Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232302e302f32342d3234203d3e20333937373236.roa
File:                     3231362e3134352e3232302e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier:          tLhA9TbSo8hO1Ce0OiKDp66BCZZVbiGBMbiqeLeqqrQ=
Subject key identifier:   43:06:EA:01:5D:D1:F3:B1:67:08:7F:B0:0B:DE:FF:72:D5:B6:E0:70
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       30BE14A54F2152793D2760CBDEF5665C340CB7A3
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232302e302f32342d3234203d3e20333937373236.roa
Signing time:             Fri 01 Sep 2023 11:14:31 +0000
ROA not before:           Fri 01 Sep 2023 11:09:31 +0000
ROA not after:            Fri 30 Aug 2024 11:14:31 +0000
asID:                     397726
IP address blocks:        216.145.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Apr 2024 20:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:be:14:a5:4f:21:52:79:3d:27:60:cb:de:f5:66:5c:34:0c:b7:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:31 2023 GMT
            Not After : Aug 30 11:14:31 2024 GMT
        Subject: CN=4306EA015DD1F3B167087FB00BDEFF72D5B6E070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a6:90:cb:54:19:59:2e:90:a7:72:5e:11:0c:
                    07:66:02:7e:bc:14:c4:44:bb:22:71:7d:d1:cc:95:
                    5c:50:17:e4:5f:b4:6a:25:2c:b4:83:b7:9e:7b:6a:
                    3d:4b:2b:6e:3a:a1:37:53:43:91:f4:ef:86:99:0e:
                    65:42:c8:57:7e:77:e6:0b:f8:7e:3e:3c:a6:3d:5c:
                    86:d7:86:7c:87:24:e7:74:30:82:cb:80:22:07:b9:
                    ff:e2:26:6e:9d:98:e8:82:fd:28:8f:7d:2e:ea:a9:
                    33:2d:ba:bb:3f:b0:97:49:bc:1c:cb:72:9b:15:43:
                    5c:3a:fe:b7:f9:82:cc:c0:53:e0:89:f5:a8:71:fc:
                    c9:1b:c5:2e:a9:5b:10:fe:b4:c9:da:fd:d1:79:29:
                    37:45:30:48:63:f7:bc:ed:a2:8f:77:e8:51:ab:3e:
                    03:26:52:a6:a1:d3:f1:47:2f:0d:e7:04:86:13:1b:
                    1d:66:bb:4e:5d:13:23:a9:36:a9:5c:10:d1:b5:0e:
                    40:a0:c1:18:d4:b8:4c:91:5b:2b:38:98:7a:0f:4d:
                    d5:3a:45:03:b7:04:ee:f7:57:4e:98:b5:ab:b7:9c:
                    69:27:5c:99:ed:67:ce:f5:b8:9b:cf:c4:35:ad:c9:
                    89:c8:f3:dd:f9:f6:71:45:c7:4e:24:ff:c8:cb:f0:
                    fd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:06:EA:01:5D:D1:F3:B1:67:08:7F:B0:0B:DE:FF:72:D5:B6:E0:70
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232302e302f32342d3234203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:ae:02:9a:8f:16:45:a7:91:7b:5a:98:63:40:82:7a:45:77:
         c2:f7:8f:09:ed:94:f0:b5:c9:e3:78:97:39:de:26:71:f9:d0:
         8a:bf:1d:a7:9b:b5:08:34:f2:71:63:41:67:3d:8b:e2:48:37:
         2b:73:90:dc:5e:37:83:06:a1:4f:17:b2:e1:6c:cd:bf:d8:13:
         c2:7d:41:66:e6:c7:f5:c3:fc:55:64:02:9f:97:16:89:71:be:
         cb:cb:f8:19:3b:ae:6c:a5:63:00:c9:cd:e3:00:7b:c5:97:df:
         f1:cb:a8:73:9d:be:b3:0e:4d:66:d1:f6:ca:60:74:dd:81:50:
         d8:05:05:88:f2:f9:50:04:b0:25:f7:76:7f:b8:f1:f6:c1:e6:
         1b:7d:d7:60:cb:6c:21:74:3c:da:a7:70:40:7e:a2:c2:83:47:
         81:cf:bc:0f:8c:fb:29:6b:35:51:a0:60:64:79:64:62:c3:f1:
         81:92:d9:5b:73:04:10:0a:2e:2c:e3:a7:1d:a4:07:53:c2:7b:
         37:b4:84:15:d4:34:cf:34:8f:df:94:de:d2:eb:ea:ab:20:d7:
         00:f2:51:7a:72:23:94:90:b7:27:4b:a1:dc:a0:7b:a2:bd:61:
         0a:ee:5f:99:be:8f:9e:e0:76:39:2e:b5:6f:53:21:35:50:71:
         dd:df:3b:98
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIUML4UpU8hUnk9J2DL3vVmXDQMt6MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTMxWhcNMjQwODMwMTExNDMx
WjAzMTEwLwYDVQQDEyg0MzA2RUEwMTVERDFGM0IxNjcwODdGQjAwQkRFRkY3MkQ1
QjZFMDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaaQy1QZWS6Q
p3JeEQwHZgJ+vBTERLsicX3RzJVcUBfkX7RqJSy0g7eee2o9SytuOqE3U0OR9O+G
mQ5lQshXfnfmC/h+PjymPVyG14Z8hyTndDCCy4AiB7n/4iZunZjogv0oj30u6qkz
Lbq7P7CXSbwcy3KbFUNcOv63+YLMwFPgifWocfzJG8UuqVsQ/rTJ2v3ReSk3RTBI
Y/e87aKPd+hRqz4DJlKmodPxRy8N5wSGExsdZrtOXRMjqTapXBDRtQ5AoMEY1LhM
kVsrOJh6D03VOkUDtwTu91dOmLWrt5xpJ1yZ7WfO9bibz8Q1rcmJyPPd+fZxRcdO
JP/Iy/D9hwIDAQABo4ICjTCCAokwHQYDVR0OBBYEFEMG6gFd0fOxZwh/sAve/3LV
tuBwMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGRBggrBgEFBQcBCwSBhDCB
gTB/BggrBgEFBQcwC4ZzcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9BOTE5MkE5ODAwMDAvNC8zMjMxMzYyZTMxMzQzNTJlMzIzMjMwMmUzMDJm
MzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM3MzczMjM2LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHcMA0G
CSqGSIb3DQEBCwUAA4IBAQAJrgKajxZFp5F7WphjQIJ6RXfC948J7ZTwtcnjeJc5
3iZx+dCKvx2nm7UINPJxY0FnPYviSDcrc5DcXjeDBqFPF7LhbM2/2BPCfUFm5sf1
w/xVZAKflxaJcb7Ly/gZO65spWMAyc3jAHvFl9/xy6hznb6zDk1m0fbKYHTdgVDY
BQWI8vlQBLAl93Z/uPH2weYbfddgy2whdDzap3BAfqLCg0eBz7wPjPspazVRoGBk
eWRiw/GBktlbcwQQCi4s46cdpAdTwns3tIQV1DTPNI/flN7S6+qrINcA8lF6ciOU
kLcnS6HcoHuivWEK7l+Zvo+e4HY5LrVvUyE1UHHd3zuY
-----END CERTIFICATE-----
Generated at Wed Apr 17 20:28:24 2024 by rpki-client on console-ams.rpki-client.org