Route Origin Authorization
$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231332e302f32342d3234203d3e20333937373236.roa
File: 3231362e3134352e3231332e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier: w5/9kkgJJJcIIEcr8LtuUiYhDs+Ou7/dNkHU4NHJEj4=
Subject key identifier: D5:DC:68:91:C6:D3:40:31:B3:2A:99:22:44:61:0E:4D:09:05:12:70
Certificate issuer: /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial: 012D68D0EFC7A45FB0750D8ADFC40558B35A764E
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231332e302f32342d3234203d3e20333937373236.roa
Signing time: Fri 02 Aug 2024 11:24:26 +0000
ROA not before: Fri 02 Aug 2024 11:19:26 +0000
ROA not after: Fri 01 Aug 2025 11:24:26 +0000
asID: 397726
IP address blocks: 216.145.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 15 Apr 2025 00:28:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:2d:68:d0:ef:c7:a4:5f:b0:75:0d:8a:df:c4:05:58:b3:5a:76:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Validity
Not Before: Aug 2 11:19:26 2024 GMT
Not After : Aug 1 11:24:26 2025 GMT
Subject: CN=D5DC6891C6D34031B32A992244610E4D09051270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:89:91:74:48:3d:92:2b:a5:5e:27:7f:63:7b:
a1:11:78:17:73:74:86:20:ca:04:cd:98:31:6a:d1:
ea:15:97:f8:46:b9:06:70:f7:79:3b:f0:8d:0d:e3:
16:cd:6a:ba:a6:fa:e1:dd:67:d1:74:f7:f6:a3:f5:
e7:a0:9c:8b:6d:04:00:1a:67:38:b7:8b:ef:c6:27:
b5:5a:ee:bd:10:50:4a:9f:56:e0:80:8e:1d:2e:d7:
00:40:fb:82:23:13:47:e3:84:f7:63:82:33:a6:5a:
b9:0c:e0:ca:12:bf:95:9c:39:18:0b:53:9d:79:0e:
9b:dd:d4:9a:47:7f:49:5c:db:aa:63:97:f3:38:d4:
cb:2f:6f:80:f0:87:f4:ef:98:c6:1f:29:d0:4d:08:
90:76:8c:8d:35:fa:1f:4b:c4:98:fb:ec:5c:c6:6e:
e2:68:e7:a0:0c:6d:12:f6:db:49:8d:91:0b:a4:35:
91:35:92:b9:ee:2f:b6:6a:c9:af:44:55:48:a4:b4:
85:d6:6b:8f:1e:07:8a:a2:ac:a3:37:eb:7d:e5:70:
9d:d9:62:7d:ed:86:2b:96:46:bc:4a:f8:74:c0:2d:
f6:7b:d1:d7:81:6f:e8:48:04:b2:dd:6b:6e:14:13:
00:41:5f:40:04:91:a4:d6:d9:9d:b5:c2:2c:dc:92:
3f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DC:68:91:C6:D3:40:31:B3:2A:99:22:44:61:0E:4D:09:05:12:70
X509v3 Authority Key Identifier:
keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231332e302f32342d3234203d3e20333937373236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.145.213.0/24
Signature Algorithm: sha256WithRSAEncryption
03:44:8f:66:f4:53:e9:61:d0:0f:90:2b:aa:da:50:86:40:bc:
aa:a0:db:49:2b:78:96:bd:ef:f8:0b:99:85:d3:35:34:4e:e0:
f7:8e:10:c0:e8:4b:86:54:d6:0b:7c:d0:c3:a8:f6:f2:7f:57:
95:ca:ac:e8:51:22:d1:1f:0c:56:4b:25:f2:c4:ed:1f:b6:8a:
24:0f:bc:26:a9:1d:1c:d6:05:5f:b8:38:c3:0e:17:de:ed:a4:
ea:87:02:ca:9c:e3:1a:09:26:4f:e4:1f:97:78:5b:34:52:be:
3a:0d:5d:cb:ae:81:7e:4b:2b:c5:cb:33:05:46:f3:6b:40:d8:
d4:7c:98:29:91:c9:52:77:ce:91:b5:7a:0e:bf:f0:76:fa:a9:
e2:06:38:42:e5:fc:b3:f8:f7:51:d8:88:36:e6:6d:f7:ea:d0:
18:fc:72:19:e1:e4:5c:4c:a3:4b:99:b0:31:52:b9:0b:7b:46:
1b:6f:b5:1f:28:31:3f:65:ec:a0:d4:18:62:73:e8:40:03:aa:
a5:5c:7c:ed:dd:04:1c:0f:45:2f:55:c6:46:be:70:6f:a2:6a:
8f:53:55:01:fa:f1:3a:7a:78:22:8f:9e:f2:d7:71:42:dc:43:
d7:e7:2f:5d:da:f7:4b:55:c3:bb:f9:3e:9c:2d:b9:94:e4:09:
e9:98:34:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:04:07 2025 by rpki-client