Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134302e302f32342d3234203d3e20333937373236.roa
File:                     3137302e31302e3134302e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier:          zNbrvge/LpbenrhwNkWAGHeKDMgrtrYB079qJ7jxCW4=
Subject key identifier:   F1:E8:C6:6C:FD:00:50:1C:A2:AC:D2:1E:BA:38:7A:FB:8E:31:02:93
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       2D2472AF7C9593C7BD0A00D4F25F09CF5E3A3389
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134302e302f32342d3234203d3e20333937373236.roa
Signing time:             Fri 01 Sep 2023 11:14:31 +0000
ROA not before:           Fri 01 Sep 2023 11:09:31 +0000
ROA not after:            Fri 30 Aug 2024 11:14:31 +0000
asID:                     397726
IP address blocks:        170.10.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Jun 2024 00:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:24:72:af:7c:95:93:c7:bd:0a:00:d4:f2:5f:09:cf:5e:3a:33:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:31 2023 GMT
            Not After : Aug 30 11:14:31 2024 GMT
        Subject: CN=F1E8C66CFD00501CA2ACD21EBA387AFB8E310293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:72:bb:86:5e:3b:b1:6a:49:d1:b7:84:c1:1b:
                    dc:49:ec:c0:64:a7:66:e2:0d:76:7e:ab:2e:5f:53:
                    a9:37:7c:e8:e9:3e:d0:17:45:58:6a:af:2b:17:20:
                    db:ab:96:f5:7a:fc:aa:0d:9f:e8:eb:ae:52:b1:cf:
                    87:d7:19:0a:77:37:7a:1d:1a:f6:41:1c:46:d9:82:
                    04:81:82:88:67:6d:da:5e:53:f7:a6:f8:41:bf:40:
                    8d:56:72:fe:72:fa:1d:fc:c0:e8:bd:6f:fc:ac:6e:
                    15:0c:37:51:33:45:e4:e4:15:89:25:ec:85:54:16:
                    e9:9f:39:c3:5f:07:a1:c9:eb:c9:49:ce:e7:79:e7:
                    19:80:d6:bc:cb:e8:28:35:fe:c4:15:1a:e6:bb:e6:
                    5d:ae:fa:1d:cc:c8:c6:e5:15:13:c0:11:ba:9a:04:
                    39:37:fc:28:ef:e1:03:90:85:4d:0d:55:e9:8b:2e:
                    83:23:2f:f0:27:ed:26:a7:30:f5:11:42:09:b3:58:
                    68:7b:c3:17:6f:5f:28:74:55:22:bf:d4:0b:c2:32:
                    db:f2:89:e1:db:10:31:6d:2c:c6:a5:d1:19:75:f5:
                    3a:54:9d:26:73:93:9d:22:4d:50:a2:a1:8b:ef:7d:
                    50:3b:4c:80:97:40:5b:7f:97:ca:91:1d:26:ce:fa:
                    c0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E8:C6:6C:FD:00:50:1C:A2:AC:D2:1E:BA:38:7A:FB:8E:31:02:93
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134302e302f32342d3234203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:0c:18:38:94:3e:ad:51:7b:f8:16:8c:bd:ca:f2:ad:6f:7a:
         8d:28:49:d4:84:ba:c5:49:86:0a:61:bb:e9:78:0c:ac:d9:2e:
         77:84:43:1d:6d:8e:02:79:c5:58:c7:08:40:6e:b3:a5:d7:26:
         d7:18:1b:73:d5:2e:06:4d:9a:43:d6:b8:a8:8b:8d:2e:99:7d:
         0a:89:0b:31:84:b5:f3:80:94:f6:a3:bc:55:89:c1:88:8b:38:
         0f:86:93:b3:21:81:cb:6e:30:60:fc:5d:86:71:ea:b9:43:53:
         b9:31:55:60:aa:bc:dc:52:53:a1:c5:8f:31:78:53:00:36:da:
         6a:4a:72:d1:34:cf:ce:86:ad:51:b8:5c:b7:d5:44:a2:31:a4:
         96:b4:8b:3f:36:aa:8f:b5:08:28:51:20:00:2e:41:ee:32:a5:
         e4:d6:cc:81:00:1d:e0:e3:8a:f1:4c:74:8c:72:c4:da:a5:8c:
         25:a7:24:91:44:56:8e:6c:b1:8e:8d:a4:b1:85:58:9a:85:55:
         cd:72:6a:47:90:7c:b0:57:f4:19:8f:56:95:f0:85:c1:08:a1:
         b5:cc:dd:80:82:d3:a9:78:42:23:35:eb:6f:e1:ed:0b:52:86:
         ff:af:87:68:4d:f3:cd:e6:8f:74:08:0c:da:2b:69:b4:ed:71:
         af:29:0a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 03:14:30 2024 by rpki-client on console-ams.rpki-client.org