Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030313a3a2f34382d3438203d3e203330303331.roa
File:                     323632303a3133343a363030313a3a2f34382d3438203d3e203330303331.roa (raw, json)
Hash identifier:          JIPuiRnFO1oJhpJ5lJhMxmsmfVMyat4YYT/rr7vI6Kc=
Subject key identifier:   C8:7C:73:FE:09:30:2C:D4:89:39:2E:34:86:00:ED:8E:9D:19:4C:89
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       51A76A6FD5A28BDBB8B18B4E15F617D4FDCF7002
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030313a3a2f34382d3438203d3e203330303331.roa
Signing time:             Fri 04 Jul 2025 12:05:06 +0000
ROA not before:           Fri 04 Jul 2025 12:00:06 +0000
ROA not after:            Fri 03 Jul 2026 12:05:06 +0000
asID:                     30031
IP address blocks:        2620:134:6001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a7:6a:6f:d5:a2:8b:db:b8:b1:8b:4e:15:f6:17:d4:fd:cf:70:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:06 2025 GMT
            Not After : Jul  3 12:05:06 2026 GMT
        Subject: CN=C87C73FE09302CD489392E348600ED8E9D194C89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a2:ea:ea:dd:2c:e1:5d:c4:d7:f3:e0:22:e6:
                    11:04:af:23:a5:24:36:fb:8f:92:1e:e7:c1:df:0c:
                    85:57:cd:5f:c4:7b:cf:8b:27:b9:04:bb:cf:52:3a:
                    81:74:7d:a1:61:32:87:fb:25:ba:c5:2c:41:29:38:
                    0c:68:db:91:c2:8c:e9:9e:19:5b:e5:22:7e:80:26:
                    9a:e6:26:9c:ec:e5:3c:b0:d5:d9:fa:5a:e2:0f:fe:
                    5c:44:d2:9e:1f:ae:1d:d1:d6:bf:21:38:42:8a:54:
                    de:48:83:2a:b2:eb:94:65:70:48:10:48:88:03:44:
                    87:f1:c9:2d:16:1d:b9:f6:03:bf:03:e4:be:80:6a:
                    46:65:03:65:8b:34:ce:4b:b8:c5:93:08:af:f9:d1:
                    19:c7:69:0e:30:56:c3:b8:b9:8e:42:60:ef:40:18:
                    77:2f:f6:e3:9a:ff:70:82:0f:43:b5:e7:67:53:4a:
                    bb:02:f1:e1:89:71:0d:0e:0d:f5:93:d8:95:c6:5d:
                    e1:a9:c4:b9:ca:a1:cc:64:df:7f:ae:6d:9c:6f:29:
                    02:33:7f:bc:20:db:5e:bf:6c:ad:73:d9:84:9d:a9:
                    7c:22:88:55:d3:9e:87:cf:fa:40:95:35:d2:7d:2e:
                    e6:8d:c4:12:9d:3c:56:ac:48:7f:4a:57:75:41:0e:
                    50:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7C:73:FE:09:30:2C:D4:89:39:2E:34:86:00:ED:8E:9D:19:4C:89
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030313a3a2f34382d3438203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6001::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:c1:fa:9c:13:6f:35:6b:83:29:a8:c8:f2:81:6c:3c:54:00:
         25:5a:0f:8f:f3:c8:ef:8b:57:d9:35:d9:0e:d8:5c:95:62:be:
         c7:5d:2f:f2:70:d6:2f:d7:49:ea:c2:ff:4a:36:a5:9f:61:f6:
         12:22:fd:dc:fa:8f:56:60:8b:d5:9c:13:67:6d:48:f7:f6:c4:
         d9:91:d4:d9:97:b6:96:1b:07:95:0d:b8:11:4d:b1:b1:35:da:
         8c:c9:f5:84:b3:6a:32:93:18:16:a1:78:0a:23:0f:0f:27:a6:
         d0:f1:f2:91:42:46:ae:bd:ab:36:a7:5b:11:d6:83:b9:8c:14:
         3b:53:57:65:29:75:5a:b7:a5:04:5b:6d:cd:6c:fe:7e:55:b8:
         b4:ce:de:9b:0e:e7:11:f6:84:8e:c5:d5:da:b7:e6:a3:48:06:
         15:99:37:b9:58:e8:ce:45:ac:c4:da:0f:1f:55:ae:62:e0:aa:
         39:a2:49:62:3d:86:ee:4d:70:8b:13:8f:0d:ff:7b:09:1b:d8:
         80:61:ce:d9:88:dd:8d:2f:6a:4c:99:a5:94:b4:88:02:5f:f6:
         a5:20:eb:5d:7e:99:f0:39:46:e3:77:1f:79:fa:e9:1f:61:a2:
         87:78:c8:a4:6b:0e:41:eb:39:bd:b9:62:79:40:78:bd:81:00:
         e3:81:0f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:40:02 2025 by rpki-client