Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203339353838.roa
File:                     3231362e3134352e3231382e302f32342d3234203d3e203339353838.roa (raw, json)
Hash identifier:          YvzMPdgqxJt9y3tctRZH2QCYDsXdtmwtJeFTlczNg4k=
Subject key identifier:   F0:F3:A4:38:EE:BB:13:91:4A:FB:7B:10:AB:65:B2:CA:8C:37:71:D8
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       5A528F41A032BF478B9CE9C34E0E56D91C2460E1
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203339353838.roa
Signing time:             Fri 01 Sep 2023 11:14:26 +0000
ROA not before:           Fri 01 Sep 2023 11:09:26 +0000
ROA not after:            Fri 30 Aug 2024 11:14:26 +0000
asID:                     39588
IP address blocks:        216.145.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 10:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:52:8f:41:a0:32:bf:47:8b:9c:e9:c3:4e:0e:56:d9:1c:24:60:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:26 2023 GMT
            Not After : Aug 30 11:14:26 2024 GMT
        Subject: CN=F0F3A438EEBB13914AFB7B10AB65B2CA8C3771D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:68:1a:73:61:ea:67:01:6e:28:a5:ca:b2:0b:
                    46:77:00:14:3e:2b:45:e7:66:2e:f5:41:bb:2a:83:
                    c7:a3:13:73:2d:d5:d4:f0:31:df:b4:3a:17:45:8a:
                    aa:35:5f:ec:c1:28:60:b6:8a:3a:f3:58:98:1d:95:
                    b0:95:48:8e:b8:08:36:1e:e6:9c:87:c2:21:6c:ad:
                    3f:c3:7a:e7:59:32:d3:97:2b:40:2f:7f:f8:e8:2d:
                    44:c3:0b:ab:ad:22:04:54:ed:79:a9:72:1d:cc:ce:
                    2d:36:6f:4c:2c:32:8a:d7:b4:6c:6f:7c:39:ec:65:
                    f7:48:4c:1c:68:f2:b9:e6:cf:c2:e6:43:b6:56:c0:
                    90:df:b4:11:ca:f8:58:a7:b7:67:fb:23:94:c7:b6:
                    b8:ba:0a:2c:20:9d:41:fb:57:c2:63:bc:8a:56:f7:
                    83:82:29:aa:42:b8:ea:09:14:7b:42:2e:b1:16:7f:
                    0b:e6:1e:6c:fb:63:35:af:84:ba:6c:8f:b1:74:3c:
                    1d:2b:2d:36:23:43:78:93:38:9a:7e:98:d0:01:fc:
                    5f:b5:1e:ca:c4:77:60:40:53:be:c3:96:bf:90:55:
                    ba:a1:fb:c3:ec:65:03:db:78:dd:23:44:05:f5:76:
                    7a:39:c0:00:85:c2:e0:77:be:7a:b9:1f:20:06:be:
                    c8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F3:A4:38:EE:BB:13:91:4A:FB:7B:10:AB:65:B2:CA:8C:37:71:D8
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203339353838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:49:5b:29:b2:b1:be:cb:44:21:57:03:41:55:d4:ef:e3:1f:
         55:bb:8e:8d:c2:c5:e1:1d:9c:24:77:93:f0:ac:71:f9:56:55:
         3a:75:ac:2c:bf:cf:ea:2d:f6:88:14:be:20:c1:35:e3:4c:66:
         e1:73:be:58:ee:15:6a:c9:90:68:fe:0f:2c:87:e1:68:35:b5:
         ec:cb:da:1d:db:58:25:7b:5b:79:2b:09:1f:ec:2a:3c:40:ec:
         19:a4:98:50:a6:5d:11:73:b3:87:e1:98:76:da:6a:7b:38:72:
         f9:ba:d8:d8:19:8a:72:08:5e:65:cb:55:dc:1c:b9:a8:84:ca:
         55:e7:e3:15:49:cd:5b:c3:9c:3f:16:d1:f0:7e:de:39:7f:74:
         7e:62:dd:5c:d6:71:64:56:52:8d:64:59:cd:b4:f8:f5:07:6e:
         0d:6f:fc:ac:6a:b9:65:52:81:9e:00:45:39:db:b3:e0:84:32:
         87:cc:fa:7c:51:ed:9b:3b:55:5e:f2:c3:d4:5a:60:8c:1b:c9:
         9a:e5:e5:34:74:ca:c0:7a:ec:2c:09:21:cb:d8:c2:d5:55:ed:
         b2:35:71:b3:73:10:04:e4:ec:c5:18:34:7e:9b:e7:76:a7:f9:
         a6:0f:22:91:c3:67:93:2e:e8:68:b1:c4:ec:ec:f6:ae:c4:30:
         b8:17:75:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 09:10:36 2024 by rpki-client on console-ams.rpki-client.org