Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203630343932.roa
File:                     3231362e3134352e3231382e302f32342d3234203d3e203630343932.roa (raw, json)
Hash identifier:          1QrDkVQu7cQFdooroljbw98tQN1i9mRzq3z3+gD7djg=
Subject key identifier:   AA:ED:E3:CC:34:C4:C5:19:7C:D2:EB:E7:B5:A4:5D:4C:86:4E:42:6E
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       407C7921E24E42A4390DC02505912D352496ACB2
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203630343932.roa
Signing time:             Fri 01 Sep 2023 11:14:31 +0000
ROA not before:           Fri 01 Sep 2023 11:09:31 +0000
ROA not after:            Fri 30 Aug 2024 11:14:31 +0000
asID:                     60492
IP address blocks:        216.145.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 10:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:7c:79:21:e2:4e:42:a4:39:0d:c0:25:05:91:2d:35:24:96:ac:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:31 2023 GMT
            Not After : Aug 30 11:14:31 2024 GMT
        Subject: CN=AAEDE3CC34C4C5197CD2EBE7B5A45D4C864E426E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:58:a9:28:1f:60:16:8e:37:96:9c:54:2f:b0:
                    7b:b9:e0:61:33:9a:f8:2a:ef:82:32:08:40:40:04:
                    c6:f1:87:d8:1e:ba:d5:c8:5a:81:b6:78:43:5f:24:
                    92:6f:c9:c9:d4:c2:a2:b3:c8:b0:5c:5f:fb:38:86:
                    55:89:15:49:00:aa:b3:33:43:b0:38:56:ae:b0:e4:
                    99:d6:ad:7c:bd:b5:d5:cc:be:dd:5a:c2:b9:6b:07:
                    0e:33:e4:0f:21:e4:32:f3:ae:bd:64:f3:b1:ad:0d:
                    a0:d8:87:dd:66:13:6c:9f:a0:66:36:cc:b8:32:81:
                    7f:8c:1e:78:c2:c9:6f:40:26:bd:5c:6b:99:b8:9b:
                    23:06:90:d3:8f:12:c2:0e:da:c1:af:4c:c6:9c:c4:
                    8a:41:36:e6:2a:80:a1:9a:f9:c3:ee:ef:26:44:2b:
                    80:2e:8b:4f:4b:43:a5:0a:ad:7f:17:e4:fb:77:67:
                    b0:59:98:73:bb:bc:4c:79:06:6f:73:40:0e:21:6d:
                    9e:cb:d3:f7:76:ec:0e:93:42:f2:ad:5b:dc:c4:9e:
                    93:ea:36:af:24:c1:2e:52:bb:d0:fb:85:d2:be:92:
                    29:b9:50:7f:76:39:74:fe:4a:d9:cb:c9:09:bf:3e:
                    f3:21:7a:7a:5a:3d:d9:58:33:dc:5f:45:71:58:41:
                    75:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:ED:E3:CC:34:C4:C5:19:7C:D2:EB:E7:B5:A4:5D:4C:86:4E:42:6E
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203630343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:71:9b:92:87:aa:db:f9:e1:c1:ad:fb:f3:ad:03:19:6c:2b:
         26:47:38:0e:ee:52:42:d8:4b:8f:d2:b5:64:ee:20:af:1c:93:
         87:28:a4:55:73:e7:30:be:b4:44:e4:0b:93:58:2c:37:18:f4:
         09:ab:c3:17:9c:93:0b:1b:48:7b:5d:e4:6d:1e:b8:8f:a7:24:
         3e:d7:f7:03:ab:3e:37:74:39:f3:f3:3b:3d:ca:e4:ad:cb:cf:
         05:9a:99:29:78:66:4d:b8:37:62:c6:e7:cd:cd:e8:dc:fd:bb:
         e2:8c:2c:1d:a4:89:02:21:20:aa:3d:40:6e:8e:77:cc:cc:79:
         81:a0:71:64:ca:3f:3f:ce:23:4a:98:2c:0b:ed:66:f6:04:29:
         53:65:b2:29:54:ff:2f:17:31:89:46:fc:fe:9d:7a:1c:fa:06:
         cb:ac:0f:e4:f0:1d:00:47:55:ab:b6:d3:20:c2:fd:3b:9c:ad:
         dd:3b:74:e9:9e:4d:b2:97:d8:41:a8:8f:99:92:f3:75:52:81:
         03:52:3a:4c:3f:94:b9:b0:d4:28:59:90:65:86:d9:4e:7b:3d:
         69:88:4f:b6:63:60:d8:c7:e6:a3:31:e6:f4:8b:9d:b4:c5:3f:
         24:aa:dd:f6:81:4e:29:f2:ed:87:1d:0b:51:0d:f0:7e:8f:9e:
         dc:75:d9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 09:10:36 2024 by rpki-client on console-ams.rpki-client.org