Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203630343932.roa
File:                     3137302e31302e3134322e302f32342d3234203d3e203630343932.roa (raw, json)
Hash identifier:          yFdIyFvBhlRXnQKlPs8J+dtjHXSbYCZstl/aDCblPEQ=
Subject key identifier:   92:8D:52:FF:70:F7:85:39:2C:F9:F8:1A:4C:F4:DB:BA:87:03:2F:E0
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       114CA41F52EECF3567EEC6209F7E1AD37518885A
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203630343932.roa
Signing time:             Fri 04 Jul 2025 12:05:09 +0000
ROA not before:           Fri 04 Jul 2025 12:00:09 +0000
ROA not after:            Fri 03 Jul 2026 12:05:09 +0000
asID:                     60492
IP address blocks:        170.10.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:4c:a4:1f:52:ee:cf:35:67:ee:c6:20:9f:7e:1a:d3:75:18:88:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:09 2025 GMT
            Not After : Jul  3 12:05:09 2026 GMT
        Subject: CN=928D52FF70F785392CF9F81A4CF4DBBA87032FE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f5:73:a9:b7:69:e1:96:37:a7:2b:a9:b3:4d:
                    f0:32:a7:88:a0:83:3c:3a:7a:bf:fc:20:ab:90:2c:
                    f6:f4:ad:43:28:41:35:fe:75:2f:96:b1:76:48:fd:
                    fa:4f:c4:4d:bf:67:fb:01:80:f3:77:d7:f1:41:81:
                    d1:4e:c6:43:c4:08:be:63:cf:de:f7:4f:0b:e1:02:
                    55:0e:b4:f4:1c:24:75:a1:71:a1:46:3e:3e:de:ac:
                    7f:8d:3c:91:a4:a2:1c:36:68:0f:e0:cc:10:39:fc:
                    e3:b1:c7:cd:52:6d:7e:52:26:f2:63:85:aa:7b:ce:
                    40:19:03:ee:1c:bb:67:2b:e3:2a:04:04:6c:eb:0c:
                    c4:b5:74:19:9b:0e:c6:4f:1b:6f:66:9b:02:15:b9:
                    b4:50:15:12:34:b6:8f:a2:b2:2d:a6:70:77:98:3e:
                    7e:2c:17:27:fe:68:37:83:a3:7a:7a:54:86:a4:68:
                    c9:b1:4a:2b:fa:0e:6f:d1:a4:a9:5f:52:86:b4:65:
                    d2:8a:89:c2:bf:2a:0a:d3:c1:27:17:df:a4:da:82:
                    25:48:d2:c3:9a:2d:e0:d1:85:53:70:8e:59:02:fa:
                    8a:23:e3:20:a7:d2:94:33:98:33:c0:32:cc:bb:f8:
                    c1:fa:81:b8:97:8a:19:dc:55:5a:a7:b5:16:06:81:
                    09:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:8D:52:FF:70:F7:85:39:2C:F9:F8:1A:4C:F4:DB:BA:87:03:2F:E0
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203630343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:fa:cf:3c:4e:4c:f3:30:eb:28:58:b5:00:20:7e:c9:03:8d:
         f8:ce:5b:45:8f:71:de:96:91:a4:82:00:f4:8a:f8:12:10:b7:
         87:57:73:93:51:5c:2a:b5:a3:e7:c5:3f:79:ac:c2:06:ed:7a:
         e8:63:8a:ec:bc:c8:2f:ba:63:60:18:60:b4:df:e0:69:1b:c1:
         00:c1:c3:15:27:eb:6f:7b:b5:ba:1b:73:f8:aa:4e:32:e8:a4:
         8b:34:c8:34:3e:39:ec:80:44:30:fd:de:1f:78:e4:a8:37:4d:
         7d:7b:8f:4c:31:2f:8c:f0:a3:31:f1:51:71:3a:2f:07:36:18:
         15:ff:0d:9b:2f:b9:c5:ee:05:ad:d9:5c:8e:1d:48:1d:0e:3b:
         16:cb:09:a6:6b:fa:89:40:df:a8:a5:e6:3d:f8:73:0b:80:29:
         5c:e6:7a:a5:1b:f5:53:5f:49:1c:16:68:20:39:ea:3f:98:49:
         4b:f5:fc:e8:f4:5c:d4:b0:cd:92:7e:40:0e:cc:39:7e:73:cb:
         86:06:8f:bd:e9:01:99:74:5a:88:02:02:a1:63:0f:c2:26:8d:
         86:6d:66:6e:3d:f4:3d:c3:cb:b7:da:bc:0a:ae:d0:0a:0a:f7:
         08:11:8e:e5:8d:b2:03:8c:d0:75:4f:a6:74:a4:f0:99:4f:a3:
         c6:7b:78:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:11:26 2025 by rpki-client