Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231302e302f32332d3233203d3e20333937373236.roa
File:                     3231362e3134352e3231302e302f32332d3233203d3e20333937373236.roa (raw, json)
Hash identifier:          XBbb95KKr4AYd1Et8IE1bBaHEm56qlMZpRnMFl1kv1E=
Subject key identifier:   00:BC:3C:B4:53:71:70:C4:3F:CF:5E:94:4F:DB:59:4D:BA:3E:41:FF
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       17FAEB5FAC9824F91441E0FF1C7BB841952CAC64
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231302e302f32332d3233203d3e20333937373236.roa
Signing time:             Fri 04 Jul 2025 12:05:10 +0000
ROA not before:           Fri 04 Jul 2025 12:00:10 +0000
ROA not after:            Fri 03 Jul 2026 12:05:10 +0000
asID:                     397726
IP address blocks:        216.145.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:fa:eb:5f:ac:98:24:f9:14:41:e0:ff:1c:7b:b8:41:95:2c:ac:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:10 2025 GMT
            Not After : Jul  3 12:05:10 2026 GMT
        Subject: CN=00BC3CB4537170C43FCF5E944FDB594DBA3E41FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b5:53:b3:4f:32:a3:2d:b5:d9:89:6d:00:da:
                    34:de:e7:01:29:46:85:32:2a:e9:55:ea:19:44:ea:
                    71:a6:9b:42:96:51:30:a5:f2:8e:7d:a5:33:0d:32:
                    1b:4a:a1:be:df:ce:36:7e:fb:ed:8c:03:cc:25:50:
                    2e:70:a9:9b:5f:63:15:a8:85:19:95:d8:6d:9b:bc:
                    43:62:31:bb:cd:15:23:05:96:1b:08:cf:4e:94:4c:
                    89:79:d4:3e:e9:16:cf:c6:a3:6d:79:71:d3:fc:30:
                    e5:7f:38:d6:b0:00:e0:22:9a:4a:af:94:78:db:5b:
                    5a:6d:c6:1c:e5:fc:a0:44:8a:cf:ea:0c:b0:96:7b:
                    95:14:93:db:cd:8f:3d:03:d6:ca:7c:41:1d:51:63:
                    ea:80:f4:ef:00:d4:ba:bd:d0:f6:f9:fe:2a:43:7d:
                    35:70:24:f4:f4:05:94:b2:5f:56:f4:47:35:4f:49:
                    c2:da:3d:3a:ac:9f:a5:d5:35:fe:04:94:25:cc:29:
                    29:c4:5d:22:ea:c1:5e:13:e7:26:1a:8d:a7:c5:53:
                    0d:44:b4:de:c7:35:5e:5a:01:e0:85:7b:6b:3a:19:
                    1e:e6:58:f9:ed:71:4e:36:4e:a8:71:f8:13:5f:7c:
                    05:48:a4:77:36:aa:c7:9b:86:53:86:78:b3:6a:1f:
                    03:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BC:3C:B4:53:71:70:C4:3F:CF:5E:94:4F:DB:59:4D:BA:3E:41:FF
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231302e302f32332d3233203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:9b:7a:0d:5d:9d:f0:0e:77:cb:c0:be:48:e9:7f:6a:14:71:
         0e:f8:34:aa:f1:8e:60:8c:ed:21:b3:4e:35:35:5c:5c:2e:d3:
         b7:76:12:85:ab:7a:c8:cd:1b:a5:8d:bb:1e:8c:e8:dc:46:47:
         d1:fa:c4:a8:49:6e:6a:c0:1b:84:c7:18:fe:8e:0d:33:54:30:
         13:7e:6f:5d:63:7d:04:ef:f8:bd:2c:f9:17:08:fc:10:0d:33:
         d3:94:20:19:13:cd:f5:98:a2:97:f0:14:1c:c8:8f:8b:16:f8:
         6d:37:44:db:9d:a9:b3:14:4e:55:94:a8:15:db:d6:76:79:08:
         21:ea:91:10:30:53:d2:35:3d:7c:92:b5:ab:b9:b5:17:b6:e6:
         34:b5:ca:25:be:ef:b1:2b:e9:52:3b:8b:ec:d7:11:8b:6d:d1:
         89:e9:24:ba:b6:78:5a:c2:43:f0:f9:20:13:c4:00:7f:99:6b:
         b2:3e:41:33:b4:86:2e:3f:a2:f3:6d:d9:26:90:0b:47:0c:79:
         b0:be:76:b6:d9:9c:bb:dc:5f:99:a8:38:49:99:8a:3a:e5:de:
         c1:99:6a:66:8b:c3:35:46:35:3e:0b:24:45:d7:7f:16:3f:56:
         67:21:4e:4a:1d:39:fa:6f:9b:51:2b:c9:aa:11:ac:ca:09:14:
         a4:05:6f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:15:56 2025 by rpki-client