Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230392e302f32342d3234203d3e20333937373236.roa
File:                     3231362e3134352e3230392e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier:          qSpcUmQ49Z//K4dnfGcEJQmkF/2XA4j3/zLEyLESn0s=
Subject key identifier:   9F:30:6D:84:2C:4D:7E:24:3E:37:80:6D:4B:6E:C1:64:91:A4:DC:30
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       0E7C6209B4FF8CAE0D0BC95D031EE35D733FF3B1
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230392e302f32342d3234203d3e20333937373236.roa
Signing time:             Fri 01 Sep 2023 11:14:29 +0000
ROA not before:           Fri 01 Sep 2023 11:09:29 +0000
ROA not after:            Fri 30 Aug 2024 11:14:29 +0000
asID:                     397726
IP address blocks:        216.145.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 00:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:7c:62:09:b4:ff:8c:ae:0d:0b:c9:5d:03:1e:e3:5d:73:3f:f3:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:29 2023 GMT
            Not After : Aug 30 11:14:29 2024 GMT
        Subject: CN=9F306D842C4D7E243E37806D4B6EC16491A4DC30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5d:2b:7f:36:f8:35:5d:4e:52:f7:2e:58:fe:
                    49:cb:9f:d6:75:c9:14:f5:a1:a3:c7:21:c8:fc:99:
                    80:df:0b:c5:d8:2d:f4:e5:35:b8:86:ce:12:88:4b:
                    9f:7c:d1:2e:97:38:25:15:95:e8:d2:78:c6:7c:a0:
                    68:f4:3d:89:9e:22:1b:90:1e:d6:cd:cc:86:40:93:
                    78:89:d0:23:04:02:ff:23:fd:ba:b8:43:ca:13:3c:
                    ec:38:1c:47:51:be:4d:e5:e9:a6:3a:ba:0a:dd:de:
                    03:b8:33:d3:7b:c7:cc:10:66:c2:27:71:4e:b7:8e:
                    85:52:e6:75:dc:7d:e2:d1:1c:c3:35:4c:ff:c1:b4:
                    98:12:38:eb:57:b2:fb:25:07:a0:0f:68:a5:70:b0:
                    79:f6:da:4b:97:17:b4:90:ec:d1:e8:06:95:ea:b8:
                    50:cc:9e:db:db:63:dd:e6:cd:4e:c4:d9:62:c3:f2:
                    d8:52:ac:ca:11:9b:6f:55:39:9a:2e:38:b7:4a:a4:
                    33:77:48:40:f1:5f:21:e1:0c:e7:ed:28:98:24:6a:
                    0f:3f:ed:01:59:6c:2a:5f:0f:cb:42:92:41:e8:54:
                    c5:39:45:31:fc:02:f5:01:f5:27:97:19:78:03:81:
                    0e:0d:52:c3:61:fb:3b:5b:85:ed:bc:7a:5f:58:bc:
                    ab:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:30:6D:84:2C:4D:7E:24:3E:37:80:6D:4B:6E:C1:64:91:A4:DC:30
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230392e302f32342d3234203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:dc:2d:a0:56:3d:1b:2d:00:46:a3:4b:bc:a9:2c:9c:a3:6a:
         f3:fb:c6:ac:1c:9d:26:b8:c3:84:88:19:62:08:f5:c8:5e:c9:
         cc:bb:8d:df:67:15:f2:48:2b:b2:b9:05:04:d0:fe:e6:89:09:
         e7:72:72:0f:71:40:0e:e9:8b:01:9b:c9:f7:3c:45:1b:4e:8a:
         c7:22:da:57:65:a6:c5:cb:36:74:6e:38:8f:27:0a:ed:56:72:
         5f:cb:02:25:93:af:7f:a8:e2:be:4b:80:2d:15:7c:0a:d6:41:
         21:27:03:bc:54:2b:89:ae:29:0a:78:98:fa:1c:ab:ff:69:46:
         3e:00:9c:b6:be:20:ac:87:98:6e:d8:c1:85:26:8c:e5:e2:14:
         a2:23:75:3c:9b:e7:eb:9c:8b:85:38:a4:36:cb:cb:e9:19:0d:
         80:f7:e9:bf:8f:6d:f7:1b:40:d8:2f:5f:dd:a4:68:38:67:66:
         6d:1d:b1:1d:c4:ba:9e:d8:4b:1c:3c:f3:d6:24:3b:0e:b9:0b:
         d6:56:a1:4c:a0:38:72:e3:e0:9f:ea:ff:20:0b:46:8b:75:0d:
         a1:36:b5:c4:6e:27:c4:81:49:53:8a:58:f3:17:08:68:f2:24:
         96:c0:98:1e:53:00:b7:7b:54:7a:2e:b8:56:28:d0:b9:a4:d9:
         5c:12:be:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 01:06:14 2024 by rpki-client on console-ams.rpki-client.org