Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231342e302f32342d3234203d3e20333937373236.roa
File:                     3231362e3134352e3231342e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier:          JwMpEHjr1DwNAv/+JYbEHp+5cD6oMW2cXpUXa94SGK0=
Subject key identifier:   C4:9A:1C:21:EE:6F:1B:3E:D3:16:3C:5C:64:BB:39:87:4E:DD:82:78
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       616823689A7254DD71319E9B0A53F4850AB13148
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231342e302f32342d3234203d3e20333937373236.roa
Signing time:             Fri 04 Jul 2025 12:05:05 +0000
ROA not before:           Fri 04 Jul 2025 12:00:05 +0000
ROA not after:            Fri 03 Jul 2026 12:05:05 +0000
asID:                     397726
IP address blocks:        216.145.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:68:23:68:9a:72:54:dd:71:31:9e:9b:0a:53:f4:85:0a:b1:31:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:05 2025 GMT
            Not After : Jul  3 12:05:05 2026 GMT
        Subject: CN=C49A1C21EE6F1B3ED3163C5C64BB39874EDD8278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:01:1b:24:35:90:79:84:ce:fd:f8:94:74:3b:
                    84:96:5b:78:37:87:6f:a5:2e:ff:7e:f2:24:e6:00:
                    b3:38:2d:8f:64:ae:dd:39:15:4a:01:3e:ac:38:72:
                    d7:3c:f2:3d:86:b6:f7:37:22:cb:86:f0:a5:9b:de:
                    4c:30:3a:50:c9:27:01:47:51:9a:00:24:c4:1a:7a:
                    c0:0f:fa:2a:f8:1f:f5:4a:14:81:39:cd:1d:5e:92:
                    04:e9:43:11:e1:37:27:46:00:fe:57:69:7b:1b:94:
                    26:36:88:67:f9:e9:cf:03:82:bf:ec:af:78:f1:2d:
                    50:30:7e:74:fb:43:5e:39:dd:de:ac:b8:36:cd:27:
                    df:7a:a8:4c:89:bb:1d:9d:68:55:9f:4b:a6:d3:58:
                    21:7b:e7:73:95:60:6b:91:fd:06:ab:8c:de:4e:e1:
                    97:34:ba:b1:fd:b2:2e:f9:d4:3c:0c:83:7c:11:9d:
                    f6:4c:52:50:b8:6e:73:36:41:bb:cc:10:a9:66:7f:
                    55:8b:fc:4e:20:6a:d8:c8:54:cb:9f:0b:91:d7:6f:
                    14:ec:66:fe:4b:a1:7c:39:39:5f:9e:60:95:4b:f2:
                    5f:ea:36:23:a0:ef:c7:91:2a:f6:c5:98:e2:1e:7c:
                    67:45:b5:e1:f7:7d:b9:37:c8:0d:e2:81:df:7a:8b:
                    09:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:9A:1C:21:EE:6F:1B:3E:D3:16:3C:5C:64:BB:39:87:4E:DD:82:78
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231342e302f32342d3234203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:39:3e:c1:32:b5:df:53:4a:24:22:d2:c6:11:73:0d:ce:a1:
         f8:e0:f3:82:22:9c:59:29:aa:26:d4:fc:b7:14:43:b7:d4:c5:
         a4:8a:09:35:71:30:8c:5c:35:97:4d:a2:37:a0:d1:1b:b9:8a:
         75:ea:3a:76:e6:e0:92:b4:a3:d2:1c:60:c2:b0:4e:63:42:a7:
         4c:07:62:7f:a9:a5:67:8b:3b:b5:e1:3c:b6:fa:59:4f:b9:a0:
         4e:3e:ac:2f:35:c6:10:b5:2e:74:22:87:d3:9a:3d:95:e7:cb:
         fa:89:7f:ba:dc:e5:58:03:15:24:9f:d0:45:8d:50:49:49:e6:
         87:93:86:bc:b3:50:55:14:62:33:db:1b:f7:7b:97:7c:ac:06:
         74:34:3c:1e:2e:94:bf:6d:9b:0b:53:d8:b0:70:04:20:cc:ce:
         46:d9:7d:00:19:06:28:4a:08:d8:92:18:03:85:04:ce:2c:d5:
         62:bb:be:77:85:16:5b:b4:c8:7a:e9:86:2d:a3:63:d7:35:05:
         a8:1a:9f:7c:40:6f:18:f2:c6:32:d2:1e:50:d6:e8:f9:23:70:
         0c:14:c2:e4:93:2f:b0:07:9b:0d:88:f0:4f:30:cc:77:c7:45:
         b7:fb:9d:fd:5d:49:9c:d3:2a:b4:9f:27:cf:c8:2e:33:ba:e4:
         31:58:b6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:17:07 2025 by rpki-client