Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e203136353039.roa
File:                     3231362e3134352e3231372e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          ZA9393F741DV5Fxz/6vhyY1CuaCvsB3oCY99zGDfCTA=
Subject key identifier:   84:62:9D:B6:47:3A:67:A6:EC:C7:39:82:F6:B4:28:99:34:77:D1:4F
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       25F895CAE0F1FA0ADCFA4EF132B01ECCC78BAECE
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e203136353039.roa
Signing time:             Wed 16 Aug 2023 13:04:59 +0000
ROA not before:           Wed 16 Aug 2023 12:59:59 +0000
ROA not after:            Wed 14 Aug 2024 13:04:59 +0000
asID:                     16509
IP address blocks:        216.145.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 15:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f8:95:ca:e0:f1:fa:0a:dc:fa:4e:f1:32:b0:1e:cc:c7:8b:ae:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug 16 12:59:59 2023 GMT
            Not After : Aug 14 13:04:59 2024 GMT
        Subject: CN=84629DB6473A67A6ECC73982F6B428993477D14F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f8:81:5c:fb:8b:92:64:4a:93:b0:28:e0:52:
                    82:85:2f:c1:04:31:43:41:2a:a2:6f:22:7b:b7:cd:
                    48:09:9b:f1:71:aa:fb:61:89:59:15:18:c3:f9:74:
                    fa:e6:eb:4d:a0:96:93:97:38:9a:ae:f5:32:23:8f:
                    57:9f:7b:f1:bd:f9:bb:37:db:30:aa:32:d4:58:02:
                    f1:65:31:c3:66:1b:bf:79:ec:64:ff:d5:d4:57:99:
                    8e:a0:4a:14:36:20:cc:7f:21:92:ef:bc:ea:70:96:
                    9a:e5:58:4f:97:e0:bc:6e:e4:d9:78:d0:c0:2c:62:
                    c9:ba:f6:cf:81:c8:bb:54:f0:18:f9:12:b9:6f:8f:
                    0e:43:3a:9f:ba:6a:20:93:23:c8:a8:ff:01:ea:05:
                    61:53:5f:c4:1e:c0:67:12:8d:cc:3a:d6:83:7e:ca:
                    c3:0d:1b:2e:0e:c0:fb:ba:90:b9:90:6b:dc:10:96:
                    a1:24:5f:e2:81:71:6a:56:01:9b:0b:f3:9d:86:76:
                    35:ae:39:c9:56:76:f1:fd:bd:3d:fa:68:cf:1c:4f:
                    07:c3:66:7d:ec:d2:f8:14:d6:84:5f:95:31:f4:44:
                    a5:85:e0:0d:7e:8e:a2:ab:90:74:d8:12:ca:cb:31:
                    08:38:94:54:a7:6c:36:6f:e1:b5:ed:cd:07:de:b2:
                    78:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:62:9D:B6:47:3A:67:A6:EC:C7:39:82:F6:B4:28:99:34:77:D1:4F
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:1b:73:80:6e:f4:73:9a:c4:c0:2f:a1:21:4a:2c:ea:2b:51:
         b4:6d:4e:27:b2:22:3c:df:b6:c7:8e:93:f7:e9:53:88:83:59:
         d3:f4:0b:fe:3e:e4:e1:9e:3d:84:d4:16:45:f8:7d:c8:e7:71:
         07:87:ef:6f:cd:62:ca:09:07:8d:ca:0c:2f:fe:42:09:b6:31:
         e3:b3:34:fe:8a:d1:dc:27:0c:4b:89:b3:b8:29:1f:67:28:0e:
         0e:59:fb:17:eb:6f:ac:e9:e2:ef:de:40:65:67:c9:9b:51:8c:
         33:77:92:6c:52:9b:55:33:b5:08:02:d8:9e:13:0d:fc:89:fa:
         7e:13:21:82:18:74:75:23:05:56:ef:6e:b7:7b:f5:d3:de:87:
         fa:cb:78:84:9f:1e:64:7a:42:82:8b:b1:db:4f:63:41:4c:29:
         52:78:5e:31:ee:84:85:66:73:ef:03:f4:f2:28:db:51:e1:e4:
         1b:39:d5:b5:26:af:5d:4c:96:12:ba:cd:9d:d3:55:38:43:7f:
         a6:92:a3:02:cf:f9:ac:0f:73:4b:41:b0:88:3c:2d:88:c2:d2:
         b5:fc:b2:0f:12:41:4c:b7:71:20:5c:46:4a:a0:e3:94:6b:18:
         8c:8f:22:07:10:44:6e:09:d0:bf:36:07:b6:67:8f:fd:28:bb:
         f9:eb:f0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:05:46 2024 by rpki-client on console-fra.rpki-client.org