Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38332e302f32342d3234203d3e20323030303137.roa
File:                     34332e3235352e38332e302f32342d3234203d3e20323030303137.roa (raw, json)
Hash identifier:          xG7CYq6UnhRxO8Dbi/u2Jqy4bkrQIIFCo4pRCFgs5+0=
Subject key identifier:   0F:1A:68:9C:8F:CF:F2:E2:1F:71:C2:85:06:2C:31:FA:E8:2F:66:4E
Certificate issuer:       /CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
Certificate serial:       352B9BB86410E6E55FABDD04D6DA785CFF689CAB
Authority key identifier: 72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38332e302f32342d3234203d3e20323030303137.roa
Signing time:             Thu 11 Jan 2024 06:59:47 +0000
ROA not before:           Thu 11 Jan 2024 06:54:47 +0000
ROA not after:            Thu 09 Jan 2025 06:59:47 +0000
asID:                     200017
IP address blocks:        43.255.83.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl
                          rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 May 2024 18:13:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2b:9b:b8:64:10:e6:e5:5f:ab:dd:04:d6:da:78:5c:ff:68:9c:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A61310000/serialNumber=72EC0D8B386D96FBC741C05F3661CB7ADA8EB800
        Validity
            Not Before: Jan 11 06:54:47 2024 GMT
            Not After : Jan  9 06:59:47 2025 GMT
        Subject: CN=0F1A689C8FCFF2E21F71C285062C31FAE82F664E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:57:4f:82:85:0c:d9:d9:ee:76:7a:6e:15:b7:
                    3c:9f:ca:8b:57:60:a4:29:9e:69:17:47:54:09:9f:
                    5b:c3:a4:fa:9f:cb:fe:03:d7:01:69:41:16:94:d4:
                    6e:05:77:45:4a:83:c2:d9:cf:17:0f:72:59:54:46:
                    fe:07:31:4a:78:10:d2:43:ae:b2:41:85:e0:c0:17:
                    5f:2d:e8:91:8f:c6:8a:9b:9e:10:da:e6:db:d8:6e:
                    b2:fa:de:f8:aa:a4:c0:ba:e5:38:29:ca:ab:46:f6:
                    66:1e:7e:94:6b:34:cb:91:8a:d1:d8:f6:20:59:dd:
                    94:5f:b5:d9:06:a9:71:00:c6:4f:02:b9:3e:b6:df:
                    ac:ac:00:a0:50:f4:22:9d:c7:75:b4:3e:39:99:1b:
                    fe:c2:da:44:7a:0f:dd:9c:87:43:58:1d:27:3d:03:
                    9f:3a:0f:da:87:f1:ee:54:de:cb:64:56:bd:23:b6:
                    5d:e7:e0:63:4a:46:b6:6d:4f:08:98:78:4b:a5:a7:
                    fe:25:85:2d:30:41:d1:12:d1:5c:9d:5b:9f:76:f8:
                    8f:91:c1:ab:90:2d:aa:f2:ba:78:74:82:ca:5b:fc:
                    28:70:ac:cb:10:c2:b6:4c:29:e7:2c:6e:f3:f7:20:
                    a0:21:65:fd:70:11:a8:01:fb:14:6b:75:d0:cd:cb:
                    40:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1A:68:9C:8F:CF:F2:E2:1F:71:C2:85:06:2C:31:FA:E8:2F:66:4E
            X509v3 Authority Key Identifier:
                keyid:72:EC:0D:8B:38:6D:96:FB:C7:41:C0:5F:36:61:CB:7A:DA:8E:B8:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/72EC0D8B386D96FBC741C05F3661CB7ADA8EB800.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuwNizhtlvvHQcBfNmHLetqOuAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91A61310000/0/34332e3235352e38332e302f32342d3234203d3e20323030303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.255.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:03:a0:c4:c3:e9:e2:b2:30:0d:2a:67:ee:c4:1f:23:c5:0e:
         bd:47:28:92:da:8c:a5:53:b4:d2:74:10:8b:02:60:b7:3c:95:
         e6:11:82:21:45:74:a8:23:28:ef:8f:ff:bd:cf:1b:e6:02:a9:
         0e:b7:c7:58:98:81:bb:59:c2:f4:50:9e:9f:f2:7d:d7:5d:cb:
         fc:50:34:5b:de:64:18:6f:f7:a9:6b:20:f9:06:84:c8:43:a2:
         b7:03:20:16:ed:84:d6:d7:6a:8c:f2:8c:0d:ec:4b:0d:51:f3:
         aa:2c:58:2b:ed:53:cf:b3:7b:9e:76:c5:2a:ee:3d:4b:d2:f2:
         6b:aa:4c:25:ff:96:3e:35:7f:d2:9f:4e:31:e7:d8:18:0c:bc:
         0e:23:d4:bb:53:1f:9c:a2:b1:63:af:45:d4:92:b0:7b:35:53:
         42:dc:f1:9d:99:bc:63:22:58:39:f4:e1:6a:a3:8f:f3:77:ec:
         f2:f7:dc:6a:f5:fc:a8:64:b4:64:56:33:96:e5:6b:f8:ae:0a:
         b1:3c:c4:7c:7f:54:b9:48:0b:bd:5c:00:26:ac:28:e3:0d:d8:
         3e:7f:0b:be:96:85:31:3c:ba:42:d9:bf:e9:49:81:aa:ce:20:
         df:a6:f0:9a:4d:17:d8:dc:9e:93:1a:17:3b:53:39:84:5a:2f:
         c8:f1:2a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 19:11:40 2024 by rpki-client on console-ams.rpki-client.org