Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/323430343a336438303a3a2f33322d3438203d3e203631313338.roa
File: 323430343a336438303a3a2f33322d3438203d3e203631313338.roa (raw, json)
Hash identifier: /c/X143yChLTjZ34Frn6v7TKMTTbgLHR9tQy12OVHvM=
Subject key identifier: 43:0C:42:55:84:A2:FB:23:15:25:80:BE:26:99:1C:E3:C2:F3:A0:BF
Certificate issuer: /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial: 11FEB091DBD1E47FF86ADF55316FE5F114510373
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/323430343a336438303a3a2f33322d3438203d3e203631313338.roa
Signing time: Tue 26 Nov 2024 06:16:44 +0000
ROA not before: Tue 26 Nov 2024 06:11:44 +0000
ROA not after: Tue 25 Nov 2025 06:16:44 +0000
asID: 61138
IP address blocks: 2404:3d80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Apr 2025 17:28:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:fe:b0:91:db:d1:e4:7f:f8:6a:df:55:31:6f:e5:f1:14:51:03:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91115900000
Validity
Not Before: Nov 26 06:11:44 2024 GMT
Not After : Nov 25 06:16:44 2025 GMT
Subject: CN=430C425584A2FB23152580BE26991CE3C2F3A0BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:25:fb:a3:48:8b:b2:12:07:97:7f:41:68:
9f:38:00:41:fc:c8:64:c5:41:b2:f8:7c:e5:76:72:
ae:e4:1c:c1:c0:f8:6f:2d:79:ed:60:84:e3:89:5e:
67:30:0e:b8:be:91:36:26:e9:3d:69:ec:ce:8a:a3:
3a:1b:cd:98:d1:6e:95:da:3a:a6:65:48:be:52:4f:
20:f4:17:ed:d8:4e:ee:ca:90:a4:05:45:2c:8a:74:
3f:b0:2a:7b:04:80:44:e6:49:72:83:ea:69:60:38:
9b:35:fb:d1:a6:6e:f2:69:b4:a5:45:be:84:60:40:
8f:84:e4:51:97:60:53:f5:0c:0d:05:c8:9f:b2:c4:
6b:97:a1:1f:9d:df:4b:cf:86:f6:0d:7e:47:75:8d:
68:df:3a:82:c4:7d:80:ab:69:60:7c:57:5c:f2:9a:
aa:83:40:d0:3f:3f:4c:e4:82:46:47:a4:b6:c2:25:
65:96:e4:1c:54:e8:34:93:64:cb:b0:3d:be:ab:a4:
75:2a:0b:2c:47:be:47:86:31:d3:50:c5:40:10:61:
c3:b0:09:07:28:e0:f9:9c:14:a4:76:2d:52:9f:d0:
9e:cf:b8:d6:29:13:16:40:74:c6:ea:85:a1:bf:f4:
9b:92:7d:33:01:b3:1c:ab:b8:93:54:b0:73:e6:55:
97:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0C:42:55:84:A2:FB:23:15:25:80:BE:26:99:1C:E3:C2:F3:A0:BF
X509v3 Authority Key Identifier:
keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/323430343a336438303a3a2f33322d3438203d3e203631313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:3d80::/32
Signature Algorithm: sha256WithRSAEncryption
22:e3:63:da:7d:bb:dc:19:72:52:52:d1:da:95:6a:59:9e:ad:
c4:45:bd:8a:64:c9:0c:11:4b:f7:fb:f1:7d:1a:c2:a3:aa:d0:
1b:b8:4a:91:87:77:a5:f7:8d:2b:9c:38:95:39:7f:42:2c:b5:
75:35:76:2a:75:ac:2d:e6:1c:10:6e:36:ce:19:6b:3f:48:44:
2c:52:e6:9f:ff:7b:24:2b:2b:48:cf:38:ef:32:2c:33:fb:ea:
91:22:f1:ee:08:be:08:0b:4e:b2:ab:cc:18:d1:37:f0:6c:b3:
b5:cb:fe:ed:a5:be:b9:bc:a2:a0:cc:74:b3:7f:82:19:d0:17:
50:9b:42:e1:34:73:a4:53:68:a0:d0:2e:85:d9:7a:4f:04:b7:
d1:e5:eb:42:b5:d8:d7:99:ef:ae:8d:68:c6:9b:02:eb:66:d5:
41:77:96:61:6a:56:9a:92:a6:59:2d:f1:06:5e:00:5a:f6:b5:
12:36:a7:f4:c5:f3:77:ad:51:77:b2:fd:ba:da:47:bc:7e:b5:
a3:b0:4d:62:f3:1f:33:c2:64:70:4b:12:bb:e4:d7:4c:81:8b:
2c:54:c1:5f:dc:0b:b6:d3:a5:1e:60:63:bc:e3:7b:4e:c9:c9:
2e:61:f0:e0:37:5d:97:7c:57:58:cb:ea:e5:2f:98:0a:dc:62:
20:c7:0b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:13:42 2025 by rpki-client