Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231322e302f32332d3233203d3e20333937373236.roa
File:                     3231362e3134352e3231322e302f32332d3233203d3e20333937373236.roa (raw, json)
Hash identifier:          MgE3CjsC8d62ETnutxJOver0HBJxT1d3WxG+kKQiXC4=
Subject key identifier:   CC:F6:52:2C:42:97:FD:55:E4:4D:43:10:DB:4B:A1:03:CF:6D:DA:B6
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       5F676591893B5A35CF9FF27B93A19FDE0756EA31
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231322e302f32332d3233203d3e20333937373236.roa
Signing time:             Fri 02 Aug 2024 11:24:29 +0000
ROA not before:           Fri 02 Aug 2024 11:19:29 +0000
ROA not after:            Fri 01 Aug 2025 11:24:29 +0000
asID:                     397726
IP address blocks:        216.145.212.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:67:65:91:89:3b:5a:35:cf:9f:f2:7b:93:a1:9f:de:07:56:ea:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:29 2024 GMT
            Not After : Aug  1 11:24:29 2025 GMT
        Subject: CN=CCF6522C4297FD55E44D4310DB4BA103CF6DDAB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f3:82:68:a8:42:d0:98:24:ea:a1:c9:a9:04:
                    97:2f:4c:fc:58:90:26:19:51:6c:f9:30:44:0f:9d:
                    e7:5f:95:c7:45:43:01:a8:8f:10:1e:1c:61:f1:06:
                    bc:63:61:e9:48:29:b4:ac:d3:08:10:1d:4d:ff:2f:
                    d7:51:91:59:b6:01:0a:5e:cf:80:7b:00:0e:00:d0:
                    61:37:f8:f1:6c:a8:87:28:9f:ca:07:a5:33:a8:23:
                    a2:1b:c8:7c:c8:e4:78:0f:da:2a:a6:1e:8b:b4:80:
                    d9:d2:87:a6:ea:ba:65:16:8a:5c:92:35:cf:8d:f8:
                    eb:6c:81:e8:82:fb:42:cb:2a:d8:9c:37:1b:67:85:
                    1d:2f:54:15:8d:c8:de:48:d5:af:e4:97:0e:10:3e:
                    89:f5:2a:18:5d:07:54:8e:50:26:04:7d:ad:e7:56:
                    f4:2b:e8:2c:0f:26:a5:db:58:75:64:17:44:2d:fd:
                    cc:52:01:65:cb:eb:0b:cd:a9:2c:86:bf:4e:d4:9b:
                    ea:dd:b3:5e:56:04:11:e7:e3:22:87:8c:7e:de:f8:
                    6c:e4:10:57:29:8f:8c:d4:60:b1:d5:d8:6f:af:b3:
                    72:a6:ab:be:27:52:d8:9f:6a:0e:e8:f5:dd:77:3e:
                    89:ec:0d:58:07:fc:b8:a9:54:ea:ce:8a:e5:0b:b8:
                    ee:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F6:52:2C:42:97:FD:55:E4:4D:43:10:DB:4B:A1:03:CF:6D:DA:B6
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231322e302f32332d3233203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:68:89:07:94:e4:38:1e:cd:74:12:5f:6d:4a:66:ea:09:de:
         3e:fe:55:e6:40:87:88:b0:a0:0a:19:8d:70:5c:4e:80:bb:e7:
         af:4f:8e:17:ee:66:fd:0e:7d:58:a2:d7:82:58:12:38:77:ab:
         ec:10:41:68:05:67:11:f3:eb:be:e4:c7:8b:70:31:97:91:cf:
         98:92:68:31:aa:e9:7f:16:22:f4:51:24:b4:62:5a:2f:3b:59:
         dd:31:90:c1:15:01:02:5a:a4:87:7a:e7:2a:c7:85:d1:f9:e7:
         5c:33:1a:50:84:be:24:d1:22:7b:2e:aa:c1:d8:14:35:61:a4:
         48:1d:a1:dc:56:69:f7:82:93:50:a5:b1:2b:cd:dd:e4:57:76:
         fd:f2:2e:59:66:d1:91:de:5b:07:27:ed:ad:88:e4:d5:ff:32:
         d2:52:79:7b:b2:d8:59:69:dd:12:cc:e6:ad:f3:4b:4a:bb:48:
         ba:85:4d:b5:f8:e5:67:2c:88:d8:9c:87:96:31:dd:b0:ab:89:
         a0:d5:b5:03:ca:29:f5:e5:99:a9:bf:9f:d9:ba:8e:1f:46:fb:
         f3:cc:75:5f:ce:b3:7b:3a:8a:a4:63:a6:a2:eb:20:55:42:04:
         06:d0:4e:43:7a:24:70:8a:bd:9e:70:a2:4b:e8:e2:07:17:42:
         a3:e1:c0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org