Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231322e302f32342d3234203d3e20333937373236.roa
File:                     3231362e3134352e3231322e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier:          doRIVEeJb/t6CUupYw/RaF1avFGIs7OvWmHFixMXchI=
Subject key identifier:   4E:D4:58:45:3B:31:B0:C5:E4:4E:70:03:DC:7E:31:FB:98:50:6A:34
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       57FCCBF390EFE004E9B6F3D2E4D5BA25DB2EDCA7
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231322e302f32342d3234203d3e20333937373236.roa
Signing time:             Fri 04 Jul 2025 12:05:06 +0000
ROA not before:           Fri 04 Jul 2025 12:00:06 +0000
ROA not after:            Fri 03 Jul 2026 12:05:06 +0000
asID:                     397726
IP address blocks:        216.145.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:fc:cb:f3:90:ef:e0:04:e9:b6:f3:d2:e4:d5:ba:25:db:2e:dc:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:06 2025 GMT
            Not After : Jul  3 12:05:06 2026 GMT
        Subject: CN=4ED458453B31B0C5E44E7003DC7E31FB98506A34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d2:c0:84:75:ef:01:09:8a:07:eb:ae:bd:40:
                    09:a4:b6:31:80:5a:2f:74:c9:c0:fc:f4:8a:4d:57:
                    e4:31:63:00:b5:0c:16:ce:54:ec:b1:4e:6d:43:f4:
                    6d:d0:43:af:cc:54:fe:9b:57:ec:b9:f2:b8:8a:af:
                    2c:8a:0f:b1:07:c6:8f:65:34:6d:f1:43:3d:0d:2f:
                    07:fc:b0:f1:ba:a0:70:f0:33:3f:ed:cd:5e:50:97:
                    ba:8b:c6:be:7b:5b:e2:14:03:00:1e:64:26:2b:1f:
                    dc:b3:12:17:71:0e:c6:28:8c:b1:10:a3:0e:2f:6e:
                    9b:37:83:c1:51:67:8d:8d:d8:b5:56:d3:1e:1b:b7:
                    af:d3:9d:e9:e5:eb:8a:58:44:bc:62:e4:5f:a6:e6:
                    15:ec:a1:03:fa:ad:e5:3d:27:1d:cb:d5:cc:dc:26:
                    aa:97:e6:2f:71:3f:41:ac:a6:07:65:25:15:54:10:
                    08:18:30:bc:bb:2c:29:e9:9c:fe:13:0d:39:0a:1b:
                    6f:80:24:02:84:33:66:90:d4:57:79:d8:15:b6:27:
                    d2:77:02:fc:42:80:a7:65:ff:07:98:ed:2e:3b:94:
                    95:48:9a:5f:60:cc:6b:4c:50:0a:7c:d9:2b:44:af:
                    d8:c9:ec:64:57:d5:d7:1d:49:35:00:c9:99:7f:74:
                    bf:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D4:58:45:3B:31:B0:C5:E4:4E:70:03:DC:7E:31:FB:98:50:6A:34
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231322e302f32342d3234203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:60:ba:e4:c9:d2:a2:d4:06:82:76:1b:48:48:45:a5:0c:09:
         75:34:4e:22:e2:d9:a7:9b:91:37:14:76:4b:31:7d:aa:31:4d:
         67:f3:69:c7:ea:42:20:2f:ed:38:68:ea:37:71:a3:d5:93:04:
         f0:ec:ac:06:a9:73:32:93:b1:52:99:b4:ef:1e:12:1e:e6:66:
         e0:5b:1b:75:58:8b:b8:a1:aa:01:d7:70:6b:0e:98:5d:4b:cc:
         3b:53:6b:e7:05:69:61:ae:23:5e:87:02:6d:c0:35:d6:83:24:
         09:7d:91:d2:f1:87:4c:21:48:7c:2a:72:b4:98:70:8f:aa:62:
         6d:45:d2:c9:43:dc:40:7e:21:15:9f:e1:db:92:75:16:1b:4b:
         71:1c:25:25:a9:1f:18:99:db:03:41:9d:14:b3:45:5b:5b:ee:
         d6:91:89:64:4a:2e:c2:2e:9d:7b:03:04:0c:f9:5b:f9:02:fb:
         ab:7d:28:74:a0:bb:55:b9:7f:d8:8b:c3:19:82:84:c5:bf:da:
         e9:6c:f5:00:ec:54:a5:8a:65:c4:08:36:6f:cf:55:3c:28:05:
         1c:db:6d:20:10:ef:bb:62:9f:e0:47:3d:76:60:88:d4:0e:e6:
         27:1a:e7:86:43:b1:37:5f:8d:92:13:7d:92:24:3c:d6:6a:7a:
         7a:91:f1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:16:32 2025 by rpki-client