Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203333353338.roa
File:                     3137302e31302e3134322e302f32342d3234203d3e203333353338.roa (raw, json)
Hash identifier:          +EuH1Ecl8Q5y36c2AAftGc8prGQwmfFVyhpPOmG8g9g=
Subject key identifier:   7E:16:2D:65:73:8E:05:4F:B7:DF:55:D7:2A:58:97:FD:A8:49:C2:8F
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       042559A30F1016747D45543A1F1D3DD62EAECC40
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203333353338.roa
Signing time:             Fri 04 Jul 2025 12:05:07 +0000
ROA not before:           Fri 04 Jul 2025 12:00:07 +0000
ROA not after:            Fri 03 Jul 2026 12:05:07 +0000
asID:                     33538
IP address blocks:        170.10.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 12:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:25:59:a3:0f:10:16:74:7d:45:54:3a:1f:1d:3d:d6:2e:ae:cc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:07 2025 GMT
            Not After : Jul  3 12:05:07 2026 GMT
        Subject: CN=7E162D65738E054FB7DF55D72A5897FDA849C28F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:dd:19:8f:28:0a:98:fc:a4:30:03:4f:ee:85:
                    fd:72:b6:e1:9b:2c:a4:50:dd:d8:8f:90:50:25:45:
                    fc:71:3b:ba:91:dc:a9:52:93:20:61:cb:f0:a7:3f:
                    84:80:94:da:ea:22:78:f4:2d:0a:72:6e:61:fe:10:
                    ed:36:18:ad:4f:a4:7d:28:22:15:ee:0b:cc:79:11:
                    46:15:ba:96:92:2b:91:d3:10:8a:a7:0d:57:b4:0f:
                    61:b4:58:73:cf:18:d8:2b:e5:c0:37:6e:6c:00:b5:
                    da:35:1d:53:c1:2f:9d:49:2d:7b:2d:19:11:7e:ae:
                    02:1c:cd:5a:ba:f7:7e:f9:53:8d:b3:34:2e:d4:d5:
                    c9:50:e7:16:84:3d:9c:3d:bd:32:8a:57:c9:45:99:
                    86:8e:f3:d3:90:35:77:8f:d2:81:59:a7:e2:d4:00:
                    02:44:49:0f:ea:64:d1:9e:5c:79:fe:18:05:8f:4a:
                    da:4e:fc:00:1c:2b:5e:0b:15:29:21:18:3a:6c:da:
                    39:df:97:1b:08:36:f5:71:8b:3b:d1:ee:1c:ef:19:
                    19:e2:9a:74:10:bc:29:9b:67:a0:0a:59:41:77:d0:
                    7f:2c:97:3d:35:c7:ee:48:c0:75:bd:27:e8:d4:03:
                    90:ae:78:12:b5:db:6b:80:fc:97:d3:1e:ea:15:94:
                    55:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:16:2D:65:73:8E:05:4F:B7:DF:55:D7:2A:58:97:FD:A8:49:C2:8F
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203333353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:72:c1:a6:6b:c7:32:ee:56:9b:69:2b:1d:7d:c3:a5:78:7b:
         9f:73:93:06:33:b5:02:bd:ae:ec:92:51:a7:0a:23:3f:cd:44:
         ae:d5:35:ae:10:61:5a:c3:dc:82:b8:13:1b:9c:36:6b:7d:4b:
         80:b9:e9:49:ff:dd:12:11:3f:d8:53:1c:4c:e8:37:1e:53:54:
         0a:97:13:6c:8d:56:be:60:15:ad:78:d9:cd:94:89:50:cf:89:
         b0:73:46:55:8a:68:91:75:04:f5:64:f4:54:cc:d9:b7:16:53:
         fd:29:29:07:2d:99:5d:fd:23:ed:99:b5:24:e7:44:0a:eb:50:
         94:0e:e4:ca:c6:cd:84:c5:42:64:c5:4d:89:ca:1e:da:a0:62:
         4d:e9:b2:10:6d:64:59:99:cc:19:04:69:e5:ce:88:56:3a:05:
         71:dc:80:cd:52:d7:ed:f1:fe:93:e0:7a:27:1e:63:6e:04:33:
         ca:aa:2a:09:e5:17:96:e9:06:cb:12:e7:9b:55:7b:c1:63:a0:
         c8:aa:a7:1b:63:3a:4e:99:64:58:39:77:29:fd:b9:3b:fc:7a:
         6b:02:80:b7:40:c6:24:df:97:29:2e:2a:8b:62:5b:dd:80:cc:
         a0:0d:c3:7b:74:3f:7f:dd:b4:b5:17:3a:29:e0:50:3d:39:e5:
         a2:e8:56:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:37:05 2025 by rpki-client