Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231392e302f32342d3234203d3e203330303331.roa
File:                     3231362e3134352e3231392e302f32342d3234203d3e203330303331.roa (raw, json)
Hash identifier:          rA+75Cr9rTyvQ1VQNpQwqGwuDSDcyxVjAmTFJJKdeoI=
Subject key identifier:   B0:BD:F2:67:2F:1B:1C:53:B9:90:4B:3B:92:32:61:14:66:AC:79:DB
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       476113A73EAD55B45ADFD2E275E61098B177D2FF
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231392e302f32342d3234203d3e203330303331.roa
Signing time:             Fri 04 Jul 2025 12:05:07 +0000
ROA not before:           Fri 04 Jul 2025 12:00:07 +0000
ROA not after:            Fri 03 Jul 2026 12:05:07 +0000
asID:                     30031
IP address blocks:        216.145.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:61:13:a7:3e:ad:55:b4:5a:df:d2:e2:75:e6:10:98:b1:77:d2:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:07 2025 GMT
            Not After : Jul  3 12:05:07 2026 GMT
        Subject: CN=B0BDF2672F1B1C53B9904B3B9232611466AC79DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e2:17:ac:8b:2e:41:7b:9f:aa:06:8f:8a:f2:
                    e2:c2:5a:ac:28:0c:ea:b7:bb:43:53:a4:87:97:c1:
                    01:ae:55:0b:e1:ad:b4:3e:c2:f9:f7:24:ea:7e:e3:
                    50:db:b7:84:83:6f:05:f6:6d:46:56:cc:d3:48:89:
                    88:e9:eb:0a:56:2e:4f:9a:fa:09:a1:17:82:59:f5:
                    a5:81:b2:72:90:22:71:97:bc:92:16:cd:6b:1c:ac:
                    a0:46:00:76:c1:09:a7:d6:63:ed:83:f1:2c:7c:b6:
                    55:9f:5a:e9:c0:2e:b7:c9:b2:2c:b3:d7:3b:26:16:
                    4c:9b:f7:8b:fb:ee:b8:b6:7e:e2:95:ec:40:95:67:
                    78:1c:c1:9f:ba:6d:35:04:f9:6a:bf:67:30:24:eb:
                    ce:52:f9:ad:22:f0:de:60:dd:95:38:95:9f:45:5a:
                    44:19:47:34:5b:42:b7:bb:d7:a6:6c:35:c4:58:8d:
                    1a:0f:aa:7f:06:7d:91:4d:3d:c9:79:c5:b3:d0:9d:
                    c7:c2:71:bb:56:d8:43:5d:6f:56:18:86:d3:2b:18:
                    2d:92:58:f5:e1:2f:8c:4e:40:fe:dd:44:ba:a8:26:
                    8a:e4:ba:b9:5b:1a:b7:ab:83:5e:41:e6:ab:93:ee:
                    93:e8:84:65:bf:30:0e:c1:2e:08:41:72:23:d6:0a:
                    15:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BD:F2:67:2F:1B:1C:53:B9:90:4B:3B:92:32:61:14:66:AC:79:DB
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231392e302f32342d3234203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:f9:f2:19:87:91:f9:3b:dd:52:29:d6:43:47:b1:73:42:af:
         af:0f:00:5c:62:ba:d4:ed:b9:9d:75:44:34:37:81:de:3a:3d:
         58:28:cf:92:eb:6e:43:7c:e1:fe:dc:47:90:7c:6d:90:1b:af:
         2d:15:2d:b4:d6:ee:54:b4:29:d9:53:63:5d:65:f2:b7:9d:5f:
         d9:74:9b:3d:8b:1a:ae:12:e1:dc:6e:ab:11:61:61:11:53:32:
         1b:d8:34:88:16:3f:f7:e9:82:e7:ce:4a:84:a6:ce:8c:e5:28:
         92:e6:d5:55:7a:39:87:c7:81:5d:ac:1c:0d:08:6f:c0:18:3e:
         f1:86:6b:c0:45:ab:ac:c0:99:68:60:38:4b:1f:de:ac:07:77:
         b9:b9:8d:ff:a7:f7:e0:e9:a5:3d:35:5d:7a:de:57:c0:a9:c5:
         d7:a0:81:db:1e:b2:b4:b8:8e:37:23:2e:52:73:11:8f:c3:57:
         e3:ef:92:33:82:51:ce:5f:ce:cd:95:a9:38:9e:1f:7e:f5:cc:
         ea:35:95:28:b4:a6:c4:e9:3f:93:5e:c6:2a:a0:4e:54:67:97:
         17:d8:9d:bc:08:a2:ea:f0:68:79:6b:e2:c0:0f:51:d4:3d:41:
         d2:e4:ae:08:5b:4a:d7:b5:8b:ed:eb:57:76:82:12:2e:6a:38:
         e4:1f:0a:93
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIUR2ETpz6tVbRa39LideYQmLF30v8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjUwNzA0MTIwMDA3WhcNMjYwNzAzMTIwNTA3
WjAzMTEwLwYDVQQDEyhCMEJERjI2NzJGMUIxQzUzQjk5MDRCM0I5MjMyNjExNDY2
QUM3OURCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+IXrIsuQXuf
qgaPivLiwlqsKAzqt7tDU6SHl8EBrlUL4a20PsL59yTqfuNQ27eEg28F9m1GVszT
SImI6esKVi5PmvoJoReCWfWlgbJykCJxl7ySFs1rHKygRgB2wQmn1mPtg/EsfLZV
n1rpwC63ybIss9c7JhZMm/eL++64tn7ilexAlWd4HMGfum01BPlqv2cwJOvOUvmt
IvDeYN2VOJWfRVpEGUc0W0K3u9embDXEWI0aD6p/Bn2RTT3JecWz0J3HwnG7VthD
XW9WGIbTKxgtklj14S+MTkD+3US6qCaK5Lq5Wxq3q4NeQeark+6T6IRlvzAOwS4I
QXIj1goV0wIDAQABo4ICijCCAoYwHQYDVR0OBBYEFLC98mcvGxxTuZBLO5IyYRRm
rHnbMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/
MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0
b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMxMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHbMA0GCSqG
SIb3DQEBCwUAA4IBAQCS+fIZh5H5O91SKdZDR7FzQq+vDwBcYrrU7bmddUQ0N4He
Oj1YKM+S625DfOH+3EeQfG2QG68tFS201u5UtCnZU2NdZfK3nV/ZdJs9ixquEuHc
bqsRYWERUzIb2DSIFj/36YLnzkqEps6M5SiS5tVVejmHx4FdrBwNCG/AGD7xhmvA
RauswJloYDhLH96sB3e5uY3/p/fg6aU9NV163lfAqcXXoIHbHrK0uI43Iy5ScxGP
w1fj75IzglHOX87Nlak4nh9+9czqNZUotKbE6T+TXsYqoE5UZ5cX2J28CKLq8Gh5
a+LAD1HUPUHS5K4IW0rXtYvt61d2ghIuajjkHwqT
-----END CERTIFICATE-----
Generated at Sat Jul 26 12:15:26 2025 by rpki-client