Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e20313336373932.roa
File:                     3137302e31302e3134322e302f32342d3234203d3e20313336373932.roa (raw, json)
Hash identifier:          0aHmFE8Kpm39YKpL7BVXJPhvd9cK7u0W4s+u+h4H8CI=
Subject key identifier:   47:54:84:3D:65:A2:1B:4D:D4:6D:D5:AD:E9:83:A1:75:FD:FF:74:75
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       133CA6E162CEDAE19F5E25D2433FD515F2655F1E
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e20313336373932.roa
Signing time:             Fri 01 Sep 2023 11:14:28 +0000
ROA not before:           Fri 01 Sep 2023 11:09:28 +0000
ROA not after:            Fri 30 Aug 2024 11:14:28 +0000
asID:                     136792
IP address blocks:        170.10.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 10:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:3c:a6:e1:62:ce:da:e1:9f:5e:25:d2:43:3f:d5:15:f2:65:5f:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:28 2023 GMT
            Not After : Aug 30 11:14:28 2024 GMT
        Subject: CN=4754843D65A21B4DD46DD5ADE983A175FDFF7475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:81:23:9e:ce:41:2f:d4:13:c8:d9:c0:a9:25:
                    cd:a0:42:68:50:16:b7:01:44:9f:39:c9:db:e3:ab:
                    8d:13:0e:1c:f3:01:84:ad:57:26:9e:22:c5:73:b8:
                    a6:fe:86:c4:6b:01:fc:04:ab:a0:c0:3b:50:a2:5a:
                    90:b9:0e:f7:50:28:4c:db:a3:8e:f3:b8:53:7d:02:
                    c5:97:59:eb:01:1c:a9:31:79:8d:ee:62:1a:27:57:
                    93:08:4d:52:ee:5d:c6:bb:4e:e6:06:fd:e4:c6:ef:
                    24:e8:89:99:86:0d:f3:94:75:95:73:f4:de:98:db:
                    ea:2f:ec:dc:7c:43:a5:2b:3b:72:09:29:ac:00:74:
                    ca:51:15:4a:ac:0d:1a:af:72:29:91:9d:10:be:2b:
                    63:bc:76:df:35:30:67:35:63:20:49:84:43:ec:22:
                    6a:cf:c4:46:6f:dc:78:b7:1e:0a:7f:a8:79:89:a8:
                    5f:d2:0b:bd:cc:ad:91:fd:81:10:80:0e:7b:7d:1e:
                    e7:ea:2a:85:74:83:e5:41:20:bb:de:ce:db:6d:56:
                    3f:73:34:45:30:d7:25:84:bd:9b:e5:a1:29:69:a4:
                    57:b8:6f:45:b5:e0:c2:eb:f3:24:3b:2d:45:dc:62:
                    7e:09:82:9a:63:14:aa:b9:7b:fd:eb:b4:91:65:ba:
                    ab:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:54:84:3D:65:A2:1B:4D:D4:6D:D5:AD:E9:83:A1:75:FD:FF:74:75
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e20313336373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:f1:39:5d:7a:49:c4:44:66:f6:ce:a8:3c:ac:e7:73:10:2f:
         ad:e9:1d:0e:df:37:ab:a7:61:b3:b9:62:bb:60:c6:1d:a7:ac:
         f9:67:18:21:5f:31:51:d9:e2:f4:75:a7:ed:8d:18:8a:b2:c4:
         7e:62:37:8d:f2:3f:38:f8:62:6b:6e:64:b9:8f:4c:3b:28:2b:
         26:94:1e:fd:1d:5a:a4:27:07:5b:db:66:17:6e:f0:4d:3c:e2:
         dc:1f:6f:94:37:bc:42:0b:e1:10:c0:64:24:7b:aa:6d:0d:11:
         41:4a:43:48:43:bf:e1:10:ed:06:e9:27:24:fc:6a:71:0c:1a:
         f2:d3:e1:bb:88:53:1a:81:f7:a7:8a:35:6e:b9:65:56:98:cb:
         6d:b0:9c:64:83:77:82:b8:cc:ba:65:e7:29:53:0c:49:30:c9:
         e7:9b:b0:b8:f3:8b:f2:6e:89:c2:42:88:dd:11:62:41:bf:52:
         3b:a8:f1:b1:22:58:52:46:93:8d:25:75:10:e8:82:14:67:38:
         96:d8:25:e8:a0:22:0e:a9:81:58:40:cb:7b:a0:f3:de:d8:31:
         90:48:22:cd:ad:eb:92:0f:af:9d:2e:53:89:52:85:f8:9c:1a:
         9c:17:dc:43:9f:99:b5:76:dd:68:e9:97:94:e6:ae:16:94:f4:
         a2:5a:cc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 09:10:36 2024 by rpki-client on console-ams.rpki-client.org