Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203337323335.roa
File:                     3231362e3134352e3232322e302f32342d3234203d3e203337323335.roa (raw, json)
Hash identifier:          H10LplHTENm3D5TxNhvfgWiebE6aqoINGJC3eVAsqPs=
Subject key identifier:   84:31:99:C9:63:C6:D9:DC:E3:B3:22:A2:26:01:87:73:0B:F0:3A:73
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       0A5633E86DD1EF026A5249C32C7398CDA5EE6809
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203337323335.roa
Signing time:             Fri 02 Aug 2024 11:24:29 +0000
ROA not before:           Fri 02 Aug 2024 11:19:29 +0000
ROA not after:            Fri 01 Aug 2025 11:24:29 +0000
asID:                     37235
IP address blocks:        216.145.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 07:13:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:56:33:e8:6d:d1:ef:02:6a:52:49:c3:2c:73:98:cd:a5:ee:68:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:29 2024 GMT
            Not After : Aug  1 11:24:29 2025 GMT
        Subject: CN=843199C963C6D9DCE3B322A2260187730BF03A73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7c:86:6d:da:c5:2e:71:db:dd:28:64:b4:a0:
                    69:62:51:0f:a3:cd:26:e7:d4:5d:03:f0:44:09:27:
                    0e:af:36:95:17:44:7b:a8:76:ec:6b:ca:7a:24:01:
                    72:81:7a:24:a8:3f:1e:50:48:f2:ae:53:4f:e7:1e:
                    90:3b:44:21:1c:f4:0b:82:58:cb:c9:c2:0c:67:bb:
                    46:96:aa:17:92:1b:e8:57:19:90:af:c1:ee:60:1e:
                    0c:e5:80:06:14:17:b7:e9:83:64:fb:7b:35:84:83:
                    a7:a5:36:44:bd:df:c9:7b:41:0e:df:d0:a5:2e:2a:
                    f1:9a:09:9f:17:6d:d9:cc:39:20:09:e6:6f:01:97:
                    b5:87:3f:49:72:3c:96:24:14:de:cf:cc:bc:01:43:
                    81:9e:8e:6b:70:8c:6c:c5:01:fe:35:e9:e7:f7:94:
                    0c:ee:5d:f3:9c:92:17:65:2e:23:f5:47:da:24:fc:
                    79:03:cc:3a:29:aa:09:ce:dc:43:44:f7:4e:e0:69:
                    8a:86:cc:30:78:14:5c:10:98:44:7d:fa:00:25:f7:
                    ff:00:8a:ad:d0:3d:8d:5d:47:df:87:5d:2d:18:31:
                    49:4d:20:ef:9d:b5:f1:a8:6e:f3:a6:5e:e8:db:fc:
                    fe:6b:7d:d2:6e:28:25:21:99:08:68:6d:e7:37:b1:
                    29:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:31:99:C9:63:C6:D9:DC:E3:B3:22:A2:26:01:87:73:0B:F0:3A:73
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203337323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:c7:d8:d4:f3:af:91:9f:16:e9:77:e6:47:b2:36:7f:0d:25:
         d8:0c:37:89:19:e2:4e:4c:3a:bd:c8:bb:be:40:8a:4e:9b:96:
         93:f2:a4:de:4c:a5:fb:c2:03:bf:1c:23:14:f7:d7:11:5a:6b:
         ed:b0:cf:c8:d4:54:85:04:48:c2:e9:f2:aa:72:de:8a:9f:e4:
         6f:29:44:59:2e:b7:00:fb:c3:6a:1b:dc:26:56:1b:b9:e4:a4:
         9b:8c:1f:33:e1:63:d3:89:14:4a:3d:36:c8:b1:89:9e:57:6c:
         ec:40:a4:fa:9a:d9:b3:51:17:d0:d2:f0:7f:49:a5:48:3c:d4:
         c7:f1:d7:37:c0:6e:3a:e4:31:58:fd:c9:1e:7e:96:39:23:11:
         c1:d3:7b:54:33:53:c6:4c:f0:e0:50:24:28:00:92:62:ea:15:
         79:ce:9d:df:22:d2:53:b4:8a:18:5a:83:ce:a0:24:21:df:d2:
         75:85:87:3a:26:77:7c:93:a1:18:3e:4e:18:bd:1c:01:48:e2:
         47:b9:6a:18:4b:06:62:08:23:c5:26:a4:68:94:d2:ce:cf:9c:
         a0:b3:35:4b:68:37:91:fe:4d:58:c4:6e:40:b9:17:60:b7:28:
         9d:da:f7:87:eb:bd:7f:a1:99:c4:22:f4:88:0d:fc:50:67:f0:
         4b:eb:0d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 07:52:36 2024 by rpki-client on console-fra.rpki-client.org