Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e20313336373932.roa
File:                     3231362e3134352e3231372e302f32342d3234203d3e20313336373932.roa (raw, json)
Hash identifier:          qoAGCa++GvvrbwUOuzid5oUe4J/pkKegTGfM88fCLcA=
Subject key identifier:   09:1C:4A:BA:5F:3F:2A:B7:01:6B:73:38:EF:C8:75:2E:86:88:80:9C
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       7D9133AFC34A14AAF2C9B9873E8AACA8F3181C46
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e20313336373932.roa
Signing time:             Tue 02 Jan 2024 23:04:18 +0000
ROA not before:           Tue 02 Jan 2024 22:59:18 +0000
ROA not after:            Tue 31 Dec 2024 23:04:18 +0000
asID:                     136792
IP address blocks:        216.145.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:91:33:af:c3:4a:14:aa:f2:c9:b9:87:3e:8a:ac:a8:f3:18:1c:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jan  2 22:59:18 2024 GMT
            Not After : Dec 31 23:04:18 2024 GMT
        Subject: CN=091C4ABA5F3F2AB7016B7338EFC8752E8688809C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e3:a5:2b:15:25:ea:6a:71:54:44:09:d8:8c:
                    51:c3:6b:ad:7b:d8:f0:13:ea:27:e3:e1:1f:89:b9:
                    eb:c6:44:c1:54:07:a3:99:62:9f:81:0c:9c:3e:a3:
                    af:dc:c4:12:b1:06:d0:32:0e:ec:35:44:23:e8:35:
                    30:aa:a1:8f:12:9c:1d:d7:4d:00:8a:87:d4:c1:f1:
                    a1:a6:47:2b:be:91:54:41:c1:5b:29:2c:73:a7:63:
                    ff:cd:a5:0b:6f:36:30:26:a2:1b:c9:d7:40:85:6e:
                    7b:7c:a2:d2:e8:fb:59:1f:ed:2d:fa:df:c7:94:00:
                    66:a2:2e:c2:84:a9:f6:16:1f:8d:bd:37:db:9e:2e:
                    b2:81:29:ec:4e:25:5d:e7:47:2c:40:46:86:16:ba:
                    db:9f:6f:d3:da:3f:31:f3:24:1f:f4:1f:13:be:3d:
                    ea:8e:7f:0f:47:d4:ac:a4:59:e2:d2:12:3a:a6:56:
                    84:1e:f7:a9:50:65:b0:6b:72:9d:65:fb:75:5f:b1:
                    d6:bd:54:cc:59:90:f7:0d:c0:79:34:1b:4e:18:85:
                    79:b7:e5:cf:b8:90:f4:37:3c:8d:8e:49:06:dd:33:
                    30:f2:7c:3c:8d:24:33:78:e4:51:54:3f:41:e7:80:
                    15:6d:46:cd:84:a4:fd:4c:56:ac:08:3f:90:ed:49:
                    b4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1C:4A:BA:5F:3F:2A:B7:01:6B:73:38:EF:C8:75:2E:86:88:80:9C
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e20313336373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:eb:ee:14:06:2b:b6:aa:05:a3:26:e0:42:59:da:f9:9a:d4:
         98:b8:85:81:68:1a:76:b1:a2:52:71:9d:a0:9b:99:88:1a:6f:
         db:72:57:02:c7:23:c4:33:9c:32:28:f9:f3:31:7a:e9:2e:1f:
         85:22:47:01:18:b9:0e:05:f0:c5:d9:24:07:e1:d0:86:81:9d:
         dc:de:c1:bc:83:64:db:28:0b:17:eb:b6:b7:cb:69:b4:a3:37:
         72:ef:29:f0:81:9e:54:3a:8c:3e:68:b3:4a:ef:1f:eb:d8:d1:
         7f:88:c6:72:86:62:3c:9c:65:30:88:cd:70:76:1f:f1:c4:2c:
         c5:54:45:29:71:4c:c9:e6:b0:a0:f2:1d:97:0f:5d:e3:bd:8f:
         12:b0:1a:44:e3:be:1f:a2:00:d3:aa:0a:44:c8:44:74:57:c9:
         c7:9b:4b:a8:11:bc:b5:16:2f:aa:55:13:bc:77:09:8d:b0:4f:
         ce:0f:f5:b7:a4:d1:9f:19:25:11:34:a4:7d:5f:3b:6e:47:86:
         3c:da:6a:f1:f4:16:26:86:00:3d:4c:6a:64:b4:9f:32:bc:3f:
         55:0a:17:5a:4b:4d:84:a9:c4:07:9b:c0:ff:ad:4c:c2:cb:74:
         da:46:cb:66:6d:0c:31:f6:3d:05:28:b3:04:17:20:3f:f1:f5:
         3e:5d:1e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org