Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030383a3a2f34382d3438203d3e203330303331.roa
File:                     323632303a3133343a363030383a3a2f34382d3438203d3e203330303331.roa (raw, json)
Hash identifier:          ayMJY+VgJRfiBbHS1IKvMww8i6olBP38WjPpBuRFz/4=
Subject key identifier:   8E:D8:49:CF:DB:7C:C4:29:E9:88:CD:26:F3:19:A7:07:B0:78:BE:A4
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       51A392C080B5D7AD40728FFA26747602019BECBC
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030383a3a2f34382d3438203d3e203330303331.roa
Signing time:             Fri 04 Jul 2025 12:05:10 +0000
ROA not before:           Fri 04 Jul 2025 12:00:10 +0000
ROA not after:            Fri 03 Jul 2026 12:05:10 +0000
asID:                     30031
IP address blocks:        2620:134:6008::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a3:92:c0:80:b5:d7:ad:40:72:8f:fa:26:74:76:02:01:9b:ec:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:10 2025 GMT
            Not After : Jul  3 12:05:10 2026 GMT
        Subject: CN=8ED849CFDB7CC429E988CD26F319A707B078BEA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:27:22:05:24:68:57:9f:3f:82:12:85:9a:28:
                    cb:a0:6e:aa:30:c9:54:c9:0e:eb:ce:9d:cb:5f:a8:
                    e2:1b:f5:e2:9d:5f:20:27:12:6a:89:b3:73:2b:55:
                    50:58:0d:58:dd:86:64:4b:4e:f4:d2:1f:15:59:dc:
                    76:3a:4f:d1:c1:a3:1c:b4:20:a4:6f:2d:80:f0:98:
                    4f:ac:e5:ef:fc:9d:55:43:5e:05:5e:26:ba:b6:89:
                    1d:a3:1c:ac:2a:b6:ed:1a:a1:26:d6:d4:50:4f:4e:
                    a1:d8:c1:7f:8e:a8:00:c2:ba:92:c5:96:86:79:e9:
                    fd:07:b4:28:d5:79:7f:db:ae:fb:04:1b:e9:b1:54:
                    01:e1:55:23:8b:10:54:eb:04:1e:5c:4f:a6:96:62:
                    a0:22:19:fb:1a:6b:e7:fd:9f:36:4f:19:5c:0e:72:
                    a2:35:69:af:0a:45:23:e9:4f:c1:3b:1a:2a:ad:89:
                    f0:3c:ef:e0:8c:5f:86:a9:06:95:44:5d:c4:be:08:
                    02:0a:6c:14:ac:a2:b1:79:45:9f:9a:9b:f8:75:4d:
                    a5:4f:6e:ba:52:e1:7a:66:a4:f3:1e:50:1e:29:43:
                    e4:86:e3:b9:64:5a:ec:b8:88:67:07:98:71:46:96:
                    7e:de:90:f6:c7:14:67:6a:f5:3e:5b:a2:43:fc:62:
                    49:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D8:49:CF:DB:7C:C4:29:E9:88:CD:26:F3:19:A7:07:B0:78:BE:A4
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030383a3a2f34382d3438203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6008::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:9d:7f:24:d8:0b:89:76:e5:b2:cf:ab:56:6f:74:49:43:19:
         22:3b:18:0f:f4:2b:8c:80:53:10:27:f4:22:ba:80:5a:47:48:
         15:ff:1b:44:98:71:11:22:5b:85:0c:e9:69:ec:aa:a4:5f:ca:
         e0:18:df:28:5a:cc:27:93:81:89:40:d2:9a:30:be:3c:58:77:
         4c:9c:0e:5c:31:30:1e:b1:9b:33:d5:c8:03:6a:95:57:cf:d6:
         55:a1:80:2a:74:c0:2e:6c:74:3a:a4:b2:77:de:52:e6:0f:a7:
         d6:f7:f1:47:14:e6:f5:5c:56:83:f2:93:0b:5f:dc:42:7f:24:
         e4:27:3a:a5:5e:db:00:4f:9f:26:d1:5b:b6:dc:3e:8d:1b:1e:
         3d:dc:60:8e:d2:5a:01:61:15:49:ee:53:ba:be:f7:09:42:2c:
         ae:8d:68:39:2a:23:4a:49:fc:4f:28:ef:d2:87:28:bd:34:d5:
         ab:e9:64:22:8e:e3:5f:58:e8:b0:d2:16:91:b8:fe:c3:77:b9:
         70:48:d3:c0:33:8f:65:e9:20:ce:e2:01:ab:9b:6a:9d:81:6e:
         8f:a1:91:2b:ed:2a:5d:5d:f7:7c:8c:89:8d:9c:a2:7a:a6:b6:
         7d:ab:ed:f8:d5:63:5e:10:ce:35:fc:93:88:b1:4e:ea:79:17:
         30:23:2c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:03:40 2025 by rpki-client