Route Origin Authorization

$ rpki-client -vvf 0.sb/repo/sb/20/3130332e3136392e39322e302f32332d3234203d3e2038383838.roa
File:                     3130332e3136392e39322e302f32332d3234203d3e2038383838.roa (raw, json)
Hash identifier:          4dP8/c3eCc8QQ44ykC63opaq7mYA5sK12qV0BR9wVRc=
Subject key identifier:   22:41:69:03:73:67:9C:85:81:03:3D:A0:08:66:20:37:B2:35:E1:B3
Certificate issuer:       /CN=A91C44A00000/serialNumber=E3098182BCB9AA102ECB2221A767B98E6ECCC310
Certificate serial:       3D4DF0F1D6EB5A5EBBF3D4701742A9FA38278225
Authority key identifier: E3:09:81:82:BC:B9:AA:10:2E:CB:22:21:A7:67:B9:8E:6E:CC:C3:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wmBgry5qhAuyyIhp2e5jm7MwxA.cer
Subject info access:      rsync://0.sb/repo/sb/20/3130332e3136392e39322e302f32332d3234203d3e2038383838.roa
Signing time:             Fri 25 Jul 2025 10:52:39 +0000
ROA not before:           Fri 25 Jul 2025 10:47:39 +0000
ROA not after:            Fri 24 Jul 2026 10:52:39 +0000
asID:                     8888
IP address blocks:        103.169.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://0.sb/repo/sb/20/E3098182BCB9AA102ECB2221A767B98E6ECCC310.crl
                          rsync://0.sb/repo/sb/20/E3098182BCB9AA102ECB2221A767B98E6ECCC310.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wmBgry5qhAuyyIhp2e5jm7MwxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 Aug 2025 07:26:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:4d:f0:f1:d6:eb:5a:5e:bb:f3:d4:70:17:42:a9:fa:38:27:82:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C44A00000, serialNumber=E3098182BCB9AA102ECB2221A767B98E6ECCC310
        Validity
            Not Before: Jul 25 10:47:39 2025 GMT
            Not After : Jul 24 10:52:39 2026 GMT
        Subject: CN=2241690373679C8581033DA008662037B235E1B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ce:c8:33:08:1b:c4:96:9a:97:03:35:76:d5:
                    63:f4:05:89:f3:fe:4c:15:de:8c:c5:8e:ce:80:3a:
                    88:ea:70:5e:c2:f0:2e:62:2e:51:a5:64:c3:06:b8:
                    ef:9c:90:18:63:d0:08:72:2b:bb:93:0a:c9:5e:54:
                    69:70:9d:f2:cf:65:e5:e6:fc:d1:67:95:ae:73:cc:
                    66:9e:f9:74:79:83:d6:db:d6:3e:eb:5c:b0:fe:f9:
                    e9:e8:7b:dc:6f:04:90:30:32:ef:f8:f4:b4:8d:12:
                    26:11:15:cc:6c:1d:e0:2a:b7:75:cc:8a:fd:35:2a:
                    63:15:b2:14:f5:30:a5:d7:b0:b1:ac:a9:69:a4:71:
                    6f:ef:0a:6b:cb:dc:9f:13:4e:35:62:2f:46:62:9a:
                    d4:8c:4e:d7:d3:51:58:73:d6:4e:c3:7e:eb:b8:2c:
                    7b:9f:98:7a:17:c3:31:3c:b5:a7:04:5b:3e:70:96:
                    48:91:86:99:20:0b:ef:f7:0c:9d:74:d6:e4:b2:5f:
                    7c:82:15:39:59:3e:ed:c8:a3:da:4f:54:65:4f:c3:
                    46:ca:ee:cd:ff:17:8c:43:ca:0a:2c:90:2a:1c:42:
                    47:16:a4:58:a8:25:fa:83:d0:43:95:cc:b7:cf:ab:
                    21:48:a9:77:20:49:0a:92:18:54:48:e4:a0:ac:6e:
                    c2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:41:69:03:73:67:9C:85:81:03:3D:A0:08:66:20:37:B2:35:E1:B3
            X509v3 Authority Key Identifier:
                keyid:E3:09:81:82:BC:B9:AA:10:2E:CB:22:21:A7:67:B9:8E:6E:CC:C3:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/20/E3098182BCB9AA102ECB2221A767B98E6ECCC310.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4wmBgry5qhAuyyIhp2e5jm7MwxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/20/3130332e3136392e39322e302f32332d3234203d3e2038383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:e5:4a:1f:42:14:48:ab:93:39:db:e9:02:ca:9f:46:e1:ab:
         0d:0b:a7:cb:c1:9b:24:36:04:9d:27:53:b6:8a:c7:24:d4:f9:
         95:40:49:34:4d:45:d4:d2:a6:45:fd:bb:da:d0:9c:c7:f3:e4:
         30:ad:cc:29:fa:e9:b8:7c:f8:84:69:b4:c6:f5:7b:5a:e5:bb:
         c6:9f:8f:b7:97:8d:d2:3b:27:ea:18:15:9a:93:cc:e2:6b:2f:
         5f:90:46:41:b1:99:1f:5d:03:f7:22:a4:e7:3c:e8:e8:05:e9:
         f5:a9:d3:e7:29:d7:d0:93:42:50:4b:51:8f:c4:82:e1:41:1b:
         b5:a4:3b:20:c0:d4:e3:5a:b4:7f:95:2d:bf:bf:3a:7a:4e:34:
         a2:b9:a6:a1:e2:40:90:91:cb:3b:45:e2:79:4e:80:eb:5b:9d:
         4b:d1:84:a4:51:cf:dd:5a:56:83:5b:f5:ea:da:05:2e:1f:63:
         5d:a2:27:79:ab:5d:de:44:fe:d7:0d:7e:2b:ca:1d:80:cc:97:
         e7:4d:b4:c3:70:01:76:47:78:0f:8b:06:25:6e:e5:d8:d0:8e:
         cb:82:ea:1d:4f:6b:f4:2c:27:60:93:6b:6d:4e:9a:03:51:30:
         a8:e4:2c:c6:c8:5c:b3:7b:83:f6:eb:6d:3a:5c:49:12:24:b7:
         12:37:43:ff
-----BEGIN CERTIFICATE-----
MIIE4TCCA8mgAwIBAgIUPU3w8dbrWl6789RwF0Kp+jgngiUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxQzQ0QTAwMDAwMTEwLwYDVQQFEyhFMzA5ODE4MkJD
QjlBQTEwMkVDQjIyMjFBNzY3Qjk4RTZFQ0NDMzEwMB4XDTI1MDcyNTEwNDczOVoX
DTI2MDcyNDEwNTIzOVowMzExMC8GA1UEAxMoMjI0MTY5MDM3MzY3OUM4NTgxMDMz
REEwMDg2NjIwMzdCMjM1RTFCMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMjOyDMIG8SWmpcDNXbVY/QFifP+TBXejMWOzoA6iOpwXsLwLmIuUaVkwwa4
75yQGGPQCHIru5MKyV5UaXCd8s9l5eb80WeVrnPMZp75dHmD1tvWPutcsP756eh7
3G8EkDAy7/j0tI0SJhEVzGwd4Cq3dcyK/TUqYxWyFPUwpdewsaypaaRxb+8Ka8vc
nxNONWIvRmKa1IxO19NRWHPWTsN+67gse5+YehfDMTy1pwRbPnCWSJGGmSAL7/cM
nXTW5LJffIIVOVk+7cij2k9UZU/DRsruzf8XjEPKCiyQKhxCRxakWKgl+oPQQ5XM
t8+rIUipdyBJCpIYVEjkoKxuwq0CAwEAAaOCAdQwggHQMB0GA1UdDgQWBBQiQWkD
c2echYEDPaAIZiA3sjXhszAfBgNVHSMEGDAWgBTjCYGCvLmqEC7LIiGnZ7mObszD
EDAOBgNVHQ8BAf8EBAMCB4AwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly8wLnNi
L3JlcG8vc2IvMjAvRTMwOTgxODJCQ0I5QUExMDJFQ0IyMjIxQTc2N0I5OEU2RUND
QzMxMC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvNHdtQmdyeTVxaEF1eXlJaHAyZTVqbTdNd3hBLmNlcjBsBggrBgEF
BQcBCwRgMF4wXAYIKwYBBQUHMAuGUHJzeW5jOi8vMC5zYi9yZXBvL3NiLzIwLzMx
MzAzMzJlMzEzNjM5MmUzOTMyMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzgzODM4
Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnqVwwDQYJKoZIhvcNAQELBQADggEBAI7lSh9CFEirkznb
6QLKn0bhqw0Lp8vBmyQ2BJ0nU7aKxyTU+ZVASTRNRdTSpkX9u9rQnMfz5DCtzCn6
6bh8+IRptMb1e1rlu8afj7eXjdI7J+oYFZqTzOJrL1+QRkGxmR9dA/cipOc86OgF
6fWp0+cp19CTQlBLUY/EguFBG7WkOyDA1ONatH+VLb+/OnpONKK5pqHiQJCRyztF
4nlOgOtbnUvRhKRRz91aVoNb9eraBS4fY12iJ3mrXd5E/tcNfivKHYDMl+dNtMNw
AXZHeA+LBiVu5djQjsuC6h1Pa/QsJ2CTa21OmgNRMKjkLMbIXLN7g/brbTpcSRIk
txI3Q/8=
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:01:58 2025 by rpki-client