Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e203134363138.roa
File:                     3231362e3134352e3231372e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          wMUQuPqEAj20AcOmb2n36j795TIUA7nTaYCHrbPftjc=
Subject key identifier:   F3:8C:20:1B:78:DF:4D:AB:5F:00:39:BE:F9:5A:87:B9:4A:CE:33:E7
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       73CD7897DA673471D1602D3DFB877C32AC203A75
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e203134363138.roa
Signing time:             Wed 16 Aug 2023 13:05:11 +0000
ROA not before:           Wed 16 Aug 2023 13:00:11 +0000
ROA not after:            Wed 14 Aug 2024 13:05:11 +0000
asID:                     14618
IP address blocks:        216.145.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 23:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:cd:78:97:da:67:34:71:d1:60:2d:3d:fb:87:7c:32:ac:20:3a:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug 16 13:00:11 2023 GMT
            Not After : Aug 14 13:05:11 2024 GMT
        Subject: CN=F38C201B78DF4DAB5F0039BEF95A87B94ACE33E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4b:55:14:68:4d:17:cc:85:0b:82:db:6d:74:
                    c4:bd:e7:24:4c:b8:33:21:1b:c1:61:59:1c:e5:3d:
                    da:fb:6b:40:65:b1:cf:9d:8d:7d:06:fa:71:7f:9c:
                    51:37:60:32:c0:ab:f6:76:1f:ce:d6:27:c2:2d:50:
                    ea:8c:0d:b8:65:5b:c7:6f:ac:4f:29:5a:70:1b:44:
                    ee:12:1d:05:7f:92:f7:4b:be:fd:b5:bb:d7:32:66:
                    1d:66:fb:22:07:36:66:6d:ee:0f:b6:17:44:b3:be:
                    76:7c:51:e1:06:2e:8e:5c:b9:52:7a:99:e1:96:22:
                    0f:09:ae:53:21:92:37:97:9b:2c:3c:d1:9e:3b:67:
                    c0:4c:54:1d:fe:a0:3b:2f:0c:d2:2b:fd:5d:f4:cc:
                    10:0f:73:97:61:f7:d0:58:d0:2c:57:38:db:89:0d:
                    d5:e5:3f:03:2d:fd:9c:e0:59:91:52:9c:ac:f0:ca:
                    ef:11:47:68:87:20:6b:3c:c8:d9:c0:c4:c6:3a:32:
                    cc:53:5b:6a:bd:5a:cb:bb:0c:90:81:13:0a:bb:7c:
                    08:cb:d1:b5:3a:93:4c:f7:b2:c3:31:b8:7c:bf:b4:
                    7d:e9:cf:3a:b8:fd:d6:01:79:bd:76:86:3f:ed:75:
                    6f:8b:c2:22:9f:5d:50:b0:70:f5:b8:4e:21:c9:c9:
                    95:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:8C:20:1B:78:DF:4D:AB:5F:00:39:BE:F9:5A:87:B9:4A:CE:33:E7
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:7e:b9:88:44:27:96:9d:7d:26:21:e1:db:e1:da:ce:19:4e:
         c8:12:42:15:2a:a3:ad:7f:6e:57:84:98:6e:c7:3d:8d:cd:d8:
         da:08:dc:b3:07:cc:1b:83:46:8d:79:80:e6:8c:54:8b:45:e7:
         1d:57:0e:28:ef:e4:3b:38:c4:81:d1:84:7e:48:f5:71:7d:1f:
         62:23:39:18:9e:25:78:7b:43:87:ae:db:d2:bd:fb:66:23:1f:
         e1:a9:c5:e2:b7:26:b3:dd:cf:14:bb:5d:d6:a6:9b:20:66:0f:
         1f:13:de:e2:e4:3d:da:17:5f:bf:10:9e:c2:7a:7e:58:bd:9f:
         93:15:12:8d:96:92:5b:0d:dc:60:2e:27:e6:23:dc:4a:58:ad:
         8f:5f:28:5b:2b:ee:7c:70:94:1f:36:9b:8e:cd:80:38:64:ed:
         a7:fb:94:6c:ce:df:81:c3:3c:3b:c9:fb:b5:af:97:ae:b4:cf:
         54:14:d7:ad:2f:4b:ad:8e:dd:b8:fd:9b:90:d5:c4:3e:42:23:
         a2:22:35:b1:a0:5d:87:bd:b7:fd:a1:c1:dd:2d:30:81:d7:f9:
         b5:40:20:6b:cf:54:76:66:e5:8f:ec:a4:0a:e2:0f:72:48:be:
         0f:54:1b:2d:84:d7:cd:81:32:b3:35:56:45:ee:fe:14:79:0b:
         10:7c:0f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:10:28 2024 by rpki-client on console-ams.rpki-client.org