Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230392e302f32342d3234203d3e20333937373236.roa
File:                     3231362e3134352e3230392e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier:          nc8sPukOi3Gz6M+ggLny4/fdtwJJPehXJZ9OwHafbVU=
Subject key identifier:   B4:C0:86:94:03:C5:92:AB:7B:95:C4:38:E3:4F:6D:71:E9:9D:63:5D
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       51AAEE9CCB4F066496562C5AE3A02511B0CCD5A7
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230392e302f32342d3234203d3e20333937373236.roa
Signing time:             Fri 04 Jul 2025 12:05:08 +0000
ROA not before:           Fri 04 Jul 2025 12:00:08 +0000
ROA not after:            Fri 03 Jul 2026 12:05:08 +0000
asID:                     397726
IP address blocks:        216.145.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:aa:ee:9c:cb:4f:06:64:96:56:2c:5a:e3:a0:25:11:b0:cc:d5:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:08 2025 GMT
            Not After : Jul  3 12:05:08 2026 GMT
        Subject: CN=B4C0869403C592AB7B95C438E34F6D71E99D635D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6e:32:1b:d9:f6:60:ad:7c:69:e2:f7:76:01:
                    34:ef:67:2e:94:12:2e:6d:e7:2e:91:da:3b:ea:69:
                    d5:ff:70:ac:f1:5b:14:26:43:24:16:d0:de:9d:2f:
                    e4:a0:d0:e8:88:e9:26:77:ed:97:a4:fb:bf:22:27:
                    05:dc:f7:b1:aa:2b:81:2c:c9:15:59:44:a9:88:7c:
                    73:59:c7:1c:22:6d:fa:5e:24:f4:29:73:22:dc:3f:
                    ed:65:e9:41:9d:ba:6c:6d:01:57:72:35:b6:2d:2b:
                    a2:49:c2:78:0d:e4:c6:17:4a:77:8c:2d:c6:0e:13:
                    b2:01:4f:98:97:ea:38:69:19:35:6f:ec:cf:64:17:
                    29:63:ad:d0:c2:b4:b0:48:8e:a4:8f:0e:44:a4:cc:
                    0b:31:c4:6a:8c:eb:87:31:05:56:a9:ad:e5:0c:e0:
                    d4:cd:13:77:2e:b5:fc:9f:46:13:5a:0c:59:70:66:
                    9a:37:b5:e2:8f:3a:17:59:a8:e0:c0:cd:1e:2a:49:
                    33:aa:01:53:4b:ca:09:ea:07:b3:0a:c4:59:e9:3d:
                    09:d4:c6:d9:a1:70:2e:39:4f:f4:95:0c:dc:fa:e5:
                    6a:ae:99:be:1d:07:a8:d0:4c:4a:0c:99:ed:68:b9:
                    51:82:1f:40:fa:66:a9:43:7e:fb:7d:49:38:84:26:
                    83:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:C0:86:94:03:C5:92:AB:7B:95:C4:38:E3:4F:6D:71:E9:9D:63:5D
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230392e302f32342d3234203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:fb:0b:59:32:e2:68:9e:13:95:f5:80:de:33:11:04:cc:8d:
         2d:23:97:2c:3b:b6:bd:d6:b2:ef:e7:3a:3b:46:fb:78:a2:c7:
         86:54:66:50:0e:7e:1a:41:71:60:19:54:4b:02:fa:d7:af:4c:
         67:e3:53:d4:63:4f:02:26:10:3c:0e:cf:b9:ee:68:cc:24:3e:
         4a:94:f7:de:91:22:5f:9f:53:5d:e4:65:b8:98:6a:33:26:d5:
         6f:39:e7:7b:03:7b:74:bc:ec:e8:db:4f:83:25:e7:8e:7e:6a:
         1e:2d:f3:89:1a:29:f6:ba:5a:ea:ec:99:96:9d:20:3e:ec:5e:
         7c:a1:7d:fc:0c:53:a5:60:f6:6b:cb:56:b7:59:cd:3f:e7:29:
         34:ea:77:84:37:65:a9:ae:6c:52:fd:82:d0:98:17:c2:ac:5c:
         e6:4b:7c:09:01:32:4f:d3:09:14:51:e5:0d:ee:81:2d:d9:43:
         91:e3:fc:e2:58:57:02:57:96:ec:90:6a:0f:40:ed:51:4a:36:
         b0:47:f2:37:12:6f:62:7a:6b:d6:01:d7:ad:8e:78:38:81:fe:
         be:36:63:6f:e4:f7:0b:9c:af:3e:84:d7:83:75:c1:ff:c2:47:
         74:6e:4e:6b:2f:14:a7:79:a0:3c:c0:7f:02:c5:95:dd:e2:62:
         4b:e2:cd:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:17:05 2025 by rpki-client