Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030353a3a2f34382d3438203d3e20333937373236.roa
File:                     323632303a3133343a363030353a3a2f34382d3438203d3e20333937373236.roa (raw, json)
Hash identifier:          bXFdJXM9Lyo+CJwMrTlbVLwrfeSidkSczTmnL+tpqCg=
Subject key identifier:   87:2E:2A:46:95:48:23:93:46:1E:DF:0F:26:BC:75:04:9F:DB:39:73
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       52D92C2C300FF13A67E8DBA12EC8ED2AF302C56A
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030353a3a2f34382d3438203d3e20333937373236.roa
Signing time:             Fri 04 Jul 2025 12:05:07 +0000
ROA not before:           Fri 04 Jul 2025 12:00:07 +0000
ROA not after:            Fri 03 Jul 2026 12:05:07 +0000
asID:                     397726
IP address blocks:        2620:134:6005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:50:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:d9:2c:2c:30:0f:f1:3a:67:e8:db:a1:2e:c8:ed:2a:f3:02:c5:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:07 2025 GMT
            Not After : Jul  3 12:05:07 2026 GMT
        Subject: CN=872E2A4695482393461EDF0F26BC75049FDB3973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:06:e4:4c:f8:78:11:f0:61:f1:1e:5b:56:bf:
                    a8:b7:8d:de:88:9f:03:fd:ff:16:80:33:72:10:50:
                    1c:f3:e3:31:92:49:81:a0:76:c6:5d:b7:71:87:4d:
                    f7:2f:a8:df:e4:78:24:9e:51:20:ab:b8:8c:5d:6f:
                    c7:b1:29:7b:17:e7:b2:ee:b4:a6:a5:97:30:88:d7:
                    63:a5:a0:d7:b2:22:ab:21:5f:e9:10:9f:75:dd:ff:
                    f9:59:56:67:b4:22:34:6c:39:71:42:22:e1:f9:ae:
                    bb:22:44:84:58:c6:9f:30:58:bd:19:91:f0:07:1a:
                    94:a1:da:d8:2e:a7:1a:cf:66:78:bd:06:05:80:59:
                    8a:ae:86:61:08:d3:eb:52:7c:bc:7d:66:25:88:29:
                    d3:98:9f:ce:76:8a:40:d1:6a:ac:b4:f0:60:6a:9f:
                    c2:5c:7f:f4:9d:30:86:16:e4:2e:33:82:b9:b9:d0:
                    2e:39:d9:34:e8:2e:44:34:d1:c1:ad:fe:27:7b:09:
                    da:bd:ea:ed:18:dc:95:84:93:f7:80:0a:55:fc:f3:
                    b7:78:7c:d9:c4:76:c9:95:9b:87:48:3d:ac:be:59:
                    63:f2:8d:f9:3c:2b:80:5d:ab:8f:56:08:27:66:08:
                    ae:ee:38:29:7a:36:a0:9f:70:40:0c:d5:2c:21:d9:
                    2b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:2E:2A:46:95:48:23:93:46:1E:DF:0F:26:BC:75:04:9F:DB:39:73
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030353a3a2f34382d3438203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6005::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:75:aa:e6:84:6f:a6:8a:74:12:e8:7d:d6:c6:44:ca:eb:8f:
         7f:1b:39:3a:48:19:02:d3:dc:dc:dd:a2:e9:33:75:3b:78:f6:
         9d:c0:60:d9:aa:42:d2:d6:52:58:c1:e6:77:22:04:b8:97:04:
         a9:c6:5c:8b:02:dd:de:ed:28:a0:dd:15:ac:cf:de:a6:b7:0b:
         98:46:b8:6a:40:f2:59:ec:ba:9f:41:de:49:07:a0:c6:fa:4c:
         23:c1:93:eb:60:3c:04:d0:5a:c5:c1:47:6c:77:e9:f8:04:d1:
         cd:66:d3:01:f1:1f:cd:0b:0f:85:c2:18:07:45:08:73:cf:88:
         2a:c5:0a:d9:36:e0:78:67:52:07:ce:96:10:40:b5:f0:97:e2:
         d6:28:c6:87:7b:6e:52:14:0e:52:f6:50:f4:f2:b1:1a:8c:3f:
         7d:a0:4c:50:e6:c4:c9:e0:ee:cf:26:ba:de:40:7a:cf:1a:6f:
         72:3e:d9:0b:56:50:e7:d2:81:22:69:46:10:a4:29:dd:80:a9:
         e2:e5:68:5e:7e:33:d5:82:54:8a:d6:fd:4b:c8:09:16:bd:1a:
         19:ab:db:d2:ec:a9:b8:15:e5:c6:f3:ee:dd:ca:d3:21:35:cc:
         d0:7a:d3:c3:d2:4d:2f:45:df:04:6e:8e:ea:0a:6e:5a:7b:40:
         40:82:5b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:35:35 2025 by rpki-client