Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91E54810000/0/3130332e3137332e3232342e302f32342d3234203d3e20333938373034.roa
File:                     3130332e3137332e3232342e302f32342d3234203d3e20333938373034.roa (raw, json)
Hash identifier:          NOGiiY918DvBlQquMQqchM/2tk+zFTCvEUe0hw6M5FA=
Subject key identifier:   32:3B:27:1D:82:56:E9:00:1C:FE:BE:F2:2C:89:00:E0:33:27:5D:6C
Certificate issuer:       /CN=A91E54810000/serialNumber=D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940
Certificate serial:       2817595FCCA0C6F65EBC5524FC4FD439958C876F
Authority key identifier: D9:88:B2:DA:7F:43:05:F0:CD:B9:3B:F8:8B:6F:5A:9D:F9:8D:89:40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91E54810000/0/3130332e3137332e3232342e302f32342d3234203d3e20333938373034.roa
Signing time:             Tue 30 Apr 2024 08:14:38 +0000
ROA not before:           Tue 30 Apr 2024 08:09:38 +0000
ROA not after:            Tue 29 Apr 2025 08:14:38 +0000
asID:                     398704
IP address blocks:        103.173.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.crl
                          rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 16:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:17:59:5f:cc:a0:c6:f6:5e:bc:55:24:fc:4f:d4:39:95:8c:87:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E54810000/serialNumber=D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940
        Validity
            Not Before: Apr 30 08:09:38 2024 GMT
            Not After : Apr 29 08:14:38 2025 GMT
        Subject: CN=323B271D8256E9001CFEBEF22C8900E033275D6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f8:c8:ce:36:e0:33:56:aa:b3:b2:40:f2:54:
                    d9:94:52:4b:8c:aa:6a:a7:52:12:b4:3e:0e:b3:fe:
                    67:39:22:f9:e7:4c:f6:ee:7c:66:7c:5f:7d:79:30:
                    7c:ed:20:29:3c:8a:33:51:6a:ac:d6:ef:01:2c:cb:
                    67:de:87:80:77:b5:f4:1f:a1:ad:fd:ff:cd:96:4f:
                    3e:8e:61:67:4c:a7:de:87:51:94:83:2b:92:6d:6c:
                    86:06:96:07:3e:6e:fd:88:3c:05:69:1f:95:a0:f7:
                    a8:47:db:82:79:a9:b8:c2:e6:dc:4d:88:f1:7d:1a:
                    cc:59:64:aa:4e:73:2f:bd:c2:fb:fe:a7:04:76:3b:
                    94:40:8c:94:3f:7b:a4:d9:2c:01:00:fc:71:c0:65:
                    27:49:ff:77:e0:fb:34:e6:85:98:26:df:04:62:05:
                    2b:48:a5:33:14:71:7e:43:4e:e7:f0:26:f2:2a:35:
                    95:a9:2b:4c:2f:e9:5f:d9:e4:69:7d:c6:61:05:33:
                    22:70:80:66:1e:e3:23:2f:68:a9:64:45:d3:02:0a:
                    8c:e6:6d:5b:1f:93:d7:11:10:d7:a1:d8:b6:b8:b4:
                    02:92:10:10:e9:46:46:56:7f:30:5b:0f:e2:bb:e2:
                    8e:bb:55:3f:5b:c6:55:b0:68:33:fd:27:e7:8e:08:
                    b1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3B:27:1D:82:56:E9:00:1C:FE:BE:F2:2C:89:00:E0:33:27:5D:6C
            X509v3 Authority Key Identifier:
                keyid:D9:88:B2:DA:7F:43:05:F0:CD:B9:3B:F8:8B:6F:5A:9D:F9:8D:89:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/0/3130332e3137332e3232342e302f32342d3234203d3e20333938373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:de:20:a1:04:15:79:53:56:99:ef:41:33:b4:e1:4a:a6:26:
         49:6f:51:ec:66:75:b6:5f:06:03:a7:b5:5b:36:81:bb:89:e3:
         4f:9a:1c:49:e5:01:9d:ec:8e:8f:75:2a:30:37:f3:0d:4e:14:
         ae:ff:78:18:5e:27:a4:61:79:56:98:e8:b9:b7:fd:7e:68:c5:
         a4:a1:f3:cc:49:0c:63:98:b5:f0:f3:d4:ff:4b:38:6a:06:86:
         4a:4a:c5:b0:5f:1a:4a:77:54:0f:d1:df:4e:0a:11:3d:36:14:
         37:0c:d6:b6:ba:e2:4d:31:e9:a5:94:cf:51:f3:15:97:c4:00:
         78:33:f3:e9:e9:3f:bf:4d:45:e3:2b:45:3f:14:bd:ae:6b:00:
         a2:6c:6c:41:e4:f0:31:97:47:4c:94:41:4c:da:ba:88:45:cb:
         0a:5d:6f:65:ab:a8:0b:34:ba:84:12:69:2c:a9:e0:cf:d8:8e:
         06:9b:8e:61:55:53:87:42:02:c8:c2:2a:8a:f7:e8:54:fc:6a:
         ad:0f:1f:d6:5b:7e:9e:56:79:90:7c:76:b9:37:b4:a7:8f:56:
         15:cc:9a:68:f3:c3:f1:a3:8a:ba:fd:0f:6d:47:e9:32:c6:52:
         26:b4:37:7f:ad:d7:14:9d:3e:f4:37:90:ca:6c:4f:8c:9d:bf:
         87:05:02:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:35:03 2024 by rpki-client on console-ams.rpki-client.org