Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232302e302f32342d3234203d3e20333937373236.roa
File:                     3231362e3134352e3232302e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier:          H8w6V0CKjfSHQDO8f8I5YbVgNycgFEQqItoCIPCCjrA=
Subject key identifier:   16:7D:EA:29:1B:46:31:8B:D7:EE:62:D1:C9:1B:DC:38:3B:90:F3:13
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       3DBBB5ED51B29D452806F5037444D79D1A8CD866
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232302e302f32342d3234203d3e20333937373236.roa
Signing time:             Fri 02 Aug 2024 11:24:29 +0000
ROA not before:           Fri 02 Aug 2024 11:19:29 +0000
ROA not after:            Fri 01 Aug 2025 11:24:29 +0000
asID:                     397726
IP address blocks:        216.145.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 07:13:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:bb:b5:ed:51:b2:9d:45:28:06:f5:03:74:44:d7:9d:1a:8c:d8:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:29 2024 GMT
            Not After : Aug  1 11:24:29 2025 GMT
        Subject: CN=167DEA291B46318BD7EE62D1C91BDC383B90F313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dd:f6:66:33:f4:f3:d5:93:7f:ee:a8:6e:b0:
                    8d:62:3c:3e:85:ad:d0:62:ee:5d:4f:21:c1:5f:f2:
                    05:a4:f7:e8:7a:e8:2c:32:66:ce:dc:02:0d:64:0c:
                    2c:79:b8:8e:e4:d4:7d:30:70:c1:8e:73:0c:e3:7b:
                    83:47:69:76:43:51:e9:7f:a8:45:db:ab:ea:11:ce:
                    88:1a:e7:97:bd:7c:45:0d:71:20:1b:8a:e3:92:2a:
                    8a:0e:a8:0c:bb:ad:9a:7b:16:3c:81:4e:fb:fd:05:
                    66:08:e1:89:24:16:bf:52:39:5f:82:3f:10:16:3d:
                    11:88:cb:3c:22:dc:48:f4:63:78:44:d3:11:6e:49:
                    f5:4c:bc:cb:ca:48:7b:ec:49:76:3b:fb:53:b4:11:
                    fd:96:e2:d5:0c:b6:ad:55:c3:cf:2f:13:f6:93:c2:
                    4f:04:79:a4:33:e3:5a:31:4e:d0:29:14:65:e2:33:
                    7a:12:4f:ad:90:a7:21:2f:0a:b1:6e:6d:2a:4c:1f:
                    9d:76:20:81:a8:cf:f5:64:d5:e1:75:78:44:c6:ce:
                    b0:03:0c:ad:4f:9a:08:80:85:2f:05:65:64:e7:fe:
                    33:14:f8:3a:09:eb:31:4e:1d:be:53:2c:a3:68:44:
                    d4:0e:e6:63:ef:f3:c8:71:d0:58:43:2b:93:15:6d:
                    d7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7D:EA:29:1B:46:31:8B:D7:EE:62:D1:C9:1B:DC:38:3B:90:F3:13
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232302e302f32342d3234203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:75:d9:cf:c1:13:b8:1c:46:46:07:c4:dd:25:0b:e7:10:74:
         0a:dc:c2:a7:72:c4:1d:12:29:fa:8b:d8:c3:4a:47:be:47:53:
         d4:22:6c:f6:01:12:49:90:5b:8c:00:85:10:40:6f:fc:8a:61:
         b2:2e:fe:3d:2b:21:9d:79:4a:a2:4d:81:c0:30:d4:fb:12:1e:
         bb:8e:e8:9b:f5:b3:71:db:d3:3a:83:b7:ba:b9:ff:f4:c2:ed:
         68:50:28:9c:b1:04:21:fd:9a:60:56:2c:f4:26:b8:9b:5d:83:
         56:07:57:0c:b2:13:7a:0a:82:40:0d:cd:2a:0b:59:ed:ec:7b:
         b3:c5:e0:ee:eb:e8:c4:cb:f2:a1:42:b4:03:73:71:89:06:37:
         eb:38:63:87:92:c1:8e:04:5a:76:96:8e:a0:15:be:75:0f:78:
         50:21:98:63:8f:df:5d:97:0c:58:a6:ea:4b:7f:f4:a4:0b:11:
         19:60:79:b5:3d:3a:ee:68:59:1a:58:22:53:89:73:ed:e0:b9:
         9a:77:31:7b:24:39:f7:77:60:10:25:37:39:dc:e4:7b:23:34:
         5a:31:d1:d2:98:1c:7f:56:f8:3a:96:cd:85:ee:6f:4e:94:8f:
         1f:36:74:c1:3e:57:02:3d:7f:81:8f:ae:88:7b:85:38:55:3b:
         7a:61:2e:3f
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIUPbu17VGynUUoBvUDdETXnRqM2GYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwODAyMTExOTI5WhcNMjUwODAxMTEyNDI5
WjAzMTEwLwYDVQQDEygxNjdERUEyOTFCNDYzMThCRDdFRTYyRDFDOTFCREMzODNC
OTBGMzEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN32ZjP089WT
f+6obrCNYjw+ha3QYu5dTyHBX/IFpPfoeugsMmbO3AINZAwsebiO5NR9MHDBjnMM
43uDR2l2Q1Hpf6hF26vqEc6IGueXvXxFDXEgG4rjkiqKDqgMu62aexY8gU77/QVm
COGJJBa/Ujlfgj8QFj0RiMs8ItxI9GN4RNMRbkn1TLzLykh77El2O/tTtBH9luLV
DLatVcPPLxP2k8JPBHmkM+NaMU7QKRRl4jN6Ek+tkKchLwqxbm0qTB+ddiCBqM/1
ZNXhdXhExs6wAwytT5oIgIUvBWVk5/4zFPg6CesxTh2+UyyjaETUDuZj7/PIcdBY
QyuTFW3X2QIDAQABo4ICjTCCAokwHQYDVR0OBBYEFBZ96ikbRjGL1+5i0ckb3Dg7
kPMTMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGRBggrBgEFBQcBCwSBhDCB
gTB/BggrBgEFBQcwC4ZzcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9BOTE5MkE5ODAwMDAvNC8zMjMxMzYyZTMxMzQzNTJlMzIzMjMwMmUzMDJm
MzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM3MzczMjM2LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHcMA0G
CSqGSIb3DQEBCwUAA4IBAQChddnPwRO4HEZGB8TdJQvnEHQK3MKncsQdEin6i9jD
Ske+R1PUImz2ARJJkFuMAIUQQG/8imGyLv49KyGdeUqiTYHAMNT7Eh67juib9bNx
29M6g7e6uf/0wu1oUCicsQQh/ZpgViz0JribXYNWB1cMshN6CoJADc0qC1nt7Huz
xeDu6+jEy/KhQrQDc3GJBjfrOGOHksGOBFp2lo6gFb51D3hQIZhjj99dlwxYpupL
f/SkCxEZYHm1PTruaFkaWCJTiXPt4LmadzF7JDn3d2AQJTc53OR7IzRaMdHSmBx/
Vvg6ls2F7m9OlI8fNnTBPlcCPX+Bj66Ie4U4VTt6YS4/
-----END CERTIFICATE-----
Generated at Mon Nov 25 07:54:59 2024 by rpki-client on console-ams.rpki-client.org