Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030363a3a2f34382d3438203d3e203333353338.roa
File:                     323632303a3133343a363030363a3a2f34382d3438203d3e203333353338.roa (raw, json)
Hash identifier:          qe/bi6uPBsPKdio17U2bDt4HbL/qVX7lmYoaGFETx0g=
Subject key identifier:   49:01:EC:67:CF:76:BC:C0:84:D1:42:BC:DA:1D:E2:F1:35:96:2F:C5
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       2A6DBC96C933DD50967F70F43410FB18D09B53E7
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030363a3a2f34382d3438203d3e203333353338.roa
Signing time:             Fri 04 Jul 2025 12:05:04 +0000
ROA not before:           Fri 04 Jul 2025 12:00:04 +0000
ROA not after:            Fri 03 Jul 2026 12:05:04 +0000
asID:                     33538
IP address blocks:        2620:134:6006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:6d:bc:96:c9:33:dd:50:96:7f:70:f4:34:10:fb:18:d0:9b:53:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:04 2025 GMT
            Not After : Jul  3 12:05:04 2026 GMT
        Subject: CN=4901EC67CF76BCC084D142BCDA1DE2F135962FC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c6:70:5e:f5:7e:00:ea:3c:f9:2a:88:c7:7b:
                    49:89:2e:87:95:bc:46:7c:22:8f:74:43:d6:69:39:
                    bf:95:1e:39:3b:67:3b:d5:b2:17:68:3d:d7:15:b8:
                    86:a4:24:20:08:e8:30:e5:ee:bb:04:00:7b:54:c5:
                    60:2c:24:17:4d:90:b2:0c:7d:bc:76:de:81:cf:82:
                    4b:ba:6f:9c:9a:68:72:6c:00:5a:89:79:c1:5d:10:
                    8e:e6:e7:62:4b:01:24:75:fe:ee:aa:e4:14:7a:82:
                    89:d1:ff:ac:f9:35:02:6c:d2:a0:7c:99:b7:31:65:
                    72:f6:5b:38:13:83:5d:e1:70:af:54:d1:a2:69:4a:
                    14:d5:b6:57:e4:5c:15:45:ac:48:10:15:9a:0d:ec:
                    83:d9:8e:c8:4c:75:7a:02:96:1b:85:b6:51:39:da:
                    24:6a:a5:41:11:33:60:9b:49:9e:7f:00:61:cc:e1:
                    af:85:00:dc:34:c4:81:2e:06:89:6a:32:4c:87:15:
                    7f:d7:a6:46:82:f3:56:9e:fa:02:8b:5e:bf:0f:de:
                    d4:94:08:10:b5:c6:cc:b3:c8:e8:5f:bc:21:29:16:
                    09:80:1a:5c:49:f3:ec:ef:87:e1:0b:13:53:24:2b:
                    b5:0d:26:31:91:aa:a7:84:a4:20:30:d3:f6:e2:e7:
                    44:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:01:EC:67:CF:76:BC:C0:84:D1:42:BC:DA:1D:E2:F1:35:96:2F:C5
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030363a3a2f34382d3438203d3e203333353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6006::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:df:77:eb:67:5e:1e:36:af:a3:e2:27:4d:e8:90:05:32:dd:
         59:57:0e:2c:54:54:32:24:f2:9e:06:04:4b:f3:da:a4:4c:6f:
         0a:2e:d7:13:e2:d5:ee:0e:cc:f4:4d:d2:57:d5:1f:f8:5e:ad:
         1f:ee:65:84:81:af:1e:41:73:9a:23:c8:66:74:15:ab:76:94:
         54:52:ef:9b:3d:5f:00:34:fe:6e:3a:df:7d:0e:4a:75:cc:e0:
         22:0c:ad:04:ca:ab:c8:c2:df:c4:54:4d:51:7c:5e:1e:a1:f5:
         3b:c5:4f:21:65:01:03:d8:c2:8a:77:25:52:4f:39:ea:d7:41:
         64:cc:02:0f:52:b5:18:b9:98:04:c7:b4:03:64:e9:33:cc:cb:
         de:12:7b:3c:13:0a:24:21:06:79:4d:ca:27:3d:3f:1f:3d:3b:
         11:47:16:6b:07:93:0e:3d:dd:10:45:fc:e0:bc:4d:17:4a:8a:
         ca:31:a4:a5:0d:ca:40:24:21:57:da:9d:5f:b4:aa:a4:7c:7c:
         31:9a:3c:64:65:06:55:79:5b:12:f0:73:32:d2:38:fd:bb:2e:
         bd:3f:7e:50:ea:d5:ce:63:2f:f9:78:41:40:99:15:d4:68:93:
         56:88:1b:44:59:f0:19:5a:ca:24:e1:23:c5:02:24:74:1b:98:
         70:15:dc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:52:56 2025 by rpki-client