Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203432343237.roa
File:                     3231362e3134352e3231382e302f32342d3234203d3e203432343237.roa (raw, json)
Hash identifier:          HZjuUlWvR/KwTKnJ6hE5URB6XXELCh8zvNLOChFiD8w=
Subject key identifier:   9D:84:42:26:6A:8C:E7:D1:9D:EC:CC:BC:AA:C4:94:48:02:F5:90:39
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       3BFDC1E8BF692751677B5C976756D34C7F02E8C2
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203432343237.roa
Signing time:             Fri 01 Sep 2023 11:14:32 +0000
ROA not before:           Fri 01 Sep 2023 11:09:32 +0000
ROA not after:            Fri 30 Aug 2024 11:14:32 +0000
asID:                     42427
IP address blocks:        216.145.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 10:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:fd:c1:e8:bf:69:27:51:67:7b:5c:97:67:56:d3:4c:7f:02:e8:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:32 2023 GMT
            Not After : Aug 30 11:14:32 2024 GMT
        Subject: CN=9D8442266A8CE7D19DECCCBCAAC4944802F59039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3a:2a:bc:8a:3d:d5:89:ca:cb:ad:b3:5c:69:
                    cb:4b:64:09:53:0a:8d:18:ba:cb:9e:29:9a:1d:fe:
                    60:e1:8d:e7:dc:f2:51:dd:8a:79:d6:9e:53:a5:74:
                    c7:d7:d4:13:42:df:94:20:5d:ee:a2:22:f9:92:24:
                    ab:63:8e:59:9a:0e:f7:96:a9:23:d0:25:ad:d8:94:
                    79:c0:19:9e:4c:cf:29:36:d4:91:c9:62:cc:7e:3a:
                    53:f2:d7:8b:a4:98:06:2b:e2:ae:8d:7a:aa:8b:ec:
                    ca:67:e7:40:bc:db:ab:a1:e3:1d:a8:b8:70:0a:99:
                    50:88:6c:b5:5a:fb:d5:71:aa:7c:7f:43:3a:53:f5:
                    d5:e2:69:c8:d2:f7:52:73:72:d5:63:c6:f3:e3:ea:
                    cd:67:8f:0d:a1:25:fa:0b:02:79:92:cc:f3:b0:6e:
                    f4:11:ed:6f:fb:84:57:7b:94:da:b7:b2:e0:3c:23:
                    2d:21:55:ca:12:1a:af:a6:c4:d0:72:95:18:1a:40:
                    ea:77:3d:0f:b1:bb:bc:3c:91:da:90:b0:bf:69:1e:
                    b9:57:c7:fa:cf:48:c3:6f:68:45:7f:2a:69:10:dc:
                    2a:05:55:ee:93:76:95:b8:a7:43:9a:3b:93:36:94:
                    a7:e0:2e:44:2b:fa:37:42:d4:c5:92:e4:70:80:cd:
                    28:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:84:42:26:6A:8C:E7:D1:9D:EC:CC:BC:AA:C4:94:48:02:F5:90:39
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203432343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:ea:7b:de:be:22:65:03:ed:cf:d0:1d:ca:4c:d0:cb:f8:8e:
         9c:50:9b:83:67:11:9c:77:f6:4c:90:83:b6:2c:56:35:33:25:
         b9:ad:c7:25:99:28:b9:c3:07:ab:0f:a5:93:29:12:a7:f8:36:
         a6:06:62:4d:4f:47:5e:50:bf:8a:eb:86:b2:1f:96:3d:37:0b:
         d8:05:a7:99:22:a9:16:bc:10:50:09:5f:ce:02:32:f5:7e:b9:
         71:38:f3:89:44:97:8f:c6:ae:28:b0:35:5c:1a:ef:80:9a:ff:
         14:e8:91:11:f6:4c:0f:bd:59:46:19:24:cc:44:78:d9:a2:b7:
         cf:1c:e4:42:4a:45:cd:e0:20:e3:ee:6a:03:a4:c1:2d:7f:5a:
         a0:5c:5f:83:1c:18:78:13:e2:ea:f9:f2:40:df:92:92:96:68:
         dc:cd:ea:15:1e:c0:82:aa:22:9e:15:91:ec:31:41:5c:fc:96:
         ea:b3:a3:c6:fe:b1:2f:a4:53:62:19:7a:69:3c:1b:c1:80:32:
         03:95:b0:2b:0b:bb:09:3e:f5:8f:99:d4:86:e8:ce:c9:5c:f8:
         48:a2:c1:cb:f7:0f:46:f6:01:43:96:84:14:ec:94:5d:6d:12:
         57:ff:7a:b9:35:18:8d:2b:82:eb:a9:df:70:e9:4d:d5:7f:b3:
         40:80:78:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 09:10:36 2024 by rpki-client on console-ams.rpki-client.org