Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20313531313036.roa
File:                     3130332e3233382e3132382e302f32342d3234203d3e20313531313036.roa (raw, json)
Hash identifier:          3hCx1gk12xhMekKDCa3KegcT7N4B/xxsoqqdlY9CXYI=
Subject key identifier:   40:26:A4:1C:CF:93:31:1F:54:0C:F1:3C:F8:13:7D:7E:C3:89:45:2E
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       1884E6FDB8357C61055A74DCDF4489DBFF291630
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20313531313036.roa
Signing time:             Tue 01 Oct 2024 13:32:53 +0000
ROA not before:           Tue 01 Oct 2024 13:27:53 +0000
ROA not after:            Tue 30 Sep 2025 13:32:53 +0000
asID:                     151106
IP address blocks:        103.238.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 09:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:84:e6:fd:b8:35:7c:61:05:5a:74:dc:df:44:89:db:ff:29:16:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: Oct  1 13:27:53 2024 GMT
            Not After : Sep 30 13:32:53 2025 GMT
        Subject: CN=4026A41CCF93311F540CF13CF8137D7EC389452E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:41:47:75:47:b4:18:94:e7:99:5d:d4:22:68:
                    02:b0:71:68:e5:c6:c8:59:7e:95:03:fe:e0:f9:99:
                    b5:d1:5a:27:4c:99:13:91:51:f2:7b:41:f7:ba:a6:
                    1f:95:9f:89:2c:97:73:6c:b7:cc:d9:e6:85:e3:f1:
                    5b:90:26:35:a9:8f:2f:71:6d:05:6a:5c:83:c7:4c:
                    45:b6:e0:a0:01:8e:7f:65:9b:aa:b9:5b:6b:0d:4f:
                    d6:b7:14:d5:09:8d:39:68:36:9b:c9:34:4b:e7:0d:
                    04:ca:e9:a8:6e:1e:e1:31:28:6b:24:99:b4:88:c1:
                    8d:76:b7:d2:d5:0e:13:42:16:6e:7e:d2:4d:de:fe:
                    f8:8b:3f:4e:9e:5b:96:6e:ce:b8:16:a9:46:72:ce:
                    26:13:11:af:ad:f6:86:d9:23:66:d2:9f:9e:03:8a:
                    90:b5:be:58:b8:7b:b1:00:d9:69:40:7f:8e:d1:60:
                    ad:4a:99:87:5a:3c:be:5c:7b:7b:19:01:53:ac:09:
                    04:0f:0b:d0:dc:52:f2:4d:17:69:e9:a6:a0:00:9b:
                    be:3d:ac:74:fc:32:9c:b8:9e:02:be:32:13:22:3f:
                    9e:6e:86:b7:4c:1c:06:44:55:7f:20:d4:61:49:23:
                    da:47:2d:f1:a2:3c:66:bf:39:db:19:e6:71:b2:5c:
                    95:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:26:A4:1C:CF:93:31:1F:54:0C:F1:3C:F8:13:7D:7E:C3:89:45:2E
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e20313531313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:86:42:4f:12:0c:ef:e0:48:3b:16:c0:68:5a:14:e1:56:80:
         b1:4c:e1:19:d4:20:93:ac:25:7c:39:f0:4c:ee:22:57:ef:9c:
         6d:ae:7c:19:80:d2:98:80:c8:14:ba:43:f0:12:31:c4:86:c2:
         7f:fe:7a:97:86:8f:9b:c0:07:4b:80:db:16:49:1a:4f:88:9a:
         3a:e5:3d:7e:58:66:64:dd:30:43:f6:43:f7:df:3f:bf:dd:94:
         f2:e6:94:a3:ac:15:50:57:1c:ae:44:60:7e:98:c7:72:83:35:
         33:e4:8e:44:75:61:28:7c:b2:f5:6c:91:ec:69:1f:96:52:b4:
         bc:ad:65:07:2d:45:34:f7:cc:57:7c:e2:2b:44:5d:9d:46:ec:
         95:8e:53:cd:cf:02:ca:f9:5b:88:cd:fd:05:c6:f3:0e:37:fb:
         fa:78:a6:2b:fe:a7:20:e5:7a:be:3a:aa:7e:95:df:02:41:1c:
         ab:f8:31:36:54:7d:38:8e:37:b0:e4:0f:fb:85:a5:07:6d:7a:
         e7:a7:27:78:42:f0:7c:91:b8:b4:bd:6b:6b:ea:79:01:dd:76:
         4c:65:10:50:f4:35:e8:6e:6c:cb:eb:5b:f0:cc:92:b9:cd:61:
         28:e7:ca:a7:be:dc:02:b3:a9:87:c3:d9:0a:05:62:f7:82:23:
         34:cc:e8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:52:36 2024 by rpki-client on console-fra.rpki-client.org