Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e2035303635.roa
File:                     3130332e3233382e3132382e302f32342d3234203d3e2035303635.roa (raw, json)
Hash identifier:          WQE1+VxviEKZyZzTZtyFhUZY8mHceWVObh0yTtwi8Vo=
Subject key identifier:   57:DB:7D:EA:C0:B6:3C:88:66:C8:66:F1:93:56:30:D2:1C:D8:83:E3
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       75406432BB2FE52EDEEABDB38866F1D4963AEEA4
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e2035303635.roa
Signing time:             Thu 21 Mar 2024 15:44:56 +0000
ROA not before:           Thu 21 Mar 2024 15:39:56 +0000
ROA not after:            Thu 20 Mar 2025 15:44:56 +0000
asID:                     5065
IP address blocks:        103.238.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 13:04:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:40:64:32:bb:2f:e5:2e:de:ea:bd:b3:88:66:f1:d4:96:3a:ee:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: Mar 21 15:39:56 2024 GMT
            Not After : Mar 20 15:44:56 2025 GMT
        Subject: CN=57DB7DEAC0B63C8866C866F1935630D21CD883E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:eb:be:45:53:a6:7a:5a:db:85:6e:f3:50:89:
                    68:cd:84:c0:0b:ce:a4:51:25:54:1b:7e:11:7d:6b:
                    a6:95:01:88:ce:37:80:98:ee:d3:e5:4b:71:20:80:
                    90:d5:c0:b0:cd:ef:e2:df:bf:9a:df:19:9d:4f:98:
                    1d:86:19:c9:08:08:eb:a8:93:af:f0:bc:1b:ae:7d:
                    c8:34:71:48:64:d3:8a:56:9f:94:e3:c8:9f:08:93:
                    87:2f:5c:95:54:ee:f3:6c:69:b1:11:91:0a:ac:4a:
                    79:de:2f:ff:59:64:8c:ae:a0:99:fb:12:09:c4:6e:
                    8f:cb:11:7e:d7:fb:3a:ee:06:4d:db:83:d2:e3:fa:
                    3f:05:9e:9b:fd:73:61:78:81:07:65:df:7e:f4:d7:
                    d6:54:29:53:ae:00:af:fd:35:f8:ca:82:d1:29:1a:
                    ba:c7:fe:f3:7e:a0:01:fe:ad:45:37:f7:c1:8f:50:
                    c9:bc:85:89:c8:fb:bd:c2:a9:56:c3:ab:cf:3e:06:
                    01:b5:47:3b:53:e1:97:d5:7b:ff:19:bf:39:04:3d:
                    81:29:28:6a:c6:d3:00:c4:1a:be:cb:99:26:de:2c:
                    d8:0f:12:50:fa:db:2c:23:33:d6:70:e6:b5:c8:09:
                    bc:ac:69:43:c3:f6:d9:1a:9b:c2:7b:85:89:fb:29:
                    d8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DB:7D:EA:C0:B6:3C:88:66:C8:66:F1:93:56:30:D2:1C:D8:83:E3
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132382e302f32342d3234203d3e2035303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:1f:61:b8:6a:ce:80:1d:4b:90:eb:18:53:ef:79:3d:22:90:
         d2:e9:ef:22:31:39:ac:52:59:8f:7d:16:e5:4a:f1:a4:5f:98:
         e5:c5:97:3a:16:ea:71:7d:7e:f1:1a:a0:bc:44:bd:fe:ea:2b:
         16:96:f3:d8:9a:cd:9c:16:cf:10:22:df:96:34:9c:75:9c:7b:
         d0:6f:fc:04:d4:bc:3e:98:2e:48:f4:e8:7b:ad:82:cd:a6:23:
         c1:b5:1e:a2:91:e2:91:62:20:72:8f:27:1a:e0:90:4e:2a:83:
         47:7d:5b:34:9f:02:54:52:db:92:b8:5f:ff:56:8d:b3:1b:8b:
         71:ff:07:83:a3:22:54:8a:20:0f:30:21:ff:1b:9c:cb:86:bd:
         12:96:b5:a1:8a:a1:e0:17:c9:90:f8:2e:20:41:53:45:e5:bc:
         38:d7:4a:3a:81:00:32:a7:30:99:c8:4a:68:02:ab:c8:1d:f2:
         10:9f:52:a6:2a:35:01:75:16:6c:eb:e9:1b:c0:e8:ca:75:0a:
         9b:f0:7f:b5:8c:91:ef:2e:d8:d2:3f:67:44:02:58:f1:6d:0e:
         9e:e8:c1:b2:05:c0:8a:ee:d5:9b:3f:db:2d:6d:4f:8f:84:b0:
         65:c2:7f:7d:e3:1d:b8:a1:44:99:1b:a4:c8:88:96:f5:d9:48:
         c2:d4:34:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 14:36:06 2024 by rpki-client on console-fra.rpki-client.org