Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232332e302f32342d3234203d3e20333937373236.roa
File:                     3231362e3134352e3232332e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier:          Ib1FRpH1i2ruSaKWnQN0E7+8f1Yu/fBy+kRBqjC7kqA=
Subject key identifier:   EC:68:01:77:DF:24:A5:4D:3B:F9:37:84:D3:44:80:28:E0:98:E4:8B
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       629329B07D0E81210F713B3726BACF4B00EDE334
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232332e302f32342d3234203d3e20333937373236.roa
Signing time:             Fri 04 Jul 2025 12:05:09 +0000
ROA not before:           Fri 04 Jul 2025 12:00:09 +0000
ROA not after:            Fri 03 Jul 2026 12:05:09 +0000
asID:                     397726
IP address blocks:        216.145.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:93:29:b0:7d:0e:81:21:0f:71:3b:37:26:ba:cf:4b:00:ed:e3:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:09 2025 GMT
            Not After : Jul  3 12:05:09 2026 GMT
        Subject: CN=EC680177DF24A54D3BF93784D3448028E098E48B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fb:ae:da:93:78:b0:40:0f:4e:1f:cd:75:34:
                    d5:94:3e:0e:01:c1:3f:ff:7e:56:cf:90:25:ba:b1:
                    6e:cd:89:ea:04:81:29:71:f8:1e:ef:6d:8e:5e:ec:
                    04:73:c0:d9:0f:30:c1:e1:85:bd:7a:88:c4:40:e2:
                    da:ee:bc:ea:5a:69:28:f6:81:42:77:22:e9:00:db:
                    b5:94:8e:2c:8d:53:7a:25:ae:ac:50:89:e6:d1:06:
                    90:46:b0:58:48:45:22:da:a7:41:3a:9e:07:39:0c:
                    d4:2d:d4:39:24:ff:4f:62:eb:11:31:7e:d4:6d:09:
                    e1:8b:e4:ab:25:87:af:4f:e1:2f:6c:75:31:fb:68:
                    56:99:da:1d:d2:79:69:09:d6:d8:59:a6:2a:bb:ee:
                    a9:36:7c:82:31:d9:b4:fb:34:9e:3e:47:d5:3a:fb:
                    ca:15:58:31:a6:3c:fd:10:97:94:69:53:ec:08:bc:
                    88:76:e6:f4:9d:19:e8:b0:ac:b8:aa:3d:03:d0:81:
                    37:3b:e9:c2:7f:f5:a3:6a:bc:f3:c0:ad:9d:56:45:
                    a7:e2:54:8f:35:50:fd:14:41:a8:e6:8b:c5:4b:a4:
                    c7:a1:5f:b5:81:ff:d5:7c:c7:31:b7:ec:da:2b:14:
                    1b:f4:2d:f2:89:9a:df:d5:58:a4:30:f8:a1:41:2a:
                    5b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:68:01:77:DF:24:A5:4D:3B:F9:37:84:D3:44:80:28:E0:98:E4:8B
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232332e302f32342d3234203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:a2:6e:28:ba:be:f2:8f:e3:65:52:76:0b:b3:3e:a4:83:4e:
         a7:ee:04:bf:df:9b:91:04:39:a1:c1:1a:45:02:93:13:0b:ef:
         f2:94:da:49:9e:70:a8:d6:8b:8d:eb:b9:00:23:28:82:94:a3:
         77:db:39:98:3c:2f:a4:1b:a0:c7:0d:82:0f:5e:f2:98:d3:24:
         0b:62:36:f5:bd:fe:8b:82:0e:2f:77:f2:09:40:bc:dc:08:4b:
         55:db:20:bc:5c:00:8d:59:4f:b8:59:45:0b:09:60:c0:0e:39:
         d8:86:02:8d:b1:52:a4:14:6f:5f:17:78:c3:1d:2d:36:69:6e:
         d3:64:b5:03:aa:96:0f:5c:2b:08:cb:5c:c5:17:44:33:d9:70:
         94:68:f6:a4:79:8c:b8:a7:a1:58:d0:d3:b0:4b:0e:66:3a:5f:
         d9:3f:20:08:4c:53:4b:4b:a5:b7:7a:ea:57:c5:ce:55:82:ea:
         08:08:bf:7d:29:af:41:35:46:84:ed:91:a2:4c:bc:a2:46:ca:
         72:7c:81:3b:8b:55:d5:09:c2:b8:36:61:9d:9c:25:a4:26:93:
         04:36:51:bf:91:9d:f2:95:73:7c:1d:f3:2c:5d:db:61:06:c7:
         ee:07:3d:0f:d8:cc:9d:64:a0:c1:6e:10:f8:68:e6:38:9f:64:
         1d:5a:b2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:44:08 2025 by rpki-client