Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231392e302f32342d3234203d3e203330303331.roa
File:                     3231362e3134352e3231392e302f32342d3234203d3e203330303331.roa (raw, json)
Hash identifier:          vL0wrWylSuUsk77gdWr0MpryVOqzrx5YP91cwV3Ci1s=
Subject key identifier:   3D:F7:7E:68:64:09:5B:DC:F2:C6:EC:55:3B:B4:F8:3B:2F:BF:72:F9
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       0E6AC50CA4C9F9B290F82F0ADDE2D52DE901FF82
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231392e302f32342d3234203d3e203330303331.roa
Signing time:             Fri 01 Sep 2023 11:14:30 +0000
ROA not before:           Fri 01 Sep 2023 11:09:30 +0000
ROA not after:            Fri 30 Aug 2024 11:14:30 +0000
asID:                     30031
IP address blocks:        216.145.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 10:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6a:c5:0c:a4:c9:f9:b2:90:f8:2f:0a:dd:e2:d5:2d:e9:01:ff:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:30 2023 GMT
            Not After : Aug 30 11:14:30 2024 GMT
        Subject: CN=3DF77E6864095BDCF2C6EC553BB4F83B2FBF72F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0e:ed:98:73:51:95:b2:e6:0a:4b:2f:ce:f9:
                    c6:61:26:f8:02:ad:51:3d:7c:fa:8c:24:f4:42:6f:
                    4e:41:dd:f8:74:50:30:2d:88:25:5b:8e:d2:10:6d:
                    18:c2:8d:6d:4f:9c:c2:8e:b3:d1:cb:5e:ba:89:be:
                    a7:85:03:f6:3a:8f:b0:ed:5d:28:e4:8d:9b:2d:23:
                    db:fe:b7:fc:10:41:86:d2:e3:10:11:ae:68:34:f1:
                    f0:28:92:01:00:e6:62:31:b7:fd:23:ad:4f:d2:78:
                    9d:f0:34:6b:30:3d:64:d1:05:c0:ef:6c:b8:04:5a:
                    10:82:b8:83:f9:3a:2d:d2:44:87:8b:68:76:30:24:
                    ed:0e:c9:33:e3:0a:40:63:1d:a0:61:a6:52:65:82:
                    0d:86:0d:2b:f8:66:b2:25:aa:dc:6f:c7:de:24:ae:
                    90:6e:da:46:12:e5:05:d2:6e:f9:2e:80:a8:70:9e:
                    26:59:1f:29:08:1c:26:b8:06:09:fd:ac:38:d7:f6:
                    49:29:74:00:5d:8e:cc:8b:0b:32:60:f6:eb:a7:eb:
                    53:79:cd:c2:a3:e7:08:95:ba:62:29:b5:00:3b:26:
                    8a:f8:4a:ae:6c:5c:4f:e6:8d:94:f2:1f:8b:3a:d4:
                    07:eb:23:05:6b:db:c7:ea:67:a2:89:ec:e9:bc:c6:
                    30:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F7:7E:68:64:09:5B:DC:F2:C6:EC:55:3B:B4:F8:3B:2F:BF:72:F9
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231392e302f32342d3234203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:2d:cc:7f:5f:06:64:0a:dc:87:cc:be:35:a5:39:9b:1d:d0:
         6f:ba:b8:9c:57:3d:79:b3:90:49:74:7e:b7:ce:30:c4:a2:7f:
         f6:bd:8e:99:d5:da:72:7b:bb:9b:42:84:4e:49:54:90:17:d4:
         74:b3:e2:84:0f:9b:8d:2d:df:bf:2e:fa:57:21:65:93:5d:d6:
         1e:c1:9b:90:84:d9:dd:f3:7e:71:f8:80:b8:d3:c2:d2:62:95:
         d3:c2:a5:1b:57:39:cb:e7:89:52:9b:65:e9:d4:5b:4c:b8:85:
         18:a0:65:20:f4:10:b1:39:68:8a:c4:cb:89:39:85:76:c0:48:
         3f:bc:29:24:60:bf:c6:f8:60:33:d0:a2:96:cd:88:85:07:53:
         c7:86:0a:be:b1:64:78:3d:75:ff:40:9a:a0:0b:e7:c1:e3:f7:
         25:6c:63:ee:af:e5:00:4d:cc:7d:9d:b8:09:9a:16:a1:e4:1a:
         fb:d8:ce:a6:9b:30:b3:a5:e7:1a:5c:43:bf:15:a4:f3:60:d1:
         36:fd:a7:8a:fe:4b:73:7d:61:00:2f:06:b4:f9:e2:67:63:d0:
         84:cf:8c:65:be:88:9a:c7:8f:a3:45:51:85:1d:8a:a7:64:f8:
         aa:9f:ed:16:ff:7d:dd:34:c1:81:4f:38:56:1c:4b:21:12:54:
         5b:99:b4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 09:10:36 2024 by rpki-client on console-ams.rpki-client.org