Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203337323335.roa
File:                     3231362e3134352e3232322e302f32342d3234203d3e203337323335.roa (raw, json)
Hash identifier:          IjTA3MB8NCe9c7bTaCyINCJRt3a3tM/5AXkxzrtr9dg=
Subject key identifier:   C3:83:07:20:7F:3B:08:24:8D:0C:70:25:26:16:F3:AD:CD:7F:F2:30
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       4E4F2EE9C0138ED9E817201D2197C13AAC71AE8F
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203337323335.roa
Signing time:             Fri 01 Sep 2023 11:14:27 +0000
ROA not before:           Fri 01 Sep 2023 11:09:27 +0000
ROA not after:            Fri 30 Aug 2024 11:14:27 +0000
asID:                     37235
IP address blocks:        216.145.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 10:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:4f:2e:e9:c0:13:8e:d9:e8:17:20:1d:21:97:c1:3a:ac:71:ae:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:27 2023 GMT
            Not After : Aug 30 11:14:27 2024 GMT
        Subject: CN=C38307207F3B08248D0C70252616F3ADCD7FF230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2f:02:72:f3:f7:30:55:e1:18:a1:a7:e3:b6:
                    95:55:ec:7e:55:78:70:23:60:db:90:39:8d:17:40:
                    16:f3:14:93:70:58:c1:ed:2f:ca:0f:83:d7:ae:c2:
                    05:f8:b7:bc:d9:22:f2:37:11:5e:5e:9b:4e:9e:cd:
                    06:07:81:8f:6e:ce:c0:b1:66:4a:6c:90:c8:54:21:
                    8a:d6:5b:12:54:c5:b8:ce:f8:fc:dd:04:7e:56:f6:
                    d9:31:0d:3e:3d:cb:8d:1a:16:c8:92:2d:04:db:5d:
                    cc:f0:0d:8d:a3:78:a1:7e:14:32:2e:3c:41:81:6d:
                    e4:d8:ad:8f:71:66:42:95:8b:18:9a:68:ec:32:44:
                    b1:af:63:1f:41:1d:1a:b3:64:69:96:5d:17:9a:ba:
                    6a:37:b3:ba:52:6c:55:25:48:6c:11:5a:20:87:7d:
                    49:bc:15:6d:95:a0:42:c6:e1:b1:4d:fd:46:97:03:
                    b4:2a:29:40:fe:d2:68:15:93:0d:81:10:ca:f3:d8:
                    59:35:e2:af:28:f1:73:7e:91:60:9c:d2:cc:b8:b1:
                    6a:68:df:73:2e:ed:2d:69:b2:8d:58:db:37:0a:3f:
                    b4:47:f6:ea:c4:8c:00:0a:d5:dc:5b:64:21:39:e4:
                    34:fe:cf:23:99:b3:53:19:8b:16:b9:f9:1b:fc:b7:
                    09:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:83:07:20:7F:3B:08:24:8D:0C:70:25:26:16:F3:AD:CD:7F:F2:30
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203337323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:b5:49:63:aa:12:19:4f:76:d6:79:28:bd:1f:7d:26:20:b6:
         ec:95:0a:05:84:52:25:8e:47:31:a4:ae:e4:77:f7:73:2e:68:
         85:f2:87:a9:3e:97:c0:3e:7a:02:d8:9f:b0:0d:86:58:d2:ee:
         a6:86:c1:dd:5c:9a:f8:87:50:16:60:b8:f9:f2:b8:0e:3c:1b:
         2d:ed:e8:33:10:85:f6:18:a1:f2:9c:33:0b:ab:98:73:61:ea:
         69:fa:cb:48:05:cc:fd:50:21:21:a9:aa:11:74:80:d4:fe:18:
         95:8c:13:4c:b2:6b:9a:b9:6c:a2:29:49:67:4a:7c:3d:06:c8:
         7a:f8:dc:6c:7b:df:01:7a:13:b9:38:2b:8a:08:01:d6:4d:d7:
         f5:2d:37:c3:26:e4:40:a3:de:f3:b1:7a:39:8e:fb:94:d0:9a:
         85:c1:32:24:09:dc:06:32:71:52:86:8d:37:63:18:77:b4:71:
         f3:6c:e5:99:f9:bc:d4:7b:60:71:26:4d:d6:9d:cc:ef:35:ad:
         56:68:10:61:5a:d7:80:17:72:c2:f1:ee:9f:0e:79:3e:66:16:
         9d:dd:da:5a:cd:1b:69:9c:f1:81:7c:2c:1d:25:f5:58:2b:79:
         2a:eb:a0:33:cc:28:48:ee:87:9d:bd:65:7b:63:8c:4e:a8:31:
         74:e7:fe:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 09:10:36 2024 by rpki-client on console-ams.rpki-client.org