:ef:39:84:3e:87:2a:90:1f:ab:5a:cf:3b:d4:99:
                    a3:79:82:7f:c3:46:52:73:f4:5d:b5:30:19:e7:96:
                    38:91:8e:ad:da:83:0c:ff:a0:ec:23:0b:cc:be:2e:
                    29:81:ae:01:99:0b:97:eb:dd:4e:4d:d4:20:6f:84:
                    38:4e:f6:70:5d:d6:b7:db:54:b0:a1:10:2c:bd:c8:
                    14:c8:11:16:d2:1e:26:ec:93:ea:08:67:75:c9:4f:
                    77:34:da:1c:a2:30:c6:2f:bd:cc:c7:7d:d6:b3:a8:
                    7f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F1:68:F7:E8:D0:DF:10:DE:3B:FC:32:2F:72:AE:CB:9C:04:C5:6C
            X509v3 Authority Key Identifier:
                keyid:98:9D:32:D5:B6:2A:C9:38:92:86:C1:7C:A5:07:8B:D0:06:6F:1E:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/989D32D5B62AC9389286C17CA5078BD0066F1E12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mJ0y1bYqyTiShsF8pQeL0AZvHhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/0/323430313a373363303a3a2f34382d3438203d3e20313336373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:73c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:ec:0e:50:92:b7:5c:9f:48:73:65:54:da:1d:09:db:af:87:
         90:42:e1:a7:0b:11:0a:0f:b6:80:af:d4:c2:0d:8c:f1:c0:ac:
         63:7e:7d:81:0a:ac:1f:24:7c:71:5d:7f:19:eb:f7:41:c4:00:
         15:e6:4d:3a:fd:c6:86:04:65:58:27:3c:72:42:90:5f:62:64:
         55:81:43:4f:83:be:a0:f4:45:b4:ab:92:9f:28:3d:ea:06:09:
         9a:5f:1d:e7:d3:34:f3:79:10:50:34:45:60:05:ba:9b:2e:e1:
         b3:76:00:ab:57:e4:7b:29:5e:73:de:1d:76:39:67:c9:b0:91:
         dc:7d:f8:f6:0c:c2:6e:26:f4:42:8c:6e:77:39:ca:8e:73:4d:
         e5:42:ff:79:60:5c:a1:a2:c6:4c:e8:01:28:28:d0:35:ea:d4:
         df:24:8c:b5:a6:2f:53:d1:de:fa:92:b2:8a:9b:33:cf:95:dc:
         97:d4:64:9c:4f:05:02:e9:50:ff:88:48:02:b1:1c:8f:08:d0:
         91:2b:27:6f:5b:9c:58:c6:b7:9a:bc:b6:85:62:17:ba:c3:ac:
         09:3a:0a:65:16:be:51:ea:64:86:fa:45:4c:bb:fb:a3:a6:ea:
         56:08:96:03:4d:c3:da:21:2e:a1:70:21:95:45:d0:6b:ce:55:
         49:b8:ad:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org