Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231362e302f32342d3234203d3e203134363138.roa
File:                     3231362e3134352e3231362e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          KW+/8epVs3l6gpavQXcBOlWfY4GquPySfV+6J3+ktX8=
Subject key identifier:   40:1E:96:B9:99:38:13:C0:B4:22:1F:7D:6B:54:97:C6:18:F3:E1:51
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       270299FFF8B30ACC61FCC30279E285415DADC47D
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231362e302f32342d3234203d3e203134363138.roa
Signing time:             Wed 16 Aug 2023 13:04:42 +0000
ROA not before:           Wed 16 Aug 2023 12:59:42 +0000
ROA not after:            Wed 14 Aug 2024 13:04:42 +0000
asID:                     14618
IP address blocks:        216.145.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 23:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:02:99:ff:f8:b3:0a:cc:61:fc:c3:02:79:e2:85:41:5d:ad:c4:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug 16 12:59:42 2023 GMT
            Not After : Aug 14 13:04:42 2024 GMT
        Subject: CN=401E96B9993813C0B4221F7D6B5497C618F3E151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c4:33:6e:1a:88:7f:2a:57:e4:40:0d:78:df:
                    98:bf:c1:ad:bd:ae:2e:b6:b6:2d:7c:0d:a7:99:82:
                    54:71:97:c3:30:fd:df:9a:03:1e:b2:3f:a5:fc:a2:
                    d6:ed:bf:6e:45:4c:6c:03:9e:56:8b:63:e4:7d:45:
                    f8:5c:40:58:a2:6c:ed:a9:24:51:02:9e:52:0e:b1:
                    59:b8:43:93:23:9e:fa:62:b6:20:cc:04:dc:1d:37:
                    96:8b:2e:ce:0f:fc:ce:af:59:4a:22:16:ee:d3:73:
                    7f:ab:c1:14:df:21:c2:9f:50:6f:64:c5:e9:4d:28:
                    92:e4:c4:f0:56:2b:25:48:b0:ad:d0:46:67:40:7f:
                    1a:33:fa:b9:e9:15:72:94:09:d5:3c:29:2f:67:0b:
                    92:bf:26:fe:fc:05:9a:6d:78:41:be:e9:8a:ba:a5:
                    66:85:96:bd:32:78:7d:c4:a2:2a:3a:b4:5b:10:0d:
                    e8:eb:e4:94:eb:92:cc:c3:e5:38:cf:ff:3e:f9:40:
                    c7:e6:5d:7e:d6:cf:23:88:98:e9:35:49:ed:ce:7d:
                    e6:62:96:c4:99:ac:e2:9f:55:5f:d6:6f:0b:5d:73:
                    ca:61:2d:78:d5:61:36:cf:a7:28:79:c0:d4:ea:68:
                    0e:b9:1f:dc:ce:ae:9b:e9:80:ff:5f:d4:f5:0c:04:
                    09:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1E:96:B9:99:38:13:C0:B4:22:1F:7D:6B:54:97:C6:18:F3:E1:51
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231362e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:16:e8:56:b4:fc:02:86:9a:1c:c9:d9:31:ea:7f:11:99:57:
         a3:c9:85:af:ac:9a:4b:1d:ec:64:f6:af:79:83:8c:a8:82:76:
         23:36:41:fc:f6:9c:38:00:93:2d:c8:68:b2:7d:cb:fa:84:1b:
         8b:ed:f0:35:2b:ef:c1:6f:9c:7d:d5:ee:1c:ca:67:07:06:74:
         da:b2:1e:5e:a1:a7:9d:f8:ba:1a:c4:32:b8:40:ea:d1:4b:21:
         37:b5:68:10:82:7a:54:85:84:d3:a6:ef:4b:9b:e4:d2:86:6c:
         a0:18:67:45:6f:22:07:59:04:a8:80:67:61:9f:3e:c7:00:f7:
         a4:a3:a4:dc:4a:0c:fc:7c:ed:48:5b:e1:17:df:2e:b8:9c:6e:
         c5:dc:a9:4e:5a:3c:81:35:22:5a:a1:02:2e:23:40:7c:be:b8:
         38:ab:98:6c:ca:36:ec:66:10:07:85:1f:c9:0b:e9:e9:76:71:
         03:f3:f0:fb:e0:03:e3:04:2f:a2:92:d8:a2:d3:2d:be:12:e2:
         2c:d4:21:98:ed:bd:49:5f:1e:83:ff:00:ba:3f:e9:54:bd:05:
         c0:32:77:69:18:ef:4b:02:b1:1a:b4:3a:99:ae:b5:41:15:7e:
         f1:51:d6:11:4c:4e:ed:14:97:2a:c4:4a:58:68:ac:be:52:0a:
         22:9d:c9:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:10:28 2024 by rpki-client on console-ams.rpki-client.org