Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230382e302f32332d3233203d3e20333937373236.roa
File:                     3231362e3134352e3230382e302f32332d3233203d3e20333937373236.roa (raw, json)
Hash identifier:          aK8KixKZNCfRIXY+lRSN7iXgh0/CisWY6W0RGVQo8Ec=
Subject key identifier:   39:9A:54:63:12:E0:C0:18:06:A3:89:75:55:8D:76:4B:03:38:C6:46
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       117E74D48ED0B820BBE537213FAD11C599BB1AD6
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230382e302f32332d3233203d3e20333937373236.roa
Signing time:             Fri 04 Jul 2025 12:05:08 +0000
ROA not before:           Fri 04 Jul 2025 12:00:08 +0000
ROA not after:            Fri 03 Jul 2026 12:05:08 +0000
asID:                     397726
IP address blocks:        216.145.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:7e:74:d4:8e:d0:b8:20:bb:e5:37:21:3f:ad:11:c5:99:bb:1a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:08 2025 GMT
            Not After : Jul  3 12:05:08 2026 GMT
        Subject: CN=399A546312E0C01806A38975558D764B0338C646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a4:37:aa:21:da:d9:ee:4c:ad:74:72:93:2a:
                    c2:b6:e4:9d:27:46:4a:08:34:eb:57:32:69:95:32:
                    2c:e3:56:31:fc:c2:dd:b3:8a:1a:c1:a4:cb:69:72:
                    3d:7c:7f:c5:ab:b5:a9:08:d2:ef:7f:c1:66:c2:10:
                    bb:db:62:42:aa:26:c6:dd:93:3d:a6:c6:2f:60:51:
                    a2:2f:55:6a:73:77:3a:0e:24:3e:55:a5:5f:31:b9:
                    02:9e:ee:c8:2c:99:a9:be:f5:b8:c9:72:a2:84:ae:
                    e8:e8:0e:4b:a8:b5:ad:2f:5e:0a:1a:fb:0e:4a:25:
                    5b:ef:d2:b0:f6:8a:52:4f:af:2a:59:3b:29:73:51:
                    28:6b:0b:95:55:b2:5b:44:96:1e:ba:81:82:1a:f1:
                    5e:a4:9a:f2:2b:08:dd:76:3d:0a:5c:a8:74:a8:40:
                    12:7f:e5:d9:0a:75:54:51:14:e2:a7:2d:c8:dc:14:
                    17:be:13:04:39:71:b1:a1:59:52:34:c5:a1:ad:a8:
                    6f:41:a8:28:12:0d:a5:3c:ed:e7:a6:1e:6e:0c:cb:
                    43:27:4a:b3:e7:6c:6a:3f:b8:e9:ca:62:91:fc:20:
                    e3:e9:0f:fd:d1:8d:20:cd:83:15:25:69:86:32:b8:
                    30:48:59:aa:6c:5e:b0:72:e4:d7:36:5d:94:40:0c:
                    27:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9A:54:63:12:E0:C0:18:06:A3:89:75:55:8D:76:4B:03:38:C6:46
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230382e302f32332d3233203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:3a:3c:aa:dd:19:30:6c:32:fe:50:b7:ac:1c:37:fc:0b:40:
         3c:75:95:5a:7b:3f:b5:eb:54:45:aa:c0:5b:f8:79:63:f2:fb:
         a9:f4:0c:09:20:13:d5:ec:cb:3e:36:f0:d4:3d:ec:fe:c1:ff:
         25:67:d8:12:58:27:a4:44:40:d5:eb:08:fe:6d:3a:13:f2:55:
         bc:bc:28:ef:29:70:cc:54:d5:9e:c3:8b:f6:2f:a9:5a:32:b1:
         3f:db:89:31:9c:6d:e9:bf:4c:a8:1c:da:dd:e8:e6:2e:2e:3e:
         96:5d:8e:de:15:dd:aa:e0:09:cc:0c:91:10:d6:64:51:c1:79:
         36:28:62:5b:6a:4e:74:7f:9f:6a:2a:91:29:e0:b6:bf:7b:2a:
         fc:43:88:24:4c:94:54:3e:33:3a:c3:ad:64:5c:52:45:16:8c:
         bd:bf:1e:62:bf:81:7d:e5:cd:9e:e6:79:18:f3:0f:e1:8a:c5:
         f0:40:c5:61:08:7c:3e:5b:29:35:29:08:e7:9c:b7:62:22:f1:
         37:4e:f3:a4:e5:50:bf:09:18:19:42:4d:c3:59:46:26:38:f4:
         d7:2b:a2:9e:55:23:c9:89:f7:40:14:8d:30:b5:e4:3f:e4:e3:
         3f:da:46:b7:29:b8:1b:55:40:d3:8b:40:4e:2c:dc:a0:f5:c3:
         2c:e1:aa:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:16:24 2025 by rpki-client