Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203432343237.roa
File:                     3137302e31302e3134322e302f32342d3234203d3e203432343237.roa (raw, json)
Hash identifier:          THkhZmZdFPyGHKjkOeQZR1CHlEBfyaP12r/UZKnvif4=
Subject key identifier:   D4:31:84:C7:E9:3B:9B:86:09:44:64:AE:E3:2D:E5:F1:E1:64:96:16
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       29BA52F651DF24A914773FF3C3CC767EDDF3F241
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203432343237.roa
Signing time:             Fri 04 Jul 2025 12:05:03 +0000
ROA not before:           Fri 04 Jul 2025 12:00:03 +0000
ROA not after:            Fri 03 Jul 2026 12:05:03 +0000
asID:                     42427
IP address blocks:        170.10.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ba:52:f6:51:df:24:a9:14:77:3f:f3:c3:cc:76:7e:dd:f3:f2:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:03 2025 GMT
            Not After : Jul  3 12:05:03 2026 GMT
        Subject: CN=D43184C7E93B9B86094464AEE32DE5F1E1649616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:aa:41:2a:9d:d9:c2:61:f2:86:bb:14:05:a5:
                    cf:0c:2d:66:32:40:1a:3d:0c:7a:99:d6:53:e4:cb:
                    9b:d3:a9:e5:20:14:03:1c:07:22:6f:e5:e4:62:1f:
                    b3:3b:65:c8:2a:55:f3:32:b0:c4:6a:30:6d:3a:e1:
                    95:b4:af:ee:d8:73:ca:2f:3b:68:a2:29:ec:85:67:
                    1b:12:5f:1e:bb:2d:f7:5a:05:f9:70:ae:d2:9a:ef:
                    15:5c:2c:c1:81:5f:6a:a6:82:f2:92:11:15:5c:05:
                    6d:fc:71:ef:05:60:78:1d:fe:88:8f:a7:7d:a5:48:
                    e7:57:68:4e:12:ff:85:8a:26:c4:d2:be:d9:c5:5f:
                    cd:a8:08:55:d4:32:25:a3:42:ef:d8:fc:56:8a:a2:
                    95:24:d8:2d:4d:e7:8c:8f:6f:94:1d:17:3e:82:a2:
                    e9:25:76:96:79:0e:e6:24:a3:16:f8:93:11:60:eb:
                    c6:4a:d7:06:ef:84:56:18:d2:5e:e5:93:a5:a8:5e:
                    d5:31:f5:7e:cd:15:79:fb:26:7f:c8:85:89:11:15:
                    aa:1e:cd:97:56:30:20:f9:a8:89:e4:e4:31:3d:4f:
                    a7:ec:09:e1:89:c0:3b:31:76:9c:2e:f3:d1:13:2b:
                    e9:e8:52:61:94:f9:53:75:fc:99:bd:fe:51:d5:49:
                    9c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:31:84:C7:E9:3B:9B:86:09:44:64:AE:E3:2D:E5:F1:E1:64:96:16
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203432343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:c0:67:fc:85:6c:cd:93:1f:76:95:4e:13:de:61:4f:48:09:
         f2:49:fe:ca:73:3a:90:66:70:08:ab:5b:94:e6:94:3b:a1:b8:
         d1:37:47:80:43:e7:8c:62:ed:16:71:da:d4:39:b7:63:78:77:
         13:48:12:76:a7:08:0e:b6:09:6b:3d:4f:ad:76:a3:a0:c3:13:
         c8:63:6f:10:5e:ef:a9:42:89:59:1b:f9:4f:38:74:ab:3f:09:
         2e:66:fb:b4:66:62:a7:21:b4:4a:89:66:c2:59:21:35:d1:f7:
         68:95:d8:f6:0c:0b:93:ac:88:e3:44:54:de:4a:c4:0d:fa:47:
         35:b2:d3:69:d1:b3:18:e3:8f:32:d9:ae:f1:98:c4:a4:d1:a0:
         cf:d8:bf:34:29:a5:be:0b:10:19:f4:db:b4:5c:e8:85:92:78:
         3d:d8:ac:99:a5:42:1c:91:5f:1f:74:48:99:1f:e4:02:86:84:
         34:c8:32:df:7b:a5:c1:97:82:e4:c5:4b:54:f6:ca:45:05:99:
         8f:b0:e1:b0:58:9e:8d:69:ca:85:a6:0b:d7:d0:e9:9c:5c:c0:
         dc:a9:65:11:3a:15:05:31:c0:09:48:2d:56:15:16:a2:47:88:
         45:e6:f3:64:ab:36:b3:21:4c:03:78:6b:54:2e:07:96:7b:4c:
         44:0b:e7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:11:34 2025 by rpki-client