Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203337323335.roa
File:                     3231362e3134352e3231382e302f32342d3234203d3e203337323335.roa (raw, json)
Hash identifier:          3Wai/zQIKKXoMymjDvBEu5JDwz/Wg2UqT5NYFwrBV3Y=
Subject key identifier:   95:B8:77:D8:52:05:CD:84:74:60:52:F5:8A:87:B6:DF:C4:10:54:27
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       252BD42469B9B7935247D5C6F696E066F909F2D0
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203337323335.roa
Signing time:             Fri 02 Aug 2024 11:24:28 +0000
ROA not before:           Fri 02 Aug 2024 11:19:28 +0000
ROA not after:            Fri 01 Aug 2025 11:24:28 +0000
asID:                     37235
IP address blocks:        216.145.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:2b:d4:24:69:b9:b7:93:52:47:d5:c6:f6:96:e0:66:f9:09:f2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:28 2024 GMT
            Not After : Aug  1 11:24:28 2025 GMT
        Subject: CN=95B877D85205CD84746052F58A87B6DFC4105427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:01:e1:c6:de:f4:75:08:d6:53:8b:92:c4:84:
                    b5:37:a4:70:c8:0d:3f:58:f7:b2:e7:3b:9d:2c:48:
                    88:f8:5e:92:b2:e8:dd:ff:f7:67:d5:d3:94:03:ff:
                    cc:b3:cb:b6:c2:22:14:2b:11:97:5f:7a:53:b9:e5:
                    84:7a:9f:d5:97:e8:60:b7:93:8e:50:70:39:2e:43:
                    35:9c:74:c3:45:47:3c:02:d8:d1:bf:e2:a1:63:6f:
                    30:26:8e:16:8e:b6:92:ab:b0:11:aa:58:34:cf:98:
                    d7:15:c6:76:17:a4:51:cf:a1:e0:07:83:1f:70:10:
                    2d:32:5e:87:ae:0d:04:4a:08:d3:d1:3b:ea:7c:e3:
                    44:e5:b8:48:37:90:04:34:8a:ec:eb:78:c2:8e:33:
                    29:57:68:3e:f9:8e:de:47:e3:e7:37:41:00:51:72:
                    9a:24:da:a6:c3:e2:0f:54:36:1f:9e:7e:f9:90:82:
                    df:1a:f0:d8:f2:e8:fc:12:46:e0:09:d3:20:e9:4d:
                    85:3d:8e:19:5c:1e:8c:51:db:8b:e7:90:1c:f1:36:
                    b3:e9:4e:f8:d1:c7:7b:ba:bd:c9:c0:3c:b5:1a:9d:
                    23:1c:36:1e:c4:32:96:4f:ff:a4:eb:eb:db:04:a8:
                    75:b1:95:4f:05:da:e7:c1:54:dd:29:c0:27:0c:8b:
                    64:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B8:77:D8:52:05:CD:84:74:60:52:F5:8A:87:B6:DF:C4:10:54:27
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203337323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:cf:e8:da:26:36:8e:e3:04:a9:7d:ba:e0:6c:13:c6:31:cf:
         4d:fd:c8:d8:a9:9a:da:8b:33:af:62:12:37:58:62:77:35:a2:
         53:0c:ee:fb:e9:13:2e:b2:36:6c:29:c2:23:51:3e:c8:4b:a3:
         e4:5b:23:6b:21:69:ae:cd:15:14:6f:fe:e7:73:46:81:36:c9:
         e2:64:f4:ba:ba:70:88:c1:9b:0e:de:88:ba:ae:2a:13:c2:ec:
         63:de:32:9f:f8:7a:5e:4d:04:11:68:a3:51:55:74:20:94:c1:
         24:8b:52:3d:2a:8f:a6:10:e3:70:b4:5a:76:ac:d4:e7:85:b6:
         d5:e2:07:8c:6b:5d:89:a2:07:e0:1a:64:4c:84:2c:90:ca:22:
         b9:c6:23:21:5c:45:e5:59:59:fe:50:77:79:c3:f0:a3:cc:da:
         bd:af:64:6b:39:1c:5f:b6:9d:7e:f6:b6:08:01:35:05:bf:d0:
         26:dd:44:fd:95:de:dc:02:5e:9e:a4:70:b8:0c:38:80:0b:25:
         c3:b6:ef:7d:89:5b:94:a5:55:e9:6e:67:2b:28:b0:b4:98:07:
         6a:29:de:75:b6:d9:89:27:68:6d:2e:2a:0f:2f:b8:a4:cd:9c:
         12:a9:19:7e:7b:ef:b2:fb:e4:f6:2a:5a:33:2a:39:6d:64:e8:
         db:5f:88:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org