Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A91E54810000/0/3130332e3137332e3232352e302f32342d3234203d3e20323134373630.roa
File:                     3130332e3137332e3232352e302f32342d3234203d3e20323134373630.roa (raw, json)
Hash identifier:          yPSmYs8E5fDkvfo+Rden//MJ2GgUiuaVxMD3uvXP4x4=
Subject key identifier:   0E:D7:D7:DA:C7:96:84:74:D8:5A:FA:1E:89:96:0E:22:03:8E:B8:CD
Certificate issuer:       /CN=A91E54810000/serialNumber=D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940
Certificate serial:       328CD7B9AC2F174FADF4AD2AD5C89A53E5DC2E82
Authority key identifier: D9:88:B2:DA:7F:43:05:F0:CD:B9:3B:F8:8B:6F:5A:9D:F9:8D:89:40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A91E54810000/0/3130332e3137332e3232352e302f32342d3234203d3e20323134373630.roa
Signing time:             Sun 10 Nov 2024 00:31:39 +0000
ROA not before:           Sun 10 Nov 2024 00:26:39 +0000
ROA not after:            Sun 09 Nov 2025 00:31:39 +0000
asID:                     214760
IP address blocks:        103.173.225.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.crl
                          rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 02:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:8c:d7:b9:ac:2f:17:4f:ad:f4:ad:2a:d5:c8:9a:53:e5:dc:2e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E54810000/serialNumber=D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940
        Validity
            Not Before: Nov 10 00:26:39 2024 GMT
            Not After : Nov  9 00:31:39 2025 GMT
        Subject: CN=0ED7D7DAC7968474D85AFA1E89960E22038EB8CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:90:c6:a8:3f:5d:25:b2:47:50:9c:98:32:ac:
                    3a:35:b7:a4:11:cf:7b:03:80:d0:7d:8b:36:1c:ea:
                    b8:a0:78:f5:a1:6a:03:39:cd:0a:fd:76:98:cd:75:
                    7f:25:02:73:b9:8f:38:89:dc:0f:72:91:1c:91:72:
                    f6:b4:5f:c0:69:3f:31:c4:2b:2d:7c:39:27:96:88:
                    ad:00:36:67:fa:a1:fb:54:04:88:8c:71:48:b1:c0:
                    5f:d0:4f:56:6e:7a:59:b0:a7:2a:ed:1a:1d:fc:a6:
                    e7:8e:77:c8:e1:bf:d8:d8:3c:eb:32:fa:70:aa:38:
                    d9:49:d6:3a:6d:88:7d:3e:13:53:8d:74:58:d2:28:
                    7f:78:28:e4:37:bd:cc:a2:4f:00:60:2b:19:96:d1:
                    b6:5d:a8:15:c1:4f:82:7f:f3:5d:55:14:82:c7:8f:
                    a6:ce:cf:6c:c5:6c:0b:fb:cb:a8:fd:49:b5:13:91:
                    2b:9d:84:77:f4:e8:55:9a:0d:47:0c:8a:d6:ba:9b:
                    2d:f1:06:b6:37:d2:57:c7:bc:52:72:89:6a:59:d5:
                    6d:3b:a1:10:9b:b5:fb:31:a9:f0:2b:f4:60:99:b6:
                    83:d9:dd:85:c3:58:68:9b:98:74:73:ee:88:b0:3c:
                    f0:a0:3c:b5:78:d5:ea:20:99:f3:a5:77:c9:fb:15:
                    91:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D7:D7:DA:C7:96:84:74:D8:5A:FA:1E:89:96:0E:22:03:8E:B8:CD
            X509v3 Authority Key Identifier:
                keyid:D9:88:B2:DA:7F:43:05:F0:CD:B9:3B:F8:8B:6F:5A:9D:F9:8D:89:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/0/D988B2DA7F4305F0CDB93BF88B6F5A9DF98D8940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Yiy2n9DBfDNuTv4i29anfmNiUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A91E54810000/0/3130332e3137332e3232352e302f32342d3234203d3e20323134373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:c8:cc:e6:1b:78:f4:26:81:6f:8a:58:81:9b:bc:43:eb:32:
         33:96:bc:6e:7f:31:9c:8d:ad:a8:67:86:22:46:38:6c:09:68:
         cc:bd:24:92:0f:8f:41:38:15:5b:25:bb:02:90:0e:f7:a1:95:
         86:f5:49:fc:9e:8b:4c:7a:3f:c9:a4:e1:43:f3:25:11:0a:d2:
         c5:66:bc:fc:b0:f2:d1:db:5d:0d:73:a7:f3:f0:62:0f:c6:2a:
         ee:29:79:90:9e:fc:ac:c7:0a:ba:15:86:04:52:91:b1:ae:1c:
         58:70:1b:90:92:ac:05:59:88:c6:f2:09:76:04:9a:11:8b:5e:
         08:30:93:81:a4:bb:30:f8:7f:36:83:03:de:47:e4:a2:e3:09:
         f8:e7:97:4d:bb:c6:07:34:65:8a:f2:f3:85:81:b6:e4:e1:6b:
         d2:99:fb:74:59:ed:0c:25:57:85:eb:f0:3f:b4:21:63:4d:63:
         83:dd:65:d6:b5:2d:03:7a:ac:ad:58:b7:2a:b2:3a:36:29:57:
         fc:e7:3e:f3:bf:ad:5f:bd:e9:36:15:08:df:e0:06:b0:63:8a:
         6d:1f:20:47:ad:8a:8c:34:c8:41:de:e2:71:2f:c1:57:a3:7d:
         ae:0d:39:c3:e5:cb:1e:ab:2b:35:88:64:1b:77:c7:b3:0e:f5:
         d7:e3:64:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:18:40 2024 by rpki-client on console-fra.rpki-client.org