Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133362e302f32332d3233203d3e20333937373236.roa
File:                     3137302e31302e3133362e302f32332d3233203d3e20333937373236.roa (raw, json)
Hash identifier:          r0EZCMWPSLDq+RrBKueiYnzL5A1wun2gRm4we7sgEEI=
Subject key identifier:   F5:93:7D:DA:1C:22:59:94:1B:D9:32:63:EF:E1:F5:4C:B5:6D:35:3C
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       66B40BFEFA70ABCA88BB832F1DAC8F9AAAC4B340
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133362e302f32332d3233203d3e20333937373236.roa
Signing time:             Fri 01 Sep 2023 11:14:27 +0000
ROA not before:           Fri 01 Sep 2023 11:09:27 +0000
ROA not after:            Fri 30 Aug 2024 11:14:27 +0000
asID:                     397726
IP address blocks:        170.10.136.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 00:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b4:0b:fe:fa:70:ab:ca:88:bb:83:2f:1d:ac:8f:9a:aa:c4:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:27 2023 GMT
            Not After : Aug 30 11:14:27 2024 GMT
        Subject: CN=F5937DDA1C2259941BD93263EFE1F54CB56D353C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:86:b9:52:2b:96:0e:0d:55:95:15:68:fc:1c:
                    27:46:9b:57:25:6e:99:59:9d:e2:9d:fa:76:3c:22:
                    c2:07:68:76:da:38:44:91:20:80:4e:85:96:c5:e6:
                    75:47:60:13:8b:d2:a0:52:42:28:7f:95:fc:e9:0e:
                    48:6a:25:9d:dc:3a:76:d0:c1:b7:9d:6d:0b:89:4a:
                    81:39:b5:2e:11:aa:10:d3:60:0a:85:2a:d6:d1:bc:
                    1e:56:8d:d6:d8:d0:87:e1:92:3d:f9:81:39:d6:d7:
                    0c:c9:01:0b:77:30:a2:6a:34:b6:2c:04:10:55:2d:
                    1b:ce:69:b5:f1:2c:32:da:0c:4d:7d:4f:74:0f:7f:
                    a2:f1:0b:22:df:b0:eb:1e:19:1c:b2:91:4e:77:a7:
                    28:0d:8d:24:da:d1:8b:38:e1:d1:97:46:67:5b:94:
                    6d:c1:9f:b5:c3:2b:d8:ab:eb:5d:37:64:5d:9e:bc:
                    e0:09:c5:05:66:55:ef:4a:49:64:ee:56:df:7e:45:
                    04:01:29:43:c3:2d:7b:66:0a:cb:55:c1:75:27:07:
                    a3:da:89:ed:d9:59:e7:0f:0f:f2:40:6d:72:35:6e:
                    1c:f4:70:bc:3a:c1:1c:cd:a5:03:a6:fb:01:3b:2e:
                    7e:73:04:e0:6f:13:68:a5:77:e2:91:96:c5:7a:e1:
                    a5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:93:7D:DA:1C:22:59:94:1B:D9:32:63:EF:E1:F5:4C:B5:6D:35:3C
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133362e302f32332d3233203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:da:f2:bb:ea:44:27:a7:ae:c2:53:cb:7a:73:de:eb:cd:76:
         f3:98:5c:00:74:07:42:e2:9a:89:2b:61:1e:2b:cc:20:c4:98:
         ec:19:61:8f:51:ed:ae:b8:46:81:b1:1f:c1:f4:54:a5:e0:5b:
         a9:b1:42:27:bf:7e:7a:4c:ac:92:00:8a:29:fa:1b:dd:c4:bf:
         a6:4b:84:ce:5f:9d:5b:d7:1b:ae:25:95:7b:31:33:91:b9:6a:
         79:fd:ea:5d:c3:c7:13:df:84:2c:f6:7b:cf:e6:8a:99:a6:51:
         d8:2c:26:bf:66:9d:fa:6a:2a:31:f7:cc:7e:3b:94:79:d3:5f:
         60:bb:aa:ed:a8:fc:a7:0b:44:4d:88:39:7c:82:c0:a5:a8:57:
         e3:92:05:a1:01:eb:c5:73:f5:82:d9:ed:9c:e2:9d:9e:f5:ac:
         9e:ce:f8:d2:89:86:b5:04:eb:20:cf:07:46:c6:11:69:da:8b:
         56:1a:2c:8d:3c:2b:a9:6a:e3:db:e5:74:ec:d7:db:2f:ee:68:
         2c:79:91:c1:25:36:30:24:62:1d:d8:08:8a:c4:7e:24:46:31:
         0a:b7:0d:ad:59:3b:74:1f:4d:cd:b5:b9:ee:d3:3a:85:a0:d4:
         5b:dc:a9:2a:02:d3:91:8f:17:c2:f7:da:12:de:5a:63:06:b0:
         ff:73:29:91
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIUZrQL/vpwq8qIu4MvHayPmqrEs0AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTI3WhcNMjQwODMwMTExNDI3
WjAzMTEwLwYDVQQDEyhGNTkzN0REQTFDMjI1OTk0MUJEOTMyNjNFRkUxRjU0Q0I1
NkQzNTNDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYa5UiuWDg1V
lRVo/BwnRptXJW6ZWZ3infp2PCLCB2h22jhEkSCAToWWxeZ1R2ATi9KgUkIof5X8
6Q5IaiWd3Dp20MG3nW0LiUqBObUuEaoQ02AKhSrW0bweVo3W2NCH4ZI9+YE51tcM
yQELdzCiajS2LAQQVS0bzmm18Swy2gxNfU90D3+i8Qsi37DrHhkcspFOd6coDY0k
2tGLOOHRl0ZnW5RtwZ+1wyvYq+tdN2RdnrzgCcUFZlXvSklk7lbffkUEASlDwy17
ZgrLVcF1Jwej2ont2VnnDw/yQG1yNW4c9HC8OsEczaUDpvsBOy5+cwTgbxNopXfi
kZbFeuGlUwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFPWTfdocIlmUG9kyY+/h9Uy1
bTU8MB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/
MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0
b3J5L0E5MTkyQTk4MDAwMC80LzMxMzczMDJlMzEzMDJlMzEzMzM2MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzMzOTM3MzczMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqgqIMA0GCSqG
SIb3DQEBCwUAA4IBAQAt2vK76kQnp67CU8t6c97rzXbzmFwAdAdC4pqJK2EeK8wg
xJjsGWGPUe2uuEaBsR/B9FSl4FupsUInv356TKySAIop+hvdxL+mS4TOX51b1xuu
JZV7MTORuWp5/epdw8cT34Qs9nvP5oqZplHYLCa/Zp36aiox98x+O5R5019gu6rt
qPynC0RNiDl8gsClqFfjkgWhAevFc/WC2e2c4p2e9ayezvjSiYa1BOsgzwdGxhFp
2otWGiyNPCupauPb5XTs19sv7mgseZHBJTYwJGId2AiKxH4kRjEKtw2tWTt0H03N
tbnu0zqFoNRb3KkqAtORjxfC99oS3lpjBrD/cymR
-----END CERTIFICATE-----
Generated at Thu Apr 25 01:06:14 2024 by rpki-client on console-ams.rpki-client.org