Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030333a3a2f34382d3438203d3e203330303331.roa
File:                     323632303a3133343a363030333a3a2f34382d3438203d3e203330303331.roa (raw, json)
Hash identifier:          VJH2iNcCgI6hOXcDfBX3M2BN5nTacabEQBdiJTe6uhY=
Subject key identifier:   63:CC:3A:75:3B:44:55:10:99:F9:59:69:6C:75:AE:63:FF:DF:EF:DA
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       7A470D49439EE2E360CED868A09ECC43BDA585D1
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030333a3a2f34382d3438203d3e203330303331.roa
Signing time:             Fri 04 Jul 2025 12:05:05 +0000
ROA not before:           Fri 04 Jul 2025 12:00:05 +0000
ROA not after:            Fri 03 Jul 2026 12:05:05 +0000
asID:                     30031
IP address blocks:        2620:134:6003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 12:34:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:47:0d:49:43:9e:e2:e3:60:ce:d8:68:a0:9e:cc:43:bd:a5:85:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:05 2025 GMT
            Not After : Jul  3 12:05:05 2026 GMT
        Subject: CN=63CC3A753B44551099F959696C75AE63FFDFEFDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:84:23:e0:4d:b3:78:32:a1:ce:72:42:48:b9:
                    b8:7d:46:c3:f9:3e:0d:23:ff:68:75:24:19:03:6f:
                    3d:7f:a1:6d:15:9a:65:c6:71:58:f5:b0:78:8d:b1:
                    7b:b7:6a:95:f8:69:75:a3:36:4c:c6:00:e7:4e:04:
                    0c:71:6b:e9:fc:28:85:7c:79:6f:63:ff:70:cc:12:
                    98:83:80:f6:6f:89:71:f5:e7:ec:71:57:0e:8c:ae:
                    5f:6a:23:66:81:67:12:d4:b6:1d:98:5c:27:fe:c9:
                    fd:9c:17:88:23:ac:e1:8b:a7:93:f0:2b:b9:a8:68:
                    b3:ad:6e:9d:c2:31:3f:2c:7e:f3:73:03:71:f2:96:
                    1c:4c:8a:9b:97:fa:19:21:e2:93:1d:ed:ca:e3:24:
                    87:5c:10:72:9e:0c:ae:f2:0b:92:55:96:81:89:8d:
                    b9:82:4c:e3:fc:8b:d7:15:9c:3d:cc:7d:a0:e9:f8:
                    62:71:b9:ed:65:2d:7b:97:fd:da:6f:00:ef:7d:2e:
                    15:15:13:70:07:75:e5:17:d0:5c:bb:c4:ec:36:79:
                    cb:4b:07:cd:26:55:58:83:b4:24:92:e4:13:3e:94:
                    bc:af:14:be:48:30:0b:4d:8c:11:15:12:0c:13:e2:
                    52:39:74:48:37:55:51:79:65:66:8a:7c:ef:fc:19:
                    d2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CC:3A:75:3B:44:55:10:99:F9:59:69:6C:75:AE:63:FF:DF:EF:DA
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030333a3a2f34382d3438203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6003::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:52:74:a6:07:56:12:b2:35:d1:8f:c2:fd:99:6f:22:c9:5c:
         59:37:2e:27:5d:9f:b6:3c:92:c9:e3:c3:34:8b:25:da:d1:78:
         0f:0b:37:c2:b7:27:b7:42:5a:1e:a1:5c:e3:c5:a0:7c:ae:3f:
         64:cb:9b:69:cc:1b:cd:d7:08:4a:cb:2f:a9:38:d7:57:e8:d8:
         8a:f1:3a:0e:e6:48:53:5e:e1:c5:45:c7:20:93:a7:ad:40:c9:
         58:72:74:4f:bb:1f:d5:b7:ac:4d:16:3a:7f:1a:b5:dd:a3:fd:
         4a:fe:8d:dd:c8:69:05:e3:5a:f8:3c:d4:7f:d5:b2:89:28:a5:
         f1:49:ea:97:61:f9:67:1c:98:a6:09:34:6d:e0:4f:8a:e2:bd:
         de:f4:b2:64:7b:70:3b:94:52:5a:2d:19:21:c7:78:53:75:70:
         27:6a:47:dd:c9:8f:aa:88:e8:c6:3e:bc:d5:55:ed:39:f8:e0:
         46:5c:48:60:bc:3c:b1:ce:62:df:07:c9:9f:a7:ee:e4:81:fc:
         0d:9f:09:22:e3:0f:78:43:37:74:dd:79:bb:6f:b2:78:f8:2e:
         fd:73:9a:3b:8b:8c:47:57:4b:cc:3e:85:7d:d3:87:28:47:ed:
         ff:66:fc:c3:fe:a7:9a:01:0e:81:4a:c2:db:fd:c5:00:d1:6e:
         53:1e:69:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:35:38 2025 by rpki-client