Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232332e302f32342d3234203d3e20333937373236.roa
File:                     3231362e3134352e3232332e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier:          SAFkkAnOYschCGKpi8UHEcnv3PTo1eklsMUaf00fWNo=
Subject key identifier:   D2:A6:BD:6C:09:EB:F9:AC:D2:3C:53:26:FE:4D:58:75:B1:80:58:3E
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       766308948314E68728791B5C5FBA7C04B827589D
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232332e302f32342d3234203d3e20333937373236.roa
Signing time:             Fri 01 Sep 2023 11:14:32 +0000
ROA not before:           Fri 01 Sep 2023 11:09:32 +0000
ROA not after:            Fri 30 Aug 2024 11:14:32 +0000
asID:                     397726
IP address blocks:        216.145.223.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Apr 2024 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:63:08:94:83:14:e6:87:28:79:1b:5c:5f:ba:7c:04:b8:27:58:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:32 2023 GMT
            Not After : Aug 30 11:14:32 2024 GMT
        Subject: CN=D2A6BD6C09EBF9ACD23C5326FE4D5875B180583E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6f:43:16:50:5d:ac:a4:88:ae:b0:d1:8b:31:
                    b6:9d:e0:a6:9a:99:d0:3d:66:c0:9f:68:e1:75:90:
                    40:a6:a7:1c:69:af:26:a7:58:67:e0:6d:9a:e7:24:
                    e2:83:cb:8c:ae:0e:24:1f:16:42:4b:89:f4:87:2f:
                    75:96:95:93:f2:4c:d3:a6:49:99:dc:3f:b8:1a:63:
                    30:35:b6:a4:30:8b:1b:54:a9:ce:78:25:42:d0:cc:
                    20:2e:11:92:c4:18:02:10:24:6b:d8:50:7f:a6:ce:
                    1b:04:c4:f0:2c:97:d9:cd:6d:61:02:71:5d:d1:1a:
                    30:62:65:3c:b4:ed:6a:11:0b:ce:60:53:dc:f0:87:
                    4e:0f:5c:06:af:6c:33:93:07:e3:47:c4:28:f1:cf:
                    c7:9f:b0:86:3f:09:87:85:85:90:ee:db:e0:9e:8b:
                    78:f6:0f:07:e5:a4:17:11:21:f6:7a:67:b6:04:e0:
                    4d:89:73:87:05:33:15:d0:e2:97:1e:0b:6e:0e:2e:
                    1b:9b:5d:f1:67:b7:b9:ae:eb:81:1f:d9:57:37:f1:
                    16:c6:f8:d8:6e:ed:52:17:79:32:0d:99:f2:e2:15:
                    43:1b:24:ca:b9:0c:aa:0b:b8:da:b5:d6:fd:01:05:
                    6f:9c:72:c8:a2:2a:dd:30:ad:37:c2:6e:4a:ff:ed:
                    1d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A6:BD:6C:09:EB:F9:AC:D2:3C:53:26:FE:4D:58:75:B1:80:58:3E
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232332e302f32342d3234203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:d9:54:c0:31:b4:3a:28:18:d6:b4:5b:e6:f2:96:73:cc:b3:
         5c:73:6c:cb:c7:b0:95:cc:56:51:95:ff:77:a5:27:2e:85:87:
         ee:ae:22:1b:02:de:3e:c7:49:97:f8:d9:26:0a:1e:7a:48:c9:
         4a:9c:58:c5:ea:2e:aa:bb:f6:a2:dd:28:56:e6:de:27:40:f9:
         69:20:ed:67:c2:71:9e:a1:8e:43:c0:e1:8e:0f:a3:ff:38:8d:
         a2:37:33:15:31:81:97:ec:85:5e:f5:74:91:25:5e:52:4a:0d:
         e6:8a:6b:12:d4:db:21:a3:dc:03:19:14:17:d3:73:70:04:11:
         82:92:81:31:8e:c6:7d:91:5c:55:7d:16:71:48:a8:41:6b:6f:
         c3:1d:93:3c:f2:bb:30:56:36:74:4b:e3:00:ee:f3:33:0c:3c:
         2d:c1:0e:e8:de:c4:05:cb:8c:b9:af:f9:83:ab:92:2f:d5:2f:
         c2:95:95:8c:e2:c2:1e:43:9e:b2:c7:0b:00:e9:72:68:9e:a6:
         36:bf:55:0b:20:b9:7a:97:e1:68:e1:20:dd:d2:34:c3:86:57:
         24:5d:09:86:1e:23:48:0e:72:7c:eb:5d:ab:3e:a7:4a:95:53:
         39:9e:9b:04:ec:3b:ef:dd:d9:f6:38:2b:71:f2:9c:84:96:bb:
         d9:c7:84:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 16:08:12 2024 by rpki-client on console-ams.rpki-client.org