Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203339353838.roa
File:                     3137302e31302e3134322e302f32342d3234203d3e203339353838.roa (raw, json)
Hash identifier:          w4A57zgRS92pZ9aUTheio0RjmZCZwU/noDCRa5dO5mk=
Subject key identifier:   28:FE:BD:38:95:88:BC:D6:80:AA:CA:73:AD:F1:12:D7:8F:00:38:65
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       0217672FFEB13F2DFC264D29495DF43376F01D1B
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203339353838.roa
Signing time:             Fri 04 Jul 2025 12:05:10 +0000
ROA not before:           Fri 04 Jul 2025 12:00:10 +0000
ROA not after:            Fri 03 Jul 2026 12:05:10 +0000
asID:                     39588
IP address blocks:        170.10.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 00:03:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:17:67:2f:fe:b1:3f:2d:fc:26:4d:29:49:5d:f4:33:76:f0:1d:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:10 2025 GMT
            Not After : Jul  3 12:05:10 2026 GMT
        Subject: CN=28FEBD389588BCD680AACA73ADF112D78F003865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6d:02:59:dd:31:9f:5b:e6:63:7f:22:c6:9f:
                    77:b7:1f:99:49:eb:7d:bc:4d:9c:01:8f:cc:90:54:
                    b9:5f:bd:3f:92:f0:36:dc:14:dd:55:c9:fe:f3:0a:
                    86:a3:d8:bf:f0:01:62:3c:a4:75:5d:02:1f:c0:3e:
                    10:90:ac:fc:45:e5:c6:25:7e:27:3a:b4:26:d6:45:
                    28:54:89:2c:08:d4:4d:f3:7e:65:9d:2b:4a:2c:75:
                    c7:41:ca:af:13:e5:75:8d:70:19:f3:8a:88:ae:92:
                    80:5f:a3:0b:52:9c:1a:52:7d:23:ea:a9:dd:91:75:
                    a3:ca:b3:1a:21:37:86:89:70:f6:32:3b:29:f7:d8:
                    11:07:8b:bf:0a:8e:6a:50:ba:e9:c1:24:7a:98:ce:
                    4d:90:20:83:30:e1:92:43:36:ab:dc:ac:bd:7f:5e:
                    be:74:ce:ea:c3:4c:01:75:99:04:ca:e8:7d:a3:fb:
                    d9:39:74:5d:f9:21:d7:4e:b8:ac:36:17:a0:ae:b9:
                    85:60:80:00:28:29:09:3f:77:75:f2:e3:65:04:db:
                    bc:5e:73:d0:dd:e3:e1:07:7f:98:1b:bd:de:36:d0:
                    a2:64:4f:b9:6a:a0:7d:05:3b:1c:89:be:eb:95:18:
                    82:b1:65:0a:89:fc:cf:8f:5b:f8:23:69:c3:1d:c8:
                    cd:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FE:BD:38:95:88:BC:D6:80:AA:CA:73:AD:F1:12:D7:8F:00:38:65
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203339353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:ea:bc:33:58:fd:6f:b9:a1:e2:9e:d0:71:67:2f:d0:fd:f5:
         6d:cd:e6:21:c6:1e:83:d4:32:01:43:11:8c:87:6a:75:47:6e:
         e7:a2:03:ca:db:5d:22:a0:d6:2c:e9:a5:c7:7c:09:54:7b:f0:
         f5:c7:96:ff:3b:72:24:6f:db:b4:c2:0f:1a:59:9b:4d:0a:06:
         88:2a:d4:d2:45:17:6e:80:24:2c:36:3b:0e:e5:2b:c3:1a:03:
         5c:cd:a4:3e:13:d4:e2:59:42:a6:ec:01:e0:a2:72:b0:d6:22:
         23:c5:16:7c:a6:2e:53:c1:81:f0:0e:38:32:2f:1a:46:fa:40:
         c7:ea:29:9b:90:a7:d6:cb:1e:ec:81:c2:ff:8e:49:e9:19:11:
         5f:d7:e4:0a:ed:f3:98:0c:7b:7f:26:6c:8e:56:b1:bc:c4:08:
         7a:72:5a:5d:56:67:ff:ad:2d:1d:1d:70:c6:6a:51:70:ca:18:
         45:a9:a6:fc:17:29:e2:9c:fe:d8:78:a9:ea:95:a2:7a:41:c3:
         a1:74:5a:e0:d7:db:4b:ad:75:96:64:56:8d:76:6e:51:a9:66:
         f5:ef:25:0f:80:5c:9b:30:7a:a6:04:c1:39:22:c6:85:13:6c:
         37:44:21:e5:6c:e1:3f:20:ff:39:0a:1a:45:40:26:1b:f7:1f:
         db:4a:4c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 23:29:54 2025 by rpki-client