Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132392e302f32342d3234203d3e20313938313030.roa
File:                     3130332e3233382e3132392e302f32342d3234203d3e20313938313030.roa (raw, json)
Hash identifier:          5WV1i+bmxuiors5k14JoewwUls66NXGha9r1Vc5zx+A=
Subject key identifier:   B4:7A:7D:D0:7E:34:7B:19:2B:62:6C:C9:CA:FD:39:C8:D0:5A:E0:E0
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       10AECFC8C0940D47E3DBC00848E71573739DF0B1
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132392e302f32342d3234203d3e20313938313030.roa
Signing time:             Thu 11 Jan 2024 06:59:46 +0000
ROA not before:           Thu 11 Jan 2024 06:54:46 +0000
ROA not after:            Thu 09 Jan 2025 06:59:46 +0000
asID:                     198100
IP address blocks:        103.238.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 09:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ae:cf:c8:c0:94:0d:47:e3:db:c0:08:48:e7:15:73:73:9d:f0:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: Jan 11 06:54:46 2024 GMT
            Not After : Jan  9 06:59:46 2025 GMT
        Subject: CN=B47A7DD07E347B192B626CC9CAFD39C8D05AE0E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d8:50:9a:53:58:89:bc:af:3d:93:ad:5d:bb:
                    cc:2c:f7:73:16:07:d1:89:bb:d3:45:63:b5:e0:18:
                    76:1f:53:6c:ea:b3:e8:93:ad:e6:a5:df:02:d1:c6:
                    7d:ca:d6:93:c8:04:cb:aa:50:48:aa:9c:84:95:ed:
                    63:66:1f:4d:9e:47:64:36:2b:71:67:73:55:e3:21:
                    19:8a:b4:93:dc:af:cc:29:f5:33:e0:46:07:fe:34:
                    ff:ea:73:7e:36:bb:69:b8:08:aa:70:d3:0e:f8:a6:
                    c0:ed:a6:72:cb:e5:63:58:76:77:8f:20:4a:7c:25:
                    d9:b8:2d:e2:db:aa:03:10:63:4a:b7:76:6d:90:08:
                    30:99:fe:24:6e:3f:a3:b8:f8:03:0e:9c:c1:be:56:
                    40:50:b2:2c:d7:7d:aa:c2:9b:65:7f:b7:d4:c4:4e:
                    5c:9f:ce:31:88:a7:a5:53:8c:b9:68:a1:09:3e:a2:
                    c3:db:84:51:f8:9c:f9:f4:4a:58:e3:f0:f3:32:d4:
                    41:ed:49:c6:de:f6:60:aa:14:70:8c:0c:f2:21:b0:
                    39:7f:ee:7d:71:e2:3f:f6:61:6f:a5:34:c2:78:72:
                    19:18:ff:4a:d4:80:67:eb:f4:a9:10:e6:3a:d4:b3:
                    e1:b8:47:e6:2f:33:2f:b7:0b:34:d7:4e:33:12:b5:
                    55:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7A:7D:D0:7E:34:7B:19:2B:62:6C:C9:CA:FD:39:C8:D0:5A:E0:E0
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/3130332e3233382e3132392e302f32342d3234203d3e20313938313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:d4:a8:3b:c6:e8:2e:3d:12:96:93:e7:af:97:7f:43:9f:a6:
         81:1e:d4:43:ab:9d:59:e9:c5:f9:3c:e6:b7:04:d5:c9:c5:4a:
         1f:36:17:26:d8:1b:4a:af:da:49:a7:42:55:95:55:55:09:fe:
         64:d5:ec:a5:db:f0:b7:91:30:87:37:c4:be:45:fe:13:66:74:
         d9:7d:80:53:cd:29:67:e3:86:f2:1c:ad:23:76:d3:bf:99:44:
         96:7e:4e:63:33:4a:e5:7b:27:5d:8a:31:c6:d5:ee:0b:af:e1:
         6c:fc:f8:27:95:52:79:84:73:f8:64:da:d4:d1:e5:9f:3d:e9:
         5b:19:dc:83:a8:71:b0:f2:d4:db:98:08:39:c5:ec:b9:19:fe:
         bd:f2:50:d3:36:3e:48:35:e6:09:a9:62:ba:39:b1:95:5f:7d:
         95:97:aa:0f:69:9d:74:9c:56:9b:17:79:ab:3c:7a:e7:b6:3e:
         5a:9f:bd:85:1c:a0:db:a1:14:6b:47:d2:f3:07:57:e0:3d:45:
         3f:fc:77:59:25:45:c7:d1:e2:3e:fd:a8:fc:17:72:84:c4:98:
         1f:d9:8c:b2:43:82:ce:8f:47:3f:fd:61:58:40:10:99:cd:5f:
         87:ec:8c:ce:ae:2b:b1:eb:c1:f6:87:85:2f:66:93:4d:d2:2c:
         da:e4:05:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:54:59 2024 by rpki-client on console-ams.rpki-client.org