Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231322e302f32332d3233203d3e20333937373236.roa
File:                     3231362e3134352e3231322e302f32332d3233203d3e20333937373236.roa (raw, json)
Hash identifier:          Sgup0SYTaRASTGoU4Itupm9PGAxdbdxRXLqD+P1foIU=
Subject key identifier:   C3:82:74:F1:2E:EE:0D:22:2B:A6:7C:6B:FC:15:95:CA:72:88:D5:3C
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       29C76FF774C965CC71655BF978622FAD33CDCE43
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231322e302f32332d3233203d3e20333937373236.roa
Signing time:             Fri 04 Jul 2025 12:05:06 +0000
ROA not before:           Fri 04 Jul 2025 12:00:06 +0000
ROA not after:            Fri 03 Jul 2026 12:05:06 +0000
asID:                     397726
IP address blocks:        216.145.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c7:6f:f7:74:c9:65:cc:71:65:5b:f9:78:62:2f:ad:33:cd:ce:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:06 2025 GMT
            Not After : Jul  3 12:05:06 2026 GMT
        Subject: CN=C38274F12EEE0D222BA67C6BFC1595CA7288D53C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e4:21:a3:70:c7:75:52:ff:6f:6b:1e:c0:c3:
                    fd:9e:c5:f7:f9:d9:b0:b7:b7:16:db:b0:23:60:6d:
                    bc:03:0b:40:14:33:e0:74:39:1a:1d:e7:72:e1:3c:
                    d7:3f:c5:f0:8e:ca:87:f4:c7:d2:f2:b4:41:15:c0:
                    aa:5b:3b:af:a7:f3:6b:ef:1e:f6:15:a6:c7:42:43:
                    76:49:18:db:3a:2c:49:bc:67:bd:f3:5e:a2:6d:87:
                    0c:b0:6e:77:61:3c:5e:84:81:76:10:a4:c2:30:6d:
                    7d:7f:00:b7:69:72:34:51:84:48:fa:d1:31:10:6b:
                    1f:89:a4:92:7c:2c:93:2d:e3:ba:3f:7d:51:aa:65:
                    7c:eb:5a:4f:51:0e:ac:58:3a:6b:31:88:51:78:c1:
                    66:35:8e:32:52:af:be:83:bc:0f:10:0a:97:f3:a5:
                    aa:63:93:98:52:e9:7e:ec:63:02:6a:fd:46:cf:7f:
                    a4:cc:44:b9:25:c6:9e:04:b0:ff:95:03:b7:2b:51:
                    b8:dd:91:04:9a:f7:f8:ad:ee:85:d8:21:c8:f8:cd:
                    47:25:58:ce:08:31:29:63:ae:53:29:23:c9:c0:98:
                    76:25:69:96:80:f0:a0:8b:e2:83:c7:34:78:7e:7c:
                    40:0d:2f:76:3d:b6:72:da:5b:f8:f4:b4:5a:41:ca:
                    70:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:82:74:F1:2E:EE:0D:22:2B:A6:7C:6B:FC:15:95:CA:72:88:D5:3C
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231322e302f32332d3233203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:78:91:de:51:c2:64:8c:cc:e5:d5:42:ae:fd:ea:30:64:09:
         57:fd:ba:f2:d2:d6:aa:b4:9d:17:ef:df:80:23:f9:54:38:ad:
         10:de:93:32:9c:e8:0d:a4:d9:8e:e1:7d:b9:32:06:25:01:7c:
         48:2a:4e:ca:f5:c3:3f:d1:31:a2:32:7f:3a:20:38:fa:41:22:
         ef:cc:8f:90:db:78:c0:08:93:f0:2a:79:13:ab:3c:49:97:2e:
         c5:56:25:88:1c:0d:d9:08:73:53:22:70:c6:6a:e5:60:d7:ef:
         65:37:69:fe:33:9f:b2:38:c6:c2:af:7d:3c:9f:17:4a:cc:15:
         50:98:2e:98:53:16:d7:d5:be:b7:e2:0a:45:55:95:09:11:59:
         9d:62:83:78:91:e5:c8:34:af:58:0a:a6:0e:ee:73:da:e4:66:
         fa:2d:20:c9:6d:c0:cd:44:18:4d:e5:87:a6:fc:c9:ff:da:16:
         e2:b7:a8:af:1c:f7:b5:0a:18:51:b8:46:8d:a6:dc:3f:9b:42:
         8e:1b:8b:69:48:08:1f:08:68:85:28:db:8b:30:b6:08:a9:c7:
         79:77:18:f8:06:47:72:d5:85:23:55:16:0c:b6:25:87:e3:41:
         7c:18:03:dc:fd:7d:1f:2b:a5:b1:ca:e6:65:ec:00:55:4c:f4:
         38:b6:11:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:15:20 2025 by rpki-client