Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232302e302f32342d3234203d3e20333937373236.roa
File:                     3231362e3134352e3232302e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier:          PBtFxOdq0V3GLY1qJGf7Jxo15fxer+st9p98HnxnMH8=
Subject key identifier:   EB:85:A8:77:5D:F0:86:E6:B1:52:85:D6:15:E5:48:EB:CC:25:A2:5B
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       7DE117C338F8B902FC7F8A8D8D2B65E5E0F5101B
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232302e302f32342d3234203d3e20333937373236.roa
Signing time:             Fri 04 Jul 2025 12:05:09 +0000
ROA not before:           Fri 04 Jul 2025 12:00:09 +0000
ROA not after:            Fri 03 Jul 2026 12:05:09 +0000
asID:                     397726
IP address blocks:        216.145.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e1:17:c3:38:f8:b9:02:fc:7f:8a:8d:8d:2b:65:e5:e0:f5:10:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:09 2025 GMT
            Not After : Jul  3 12:05:09 2026 GMT
        Subject: CN=EB85A8775DF086E6B15285D615E548EBCC25A25B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5f:03:cb:b0:bc:60:cf:5f:d4:da:22:59:78:
                    38:57:cb:92:78:74:9f:da:92:7f:48:58:51:81:f6:
                    21:71:1c:5c:bd:f2:21:d1:a5:68:1a:aa:df:40:87:
                    f5:40:73:a8:b4:8b:04:aa:b1:47:70:35:73:fe:c0:
                    3a:3b:66:0a:c3:ac:5b:27:28:b8:a0:df:9b:95:e1:
                    d3:d0:cd:02:7e:29:b6:7d:fe:99:a5:dd:86:39:fa:
                    fd:21:68:da:90:69:b7:4d:f1:de:b2:0b:c5:ce:8f:
                    5c:0d:75:7b:1e:3b:93:9a:32:a1:9c:98:16:ba:1f:
                    52:a6:b0:3e:fe:b6:d3:14:b0:6e:02:4e:2b:c5:83:
                    9c:61:b8:7a:b8:5b:4e:2c:a7:2a:7a:b6:1b:d9:7f:
                    d7:76:8b:80:37:26:c3:d1:11:2b:86:26:bf:c9:fa:
                    59:96:21:70:8c:13:a4:cc:69:ae:e4:d2:02:2e:53:
                    46:71:89:e6:2c:4d:b0:01:95:80:0e:b3:88:49:50:
                    18:bd:4c:34:f4:40:8c:05:37:57:49:ff:c6:ae:78:
                    18:01:8a:b9:45:e8:0a:12:3d:27:29:49:23:14:2c:
                    8b:52:f3:97:e2:f3:16:94:2a:52:d0:da:8b:ef:d7:
                    b3:f0:0d:8a:66:c9:39:bd:f2:93:93:f0:80:d0:11:
                    75:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:85:A8:77:5D:F0:86:E6:B1:52:85:D6:15:E5:48:EB:CC:25:A2:5B
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232302e302f32342d3234203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:3a:47:cc:88:f3:63:90:0d:58:7e:cb:4c:16:77:6a:d0:07:
         34:ff:47:40:25:05:af:c7:9d:84:47:a1:97:5d:92:55:9b:c7:
         a6:68:bd:33:07:3f:00:5c:78:9e:58:0c:fd:a4:3c:31:a6:ba:
         1e:8b:e4:74:7d:c5:99:e2:7d:9f:13:c1:33:e8:40:31:a3:92:
         6d:ec:4c:4f:8b:83:20:93:80:d2:a1:f2:47:2f:f4:a1:52:f3:
         eb:8c:fe:68:c6:b4:e0:ba:69:4f:c1:8f:2d:51:dc:42:4b:ff:
         81:46:01:e0:90:7e:ef:22:a7:85:bf:c8:35:2b:d5:7e:f1:a7:
         75:58:47:84:75:ef:33:8e:cd:be:42:ae:43:cc:e6:a7:b9:e4:
         1d:24:eb:43:1a:4d:68:36:e5:89:64:3f:5b:d7:28:27:3e:5c:
         72:05:97:29:22:a1:9a:2b:51:a5:f5:07:24:36:b3:ad:9f:fa:
         93:2d:ca:75:fd:f4:8a:8c:ac:11:88:fd:07:c4:8e:85:e0:9c:
         21:b5:bd:33:fe:ce:98:c5:64:71:03:48:6f:e8:8e:84:7b:b3:
         3a:2d:3d:6c:0e:80:07:4a:f6:68:b4:b4:c7:be:7c:0b:d2:c3:
         ca:a1:c0:8d:04:b8:71:f6:10:97:5a:ae:e5:69:3d:9a:47:0b:
         ec:1c:74:c4
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIUfeEXwzj4uQL8f4qNjStl5eD1EBswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjUwNzA0MTIwMDA5WhcNMjYwNzAzMTIwNTA5
WjAzMTEwLwYDVQQDEyhFQjg1QTg3NzVERjA4NkU2QjE1Mjg1RDYxNUU1NDhFQkND
MjVBMjVCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl8Dy7C8YM9f
1NoiWXg4V8uSeHSf2pJ/SFhRgfYhcRxcvfIh0aVoGqrfQIf1QHOotIsEqrFHcDVz
/sA6O2YKw6xbJyi4oN+bleHT0M0Cfim2ff6Zpd2GOfr9IWjakGm3TfHesgvFzo9c
DXV7HjuTmjKhnJgWuh9SprA+/rbTFLBuAk4rxYOcYbh6uFtOLKcqerYb2X/XdouA
NybD0RErhia/yfpZliFwjBOkzGmu5NICLlNGcYnmLE2wAZWADrOISVAYvUw09ECM
BTdXSf/GrngYAYq5RegKEj0nKUkjFCyLUvOX4vMWlCpS0NqL79ez8A2KZsk5vfKT
k/CA0BF1DwIDAQABo4ICjTCCAokwHQYDVR0OBBYEFOuFqHdd8IbmsVKF1hXlSOvM
JaJbMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGRBggrBgEFBQcBCwSBhDCB
gTB/BggrBgEFBQcwC4ZzcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9BOTE5MkE5ODAwMDAvNC8zMjMxMzYyZTMxMzQzNTJlMzIzMjMwMmUzMDJm
MzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM3MzczMjM2LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHcMA0G
CSqGSIb3DQEBCwUAA4IBAQB8OkfMiPNjkA1YfstMFndq0Ac0/0dAJQWvx52ER6GX
XZJVm8emaL0zBz8AXHieWAz9pDwxproei+R0fcWZ4n2fE8Ez6EAxo5Jt7ExPi4Mg
k4DSofJHL/ShUvPrjP5oxrTgumlPwY8tUdxCS/+BRgHgkH7vIqeFv8g1K9V+8ad1
WEeEde8zjs2+Qq5DzOanueQdJOtDGk1oNuWJZD9b1ygnPlxyBZcpIqGaK1Gl9Qck
NrOtn/qTLcp1/fSKjKwRiP0HxI6F4Jwhtb0z/s6YxWRxA0hv6I6Ee7M6LT1sDoAH
SvZotLTHvnwL0sPKocCNBLhx9hCXWq7laT2aRwvsHHTE
-----END CERTIFICATE-----
Generated at Sat Jul 26 12:15:53 2025 by rpki-client