Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030313a3a2f34382d3438203d3e203330303331.roa
File:                     323632303a3133343a363030313a3a2f34382d3438203d3e203330303331.roa (raw, json)
Hash identifier:          C+gfEDvoeiRVr4/TC3BHXZYYk2AnGsn0l9fe4uTUbxM=
Subject key identifier:   54:4C:6D:E8:D1:C7:57:E7:20:47:04:5E:2C:8B:98:90:06:17:82:D5
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       084A3E3E99B3EC8D55FC0257E1F119FDBF7F447A
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030313a3a2f34382d3438203d3e203330303331.roa
Signing time:             Fri 01 Sep 2023 11:14:26 +0000
ROA not before:           Fri 01 Sep 2023 11:09:26 +0000
ROA not after:            Fri 30 Aug 2024 11:14:26 +0000
asID:                     30031
IP address blocks:        2620:134:6001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:4a:3e:3e:99:b3:ec:8d:55:fc:02:57:e1:f1:19:fd:bf:7f:44:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:26 2023 GMT
            Not After : Aug 30 11:14:26 2024 GMT
        Subject: CN=544C6DE8D1C757E72047045E2C8B9890061782D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a3:05:43:e9:3f:d1:77:47:74:d5:cb:d6:39:
                    a9:af:9f:52:f4:34:ce:af:cc:98:00:e1:c2:bd:7b:
                    81:e6:1c:9a:21:95:0c:04:b4:53:db:b3:e2:71:3b:
                    f7:ab:35:a0:cd:aa:ab:ca:b4:fb:35:18:43:05:68:
                    5f:32:84:44:a1:cf:8f:e6:88:91:ae:3c:6e:6d:d8:
                    04:6b:d0:54:10:de:de:70:72:a0:e0:23:ef:93:02:
                    81:7b:b0:1a:5c:1a:08:55:bc:8b:24:7d:da:b9:b1:
                    0b:97:56:ea:73:6e:2d:8a:99:06:74:a8:ac:4e:55:
                    99:57:5c:6b:3c:fd:a0:28:9c:b5:e8:72:93:3c:49:
                    a5:71:e8:03:1f:1e:49:88:0a:7d:c8:2c:3a:91:d7:
                    d5:6b:b4:1e:8d:d1:dc:a1:4c:ff:35:ea:e8:1f:1a:
                    71:9c:6e:15:2c:80:11:28:55:74:fa:28:47:1a:be:
                    d4:89:c0:f5:fd:43:bc:46:ef:3d:7f:c2:8d:04:c1:
                    05:f5:3b:d8:1c:90:ad:e6:f9:18:83:41:4c:13:1a:
                    1a:8f:04:94:33:3c:a4:39:98:07:d8:08:b0:8a:25:
                    25:9d:bf:7b:7b:d1:d8:95:88:9e:48:2d:97:e9:74:
                    6e:f8:6c:3b:90:14:a5:90:da:e6:83:8a:0b:60:ba:
                    2b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4C:6D:E8:D1:C7:57:E7:20:47:04:5E:2C:8B:98:90:06:17:82:D5
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030313a3a2f34382d3438203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6001::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:3c:cc:71:86:d1:85:4a:5c:e2:c6:db:69:9f:75:df:c5:28:
         49:6f:56:15:78:a4:fe:8b:56:16:03:9b:0c:1b:8a:c8:2d:08:
         da:45:98:16:36:4c:de:86:f2:f4:c1:bb:60:7c:42:95:1c:ba:
         51:27:a1:72:20:26:cc:85:3a:3a:2f:60:9e:07:7c:b2:12:13:
         d7:c0:ba:37:8a:62:b1:7b:9f:7a:12:4c:25:c0:ba:85:44:dd:
         4c:7d:e1:6c:16:e5:f7:1f:e9:2c:a9:70:7a:a0:3f:c1:20:1c:
         7b:e8:3b:70:43:22:d1:5a:29:1e:d4:2a:66:2c:d0:91:5b:c8:
         30:50:c3:5f:ab:d6:b7:0d:96:4b:22:c2:d8:0e:f7:31:50:5f:
         67:39:77:12:43:ff:a4:44:eb:40:83:8f:9f:bd:77:dd:f0:56:
         10:c5:8d:fd:55:d3:cf:07:f7:d9:1a:51:70:62:8d:fc:b6:e9:
         78:91:71:13:a0:d2:e7:56:ff:91:a8:ac:f0:ad:6c:ff:ac:cc:
         b5:b9:f4:03:69:01:08:1f:e3:0f:01:4b:82:d5:da:50:cd:9e:
         43:f4:56:3b:4a:b4:69:dc:04:8f:f2:54:b1:b2:7c:d8:94:8a:
         1d:57:9b:86:04:2a:17:68:29:e1:7c:47:40:18:b2:9d:04:57:
         97:99:22:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 17:32:31 2024 by rpki-client on console-fra.rpki-client.org