Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030393a3a2f34382d3438203d3e203330303331.roa
File:                     323632303a3133343a363030393a3a2f34382d3438203d3e203330303331.roa (raw, json)
Hash identifier:          8XO4oGhFn257OPT7GhYpHl3GIR6362JuFkK+KsbAO0c=
Subject key identifier:   5E:DB:50:59:46:F5:99:B7:62:75:9B:E2:A5:17:62:27:4C:EB:0D:C8
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       2B381141C9CAC8E2613109654E57CD4B536EFF23
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030393a3a2f34382d3438203d3e203330303331.roa
Signing time:             Fri 04 Jul 2025 12:05:06 +0000
ROA not before:           Fri 04 Jul 2025 12:00:06 +0000
ROA not after:            Fri 03 Jul 2026 12:05:06 +0000
asID:                     30031
IP address blocks:        2620:134:6009::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:42:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:38:11:41:c9:ca:c8:e2:61:31:09:65:4e:57:cd:4b:53:6e:ff:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:06 2025 GMT
            Not After : Jul  3 12:05:06 2026 GMT
        Subject: CN=5EDB505946F599B762759BE2A51762274CEB0DC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8f:d2:7c:48:87:99:5d:69:8f:87:43:0f:94:
                    8f:f1:ea:98:81:95:d4:0d:07:7b:91:46:f4:d7:0e:
                    b8:c0:59:0d:c3:d4:90:08:10:2b:4e:27:e3:e1:e3:
                    b1:a8:6b:4d:3e:e1:53:b5:83:46:d7:99:d1:41:62:
                    bb:94:19:75:2f:04:2f:f4:0b:eb:2b:79:97:37:4e:
                    f5:c4:9d:7f:6d:97:58:07:43:f2:25:c3:8d:8d:39:
                    9a:7e:14:eb:06:25:2f:70:4d:d0:a9:13:c7:5a:df:
                    16:1d:c6:23:eb:40:1d:37:54:07:ea:03:95:b8:94:
                    44:16:67:98:2b:f8:4e:80:1c:6f:bf:6c:84:3f:41:
                    7d:e6:59:59:c5:83:2f:be:43:76:aa:91:84:92:b3:
                    95:3e:61:9e:b4:1d:33:e2:d1:d8:8d:29:cb:98:17:
                    95:5c:41:3a:4b:f7:63:73:fc:96:7f:0c:f9:9f:27:
                    7a:71:09:22:0b:50:51:8a:7e:b6:07:73:c9:b2:13:
                    8d:40:89:a5:31:85:ed:4e:67:be:90:19:de:3d:6e:
                    48:b0:8e:ab:b9:23:8c:79:23:d3:20:20:78:e2:37:
                    33:9d:83:ba:c1:80:08:69:c0:bf:05:80:ec:1d:22:
                    6a:33:ab:ce:32:27:e4:a4:9c:df:77:f5:1b:fb:2d:
                    a3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DB:50:59:46:F5:99:B7:62:75:9B:E2:A5:17:62:27:4C:EB:0D:C8
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030393a3a2f34382d3438203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6009::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:4c:a7:d4:df:d5:00:e4:7a:10:a8:3b:0b:54:dc:7d:fc:9e:
         54:04:04:c4:57:57:1f:50:b2:95:44:b1:fe:65:55:b9:3b:eb:
         04:9c:da:5a:80:19:b7:83:bb:01:d9:63:03:b2:2b:3c:9b:4d:
         68:5c:ca:80:68:74:03:8c:ed:38:16:b7:56:ab:bd:07:b1:99:
         3b:68:28:56:7c:10:d7:b3:e5:34:91:59:65:6e:c4:f7:24:4b:
         77:91:73:53:da:c5:03:60:e8:c6:b7:6e:fd:10:62:cf:7f:18:
         4a:67:9f:7c:ac:6a:60:3e:87:1b:c9:30:72:0b:94:cc:02:0c:
         ce:06:37:1e:1c:7c:93:95:37:4b:27:89:b1:6f:3f:f8:bd:1c:
         12:38:7a:49:31:b5:48:ba:2c:27:81:c3:9b:df:38:fe:1d:ad:
         b8:85:0e:1c:9f:c1:02:99:9b:cd:8a:7f:3b:d0:96:fb:a1:15:
         15:6a:7c:9d:54:e9:ac:86:eb:3a:fc:ac:d0:c5:20:4d:7d:d4:
         39:11:c7:0f:73:dc:91:83:9a:40:ed:eb:cd:6f:87:88:86:2a:
         a9:ff:f7:ad:72:45:f6:76:0e:cd:fb:d9:e5:5d:41:5c:b2:2f:
         e1:8a:e0:47:05:0b:b4:49:b6:14:67:4d:3e:7b:f9:89:79:2c:
         29:6d:e7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 12:03:45 2025 by rpki-client