Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133342e302f32342d3234203d3e20313336373932.roa
File:                     3137302e31302e3133342e302f32342d3234203d3e20313336373932.roa (raw, json)
Hash identifier:          DI1btXADWda5LU94oH37gZC5WZF4h3skLa9WxWgnubA=
Subject key identifier:   62:8F:70:9D:1E:66:CA:65:D1:A4:92:14:91:68:74:C3:57:00:FE:92
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       111F1C46EBDE2BF32459C821FC1A2F52254A38C9
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133342e302f32342d3234203d3e20313336373932.roa
Signing time:             Fri 01 Sep 2023 11:14:31 +0000
ROA not before:           Fri 01 Sep 2023 11:09:31 +0000
ROA not after:            Fri 30 Aug 2024 11:14:31 +0000
asID:                     136792
IP address blocks:        170.10.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 10:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:1f:1c:46:eb:de:2b:f3:24:59:c8:21:fc:1a:2f:52:25:4a:38:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:31 2023 GMT
            Not After : Aug 30 11:14:31 2024 GMT
        Subject: CN=628F709D1E66CA65D1A49214916874C35700FE92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:04:2d:0d:35:39:69:fb:22:84:4b:9e:a2:75:
                    43:c5:1b:28:5e:24:ea:a6:aa:61:41:6c:41:6c:b8:
                    8d:d5:1a:56:8e:dc:5b:9c:34:64:11:34:08:7d:03:
                    95:be:55:e4:42:75:e1:a2:dd:3a:97:de:cd:9d:1e:
                    0f:4f:d3:90:37:d2:f4:5c:18:a1:4c:f6:bc:5a:4d:
                    30:86:6a:2d:04:8c:8c:de:7f:fe:51:d4:12:29:92:
                    64:d0:06:18:d0:2d:2a:00:28:53:76:7a:7d:b6:01:
                    ec:49:e2:fe:93:f8:7e:d4:41:17:5f:82:b3:d4:f1:
                    91:e3:3a:01:e0:e5:f2:6e:a1:96:07:21:46:7b:20:
                    17:3e:9e:55:c8:9e:b2:ba:59:0c:c8:24:8a:59:71:
                    29:16:0b:d8:41:ab:d9:8c:cf:92:36:ab:aa:bf:4f:
                    11:f3:50:56:98:3d:76:ed:99:1a:d0:c0:77:55:85:
                    7d:5a:eb:7a:81:d1:ce:c2:0f:d2:6e:ef:5e:f8:3b:
                    d5:bf:c5:5e:36:a1:ec:63:b9:54:a1:b9:f1:da:36:
                    64:13:1c:12:a7:d0:66:01:e7:df:31:39:df:b5:64:
                    e7:17:a5:9b:38:da:8a:1e:b5:b1:37:27:37:c6:40:
                    a8:8e:f0:8b:50:0e:5a:71:df:59:bf:90:53:6d:dc:
                    c6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8F:70:9D:1E:66:CA:65:D1:A4:92:14:91:68:74:C3:57:00:FE:92
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133342e302f32342d3234203d3e20313336373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:c7:20:18:7b:b2:50:5e:8c:03:64:0a:11:1b:0a:ff:3a:0c:
         db:57:ca:4e:f7:6b:4f:23:15:33:35:a0:ca:87:9e:db:93:c1:
         e4:6a:99:7b:c3:13:4c:af:42:8b:c1:9a:7a:44:89:61:7c:ed:
         6d:52:48:3d:c1:df:15:f4:6f:3c:86:d6:f3:be:a8:65:6b:07:
         d6:44:bd:c2:f5:29:a7:f7:75:fe:4f:39:c0:dd:fa:50:cd:94:
         51:ef:ce:9c:c5:65:a7:24:51:3e:c9:46:eb:9b:3a:d4:ee:6f:
         dc:9c:5d:6b:ec:a7:b8:89:b7:9b:24:e4:ae:0a:c0:7c:d1:4d:
         75:00:62:d8:f8:64:42:1b:57:04:74:2a:1a:77:7e:82:dd:77:
         55:e1:50:43:94:65:d0:4f:58:41:90:16:f4:9c:cb:f6:08:62:
         10:c6:0a:14:f1:39:40:b0:7c:f6:6b:f0:8b:af:83:34:0c:21:
         e5:56:58:49:1a:66:b2:c2:60:81:22:7f:85:50:25:63:e9:34:
         51:c8:13:5d:77:7b:cc:7d:cf:12:54:1e:f3:f7:78:0f:6d:92:
         df:2c:37:95:fa:7f:5b:5a:b2:9c:bf:31:a9:03:43:7a:39:6c:
         b7:04:8e:35:ba:e2:b4:cf:63:f3:c8:53:f3:5a:6d:c3:c6:e6:
         db:52:67:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 09:43:27 2024 by rpki-client on console-fra.rpki-client.org