Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231332e302f32342d3234203d3e20333937373236.roa
File:                     3231362e3134352e3231332e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier:          w5/9kkgJJJcIIEcr8LtuUiYhDs+Ou7/dNkHU4NHJEj4=
Subject key identifier:   D5:DC:68:91:C6:D3:40:31:B3:2A:99:22:44:61:0E:4D:09:05:12:70
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       012D68D0EFC7A45FB0750D8ADFC40558B35A764E
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231332e302f32342d3234203d3e20333937373236.roa
Signing time:             Fri 02 Aug 2024 11:24:26 +0000
ROA not before:           Fri 02 Aug 2024 11:19:26 +0000
ROA not after:            Fri 01 Aug 2025 11:24:26 +0000
asID:                     397726
IP address blocks:        216.145.213.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:2d:68:d0:ef:c7:a4:5f:b0:75:0d:8a:df:c4:05:58:b3:5a:76:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:26 2024 GMT
            Not After : Aug  1 11:24:26 2025 GMT
        Subject: CN=D5DC6891C6D34031B32A992244610E4D09051270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:89:91:74:48:3d:92:2b:a5:5e:27:7f:63:7b:
                    a1:11:78:17:73:74:86:20:ca:04:cd:98:31:6a:d1:
                    ea:15:97:f8:46:b9:06:70:f7:79:3b:f0:8d:0d:e3:
                    16:cd:6a:ba:a6:fa:e1:dd:67:d1:74:f7:f6:a3:f5:
                    e7:a0:9c:8b:6d:04:00:1a:67:38:b7:8b:ef:c6:27:
                    b5:5a:ee:bd:10:50:4a:9f:56:e0:80:8e:1d:2e:d7:
                    00:40:fb:82:23:13:47:e3:84:f7:63:82:33:a6:5a:
                    b9:0c:e0:ca:12:bf:95:9c:39:18:0b:53:9d:79:0e:
                    9b:dd:d4:9a:47:7f:49:5c:db:aa:63:97:f3:38:d4:
                    cb:2f:6f:80:f0:87:f4:ef:98:c6:1f:29:d0:4d:08:
                    90:76:8c:8d:35:fa:1f:4b:c4:98:fb:ec:5c:c6:6e:
                    e2:68:e7:a0:0c:6d:12:f6:db:49:8d:91:0b:a4:35:
                    91:35:92:b9:ee:2f:b6:6a:c9:af:44:55:48:a4:b4:
                    85:d6:6b:8f:1e:07:8a:a2:ac:a3:37:eb:7d:e5:70:
                    9d:d9:62:7d:ed:86:2b:96:46:bc:4a:f8:74:c0:2d:
                    f6:7b:d1:d7:81:6f:e8:48:04:b2:dd:6b:6e:14:13:
                    00:41:5f:40:04:91:a4:d6:d9:9d:b5:c2:2c:dc:92:
                    3f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:DC:68:91:C6:D3:40:31:B3:2A:99:22:44:61:0E:4D:09:05:12:70
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231332e302f32342d3234203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:44:8f:66:f4:53:e9:61:d0:0f:90:2b:aa:da:50:86:40:bc:
         aa:a0:db:49:2b:78:96:bd:ef:f8:0b:99:85:d3:35:34:4e:e0:
         f7:8e:10:c0:e8:4b:86:54:d6:0b:7c:d0:c3:a8:f6:f2:7f:57:
         95:ca:ac:e8:51:22:d1:1f:0c:56:4b:25:f2:c4:ed:1f:b6:8a:
         24:0f:bc:26:a9:1d:1c:d6:05:5f:b8:38:c3:0e:17:de:ed:a4:
         ea:87:02:ca:9c:e3:1a:09:26:4f:e4:1f:97:78:5b:34:52:be:
         3a:0d:5d:cb:ae:81:7e:4b:2b:c5:cb:33:05:46:f3:6b:40:d8:
         d4:7c:98:29:91:c9:52:77:ce:91:b5:7a:0e:bf:f0:76:fa:a9:
         e2:06:38:42:e5:fc:b3:f8:f7:51:d8:88:36:e6:6d:f7:ea:d0:
         18:fc:72:19:e1:e4:5c:4c:a3:4b:99:b0:31:52:b9:0b:7b:46:
         1b:6f:b5:1f:28:31:3f:65:ec:a0:d4:18:62:73:e8:40:03:aa:
         a5:5c:7c:ed:dd:04:1c:0f:45:2f:55:c6:46:be:70:6f:a2:6a:
         8f:53:55:01:fa:f1:3a:7a:78:22:8f:9e:f2:d7:71:42:dc:43:
         d7:e7:2f:5d:da:f7:4b:55:c3:bb:f9:3e:9c:2d:b9:94:e4:09:
         e9:98:34:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org