Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231302e302f32342d3234203d3e20333937373236.roa
File:                     3231362e3134352e3231302e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier:          655c7hw97QXKEEGXuEC3sSj0xUyZzfQbL8RKq1d0pHA=
Subject key identifier:   E2:EA:06:C4:ED:EC:B2:36:0C:9C:C2:EC:3D:14:29:D1:96:BD:E7:EB
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       1CC361EDDB1493FC090468351F7EB37E6FD41934
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231302e302f32342d3234203d3e20333937373236.roa
Signing time:             Fri 04 Jul 2025 12:05:03 +0000
ROA not before:           Fri 04 Jul 2025 12:00:03 +0000
ROA not after:            Fri 03 Jul 2026 12:05:03 +0000
asID:                     397726
IP address blocks:        216.145.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c3:61:ed:db:14:93:fc:09:04:68:35:1f:7e:b3:7e:6f:d4:19:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:03 2025 GMT
            Not After : Jul  3 12:05:03 2026 GMT
        Subject: CN=E2EA06C4EDECB2360C9CC2EC3D1429D196BDE7EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cc:1e:11:e1:b0:bd:d4:3a:22:da:87:1f:fb:
                    c1:6a:e5:f7:b4:41:19:92:1b:e2:63:04:57:72:38:
                    aa:3a:84:e7:0e:01:0f:91:7b:7c:24:44:43:b6:b9:
                    2e:b3:9f:fa:d2:b7:6c:98:65:41:a5:a9:f0:84:b4:
                    fd:a1:18:34:60:42:37:4d:78:aa:66:65:8d:80:f6:
                    7f:fa:7d:d4:63:6b:3c:54:32:3e:63:97:b8:0f:a5:
                    fe:72:80:f7:49:8b:18:dd:d3:03:ce:42:a0:b1:34:
                    2f:23:b4:09:7e:75:6f:d8:73:9d:0f:20:76:17:37:
                    31:76:96:f9:83:c7:28:5b:3a:c8:d8:0a:7b:50:a7:
                    19:27:24:88:70:91:ff:f1:aa:f2:e9:d8:28:21:f3:
                    6e:6a:be:f1:b3:cf:6f:62:27:2c:5b:53:f0:40:d7:
                    29:30:75:bd:12:68:f1:04:b0:61:dc:7a:41:27:17:
                    99:c9:29:0f:cd:e6:23:a6:8f:4e:ba:3c:af:fc:89:
                    98:4d:b3:0c:10:0a:22:1d:ec:a6:ed:78:5e:19:2f:
                    e4:f3:af:69:f2:6c:e5:96:ab:ac:c8:22:12:e7:a6:
                    ec:32:dd:16:0a:ca:c6:6f:98:d3:7e:af:c2:0b:be:
                    12:d8:0c:1c:bb:7b:e1:b3:ff:fe:ad:54:20:07:30:
                    d6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:EA:06:C4:ED:EC:B2:36:0C:9C:C2:EC:3D:14:29:D1:96:BD:E7:EB
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231302e302f32342d3234203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:d1:0d:39:89:ee:98:a0:ae:c6:43:32:84:e8:78:6c:c3:b7:
         58:de:19:6a:d3:32:7a:76:38:4b:cf:17:6d:72:3a:50:27:fa:
         c8:11:e7:a6:4d:a7:88:f2:4d:40:cb:49:d2:6b:c6:3a:1f:db:
         be:d6:75:c8:c9:42:a1:4e:a8:e5:09:ad:78:40:f5:5d:52:f4:
         6c:3f:69:2c:4b:67:9c:1a:ce:ec:10:8a:8f:32:db:af:53:9a:
         2c:b0:85:15:db:fc:6e:e5:33:c7:8a:69:4a:cf:fe:e2:2c:20:
         fb:53:18:93:e6:87:5d:cd:09:34:25:42:69:fe:d5:92:86:16:
         99:5f:b2:1c:e7:a5:55:44:cc:db:d3:40:28:51:a5:3e:c8:68:
         e7:09:07:cc:c9:01:59:b7:06:3c:f2:6c:5b:14:1f:2f:10:a2:
         bf:e2:07:d6:0e:19:46:a5:96:65:08:f7:35:e0:e3:8b:6f:fe:
         75:3f:0f:b3:51:8f:47:a4:10:65:43:6a:75:bd:aa:2a:da:9a:
         81:4e:a0:f6:5c:45:ac:ec:31:3d:34:c8:f7:bd:17:67:be:7e:
         53:6f:df:9d:db:c8:77:b2:74:93:e0:39:89:bc:25:ba:bc:97:
         ed:9a:62:bb:29:fb:9b:f2:f0:6f:27:08:ef:c3:a3:36:e8:15:
         35:d3:f9:5b
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIUHMNh7dsUk/wJBGg1H36zfm/UGTQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjUwNzA0MTIwMDAzWhcNMjYwNzAzMTIwNTAz
WjAzMTEwLwYDVQQDEyhFMkVBMDZDNEVERUNCMjM2MEM5Q0MyRUMzRDE0MjlEMTk2
QkRFN0VCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsweEeGwvdQ6
ItqHH/vBauX3tEEZkhviYwRXcjiqOoTnDgEPkXt8JERDtrkus5/60rdsmGVBpanw
hLT9oRg0YEI3TXiqZmWNgPZ/+n3UY2s8VDI+Y5e4D6X+coD3SYsY3dMDzkKgsTQv
I7QJfnVv2HOdDyB2Fzcxdpb5g8coWzrI2Ap7UKcZJySIcJH/8ary6dgoIfNuar7x
s89vYicsW1PwQNcpMHW9EmjxBLBh3HpBJxeZySkPzeYjpo9Oujyv/ImYTbMMEAoi
Heym7XheGS/k869p8mzllqusyCIS56bsMt0WCsrGb5jTfq/CC74S2Awcu3vhs//+
rVQgBzDWawIDAQABo4ICjTCCAokwHQYDVR0OBBYEFOLqBsTt7LI2DJzC7D0UKdGW
vefrMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGRBggrBgEFBQcBCwSBhDCB
gTB/BggrBgEFBQcwC4ZzcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9BOTE5MkE5ODAwMDAvNC8zMjMxMzYyZTMxMzQzNTJlMzIzMTMwMmUzMDJm
MzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM3MzczMjM2LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHSMA0G
CSqGSIb3DQEBCwUAA4IBAQBg0Q05ie6YoK7GQzKE6Hhsw7dY3hlq0zJ6djhLzxdt
cjpQJ/rIEeemTaeI8k1Ay0nSa8Y6H9u+1nXIyUKhTqjlCa14QPVdUvRsP2ksS2ec
Gs7sEIqPMtuvU5ossIUV2/xu5TPHimlKz/7iLCD7UxiT5oddzQk0JUJp/tWShhaZ
X7Ic56VVRMzb00AoUaU+yGjnCQfMyQFZtwY88mxbFB8vEKK/4gfWDhlGpZZlCPc1
4OOLb/51Pw+zUY9HpBBlQ2p1vaoq2pqBTqD2XEWs7DE9NMj3vRdnvn5Tb9+d28h3
snST4DmJvCW6vJftmmK7Kfub8vBvJwjvw6M26BU10/lb
-----END CERTIFICATE-----
Generated at Sat Jul 26 12:16:25 2025 by rpki-client