Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030303a3a2f34382d3438203d3e203330303331.roa
File:                     323632303a3133343a363030303a3a2f34382d3438203d3e203330303331.roa (raw, json)
Hash identifier:          z/S56trEz/sdxxMV4XQwDuxMdhDPnXbKUTIKCfA2sJ0=
Subject key identifier:   69:FB:9D:4E:94:E2:02:60:D6:44:AC:3C:9C:FC:C0:C6:5E:68:3C:F0
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       68ECAF40D88AE908CD1D11A1B671968B8A59D32F
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030303a3a2f34382d3438203d3e203330303331.roa
Signing time:             Fri 02 Aug 2024 11:24:27 +0000
ROA not before:           Fri 02 Aug 2024 11:19:27 +0000
ROA not after:            Fri 01 Aug 2025 11:24:27 +0000
asID:                     30031
IP address blocks:        2620:134:6000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ec:af:40:d8:8a:e9:08:cd:1d:11:a1:b6:71:96:8b:8a:59:d3:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:27 2024 GMT
            Not After : Aug  1 11:24:27 2025 GMT
        Subject: CN=69FB9D4E94E20260D644AC3C9CFCC0C65E683CF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c9:40:42:49:88:6f:7d:5e:ae:c5:98:0b:4f:
                    7b:c1:2a:ea:36:95:00:80:0a:69:ce:f1:64:5e:b6:
                    14:15:42:c2:d8:9f:7a:b4:72:cc:cd:24:39:99:c7:
                    46:32:2b:c9:32:45:4d:3d:49:a0:5e:55:f6:59:68:
                    78:31:f1:54:83:6a:4e:bb:93:55:ef:df:3a:da:6f:
                    43:bf:d5:ca:ae:af:bd:28:bb:bc:eb:68:ee:45:f7:
                    50:8d:3f:a8:8a:5b:8f:72:ec:d8:b5:1b:90:e0:c5:
                    29:8e:06:46:c5:a1:80:c3:26:a1:52:49:1e:a7:23:
                    4e:25:22:fe:23:7e:03:75:fb:74:91:ea:07:bf:aa:
                    02:bd:81:91:b6:a0:b6:5f:7c:ef:43:39:3c:ec:8e:
                    2c:cc:78:41:80:ba:7c:32:ff:07:51:3f:c7:c7:8b:
                    61:9f:03:7a:cb:e1:41:5b:c2:0d:7d:5f:76:e8:03:
                    87:fd:7e:c7:00:4c:11:4b:d4:85:f4:a0:e5:f1:66:
                    7a:5c:4c:76:ea:f5:a5:37:55:63:9c:e1:6e:b8:39:
                    34:04:6d:ee:65:10:12:ca:f8:43:8c:9f:e1:65:66:
                    bb:08:81:32:c2:d0:a7:e0:b7:60:7e:75:7e:de:1e:
                    81:3f:4d:03:71:8e:b6:a4:f7:b9:be:52:ec:6b:b6:
                    b9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FB:9D:4E:94:E2:02:60:D6:44:AC:3C:9C:FC:C0:C6:5E:68:3C:F0
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030303a3a2f34382d3438203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:06:81:14:7c:36:ca:23:d0:cc:ab:d8:fa:b1:7f:37:ac:d2:
         d9:7d:b4:34:4e:5c:3f:61:8d:c6:82:1c:cc:75:6b:e7:a5:9e:
         76:e2:df:65:64:a9:28:08:f3:47:9c:78:c8:5f:58:80:2b:31:
         3f:e3:86:66:4d:f3:8a:8e:7f:a7:ff:26:cf:af:53:0a:d8:06:
         72:58:52:be:91:95:97:fd:88:15:1c:c8:5a:3b:e5:16:b0:11:
         69:67:1c:a4:4d:34:02:52:14:e4:af:fa:af:16:b0:69:6c:b5:
         58:8e:be:fd:cd:a8:1b:87:5d:7d:a2:91:b8:27:00:16:b4:e1:
         f1:b2:10:47:0f:dc:d7:fd:9c:11:86:e3:bf:17:7c:63:6b:9a:
         a9:1c:4b:cc:a7:28:fa:fc:5e:fb:c3:4b:52:46:67:96:23:c6:
         b1:1a:46:12:2c:e7:a5:a8:1d:90:1c:ff:74:31:01:ce:25:1d:
         0a:21:3c:87:3a:70:10:4a:08:0b:f5:2c:db:b7:75:a2:28:91:
         42:fb:1e:10:f1:52:07:25:3d:fe:73:10:c7:e4:7d:34:af:6b:
         82:47:ec:b0:ea:f5:fe:72:8b:d0:b0:a9:a7:60:5c:25:f3:15:
         94:b4:99:d6:68:b3:6d:f3:e4:be:54:a6:f1:8b:56:43:04:ed:
         48:67:fc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:14:01 2024 by rpki-client on console-ams.rpki-client.org