Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030323a3a2f34382d3438203d3e203330303331.roa
File:                     323632303a3133343a363030323a3a2f34382d3438203d3e203330303331.roa (raw, json)
Hash identifier:          9nRFYBVgQhQ99bId5YMstRO16U8ej/wlN9Wtav2mrHY=
Subject key identifier:   8A:15:DB:8E:50:C4:76:25:EE:8A:A8:04:D0:24:C2:EE:E4:9B:0C:EB
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       51A85CF42CE7CC751E8B64A57B5B72A131A816AB
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030323a3a2f34382d3438203d3e203330303331.roa
Signing time:             Fri 01 Sep 2023 11:14:31 +0000
ROA not before:           Fri 01 Sep 2023 11:09:31 +0000
ROA not after:            Fri 30 Aug 2024 11:14:31 +0000
asID:                     30031
IP address blocks:        2620:134:6002::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 10:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:a8:5c:f4:2c:e7:cc:75:1e:8b:64:a5:7b:5b:72:a1:31:a8:16:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:31 2023 GMT
            Not After : Aug 30 11:14:31 2024 GMT
        Subject: CN=8A15DB8E50C47625EE8AA804D024C2EEE49B0CEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a2:0e:80:ab:7c:d2:b6:91:9f:b2:1e:a4:7a:
                    c7:69:34:76:66:3a:ab:9c:07:68:5e:39:58:a4:ba:
                    da:95:0c:59:b2:ff:d0:6a:58:b2:35:b5:3d:4d:e6:
                    da:7b:4b:16:90:29:9b:68:24:ea:85:de:8a:3d:0f:
                    ea:23:d3:5e:4a:3a:c7:a6:8d:34:f5:14:de:9f:0c:
                    46:ac:f4:67:c5:04:0e:c9:ba:a9:2f:54:db:9a:7a:
                    62:36:c6:7e:a8:ab:c2:85:26:c9:14:e7:d2:83:8e:
                    52:26:0e:93:56:85:67:79:4d:ad:6b:6d:27:37:08:
                    c6:7e:36:8f:a8:55:da:7a:f7:4f:8d:65:11:0f:90:
                    87:78:12:07:ce:c6:10:ec:09:75:dd:08:ec:91:2a:
                    ed:d6:e2:08:15:d9:0f:6b:3d:1d:6c:0b:74:4e:f0:
                    0c:d5:6b:af:8f:6a:e3:d2:83:84:34:13:15:da:54:
                    1d:1a:b7:70:c0:61:26:48:10:20:2c:61:14:71:78:
                    a7:e0:61:d7:86:80:95:83:c5:90:79:aa:9f:f8:dd:
                    a4:4c:60:98:9f:07:be:0b:a7:97:7b:7b:7b:15:ab:
                    83:09:ce:2e:bb:48:78:fd:8c:47:35:66:d9:70:de:
                    6f:14:dd:53:3a:7a:97:cd:7b:fc:25:d2:8c:7d:31:
                    47:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:15:DB:8E:50:C4:76:25:EE:8A:A8:04:D0:24:C2:EE:E4:9B:0C:EB
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030323a3a2f34382d3438203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6002::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:91:03:37:b5:b9:2b:0b:05:b3:a3:43:97:f0:e2:5e:0d:c3:
         d6:b5:9f:44:99:fd:be:24:73:47:b0:5b:ef:05:45:12:4e:6c:
         d8:9b:d9:a9:84:33:2d:cf:73:45:55:cd:cf:56:d2:18:af:7f:
         7d:77:dd:af:9e:48:fc:e5:6e:9a:c7:e4:47:9d:28:4d:bc:01:
         c1:19:9c:d0:bc:12:b4:65:8f:0b:b2:c2:a7:2e:b1:f5:21:4c:
         ad:7b:eb:80:a6:d4:eb:f3:85:af:c9:ef:53:6c:4f:97:36:e5:
         c1:f1:36:4c:12:81:ac:28:c8:a2:20:d8:e0:ff:df:d1:6f:cb:
         88:3c:40:85:69:c9:3b:cc:50:36:68:f7:df:5a:7d:d6:33:2c:
         73:f3:7a:f0:ef:42:43:96:d8:a6:11:27:55:db:6d:79:c7:c1:
         19:d6:4c:78:21:a6:b2:43:68:8d:5a:10:83:ba:56:28:70:55:
         07:1f:52:d5:b2:1a:09:76:05:24:56:86:40:8d:5b:2e:fa:5d:
         2d:df:58:f1:09:c8:39:b6:fe:c8:24:dd:81:03:82:99:9d:92:
         94:ff:09:82:cd:70:78:c0:64:fd:83:a1:3f:f6:4f:b2:ac:4a:
         2f:54:a9:e2:27:d5:44:6b:51:f4:22:b2:24:69:a5:ee:6a:24:
         5c:72:b1:2d
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIUUahc9CznzHUei2Sle1tyoTGoFqswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwOTAxMTEwOTMxWhcNMjQwODMwMTExNDMx
WjAzMTEwLwYDVQQDEyg4QTE1REI4RTUwQzQ3NjI1RUU4QUE4MDREMDI0QzJFRUU0
OUIwQ0VCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6IOgKt80raR
n7IepHrHaTR2ZjqrnAdoXjlYpLralQxZsv/QaliyNbU9Tebae0sWkCmbaCTqhd6K
PQ/qI9NeSjrHpo009RTenwxGrPRnxQQOybqpL1TbmnpiNsZ+qKvChSbJFOfSg45S
Jg6TVoVneU2ta20nNwjGfjaPqFXaevdPjWURD5CHeBIHzsYQ7Al13QjskSrt1uII
FdkPaz0dbAt0TvAM1Wuvj2rj0oOENBMV2lQdGrdwwGEmSBAgLGEUcXin4GHXhoCV
g8WQeaqf+N2kTGCYnwe+C6eXe3t7FauDCc4uu0h4/YxHNWbZcN5vFN1TOnqXzXv8
JdKMfTFH1wIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFIoV245QxHYl7oqoBNAkwu7k
mwzrMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGUBggrBgEFBQcBCwSBhzCB
hDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQTkxOTJBOTgwMDAwLzQvMzIzNjMyMzAzYTMxMzMzNDNhMzYzMDMwMzIz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB
NGACMA0GCSqGSIb3DQEBCwUAA4IBAQAEkQM3tbkrCwWzo0OX8OJeDcPWtZ9Emf2+
JHNHsFvvBUUSTmzYm9mphDMtz3NFVc3PVtIYr399d92vnkj85W6ax+RHnShNvAHB
GZzQvBK0ZY8LssKnLrH1IUyte+uAptTr84Wvye9TbE+XNuXB8TZMEoGsKMiiINjg
/9/Rb8uIPECFack7zFA2aPffWn3WMyxz83rw70JDltimESdV2215x8EZ1kx4Iaay
Q2iNWhCDulYocFUHH1LVshoJdgUkVoZAjVsu+l0t31jxCcg5tv7IJN2BA4KZnZKU
/wmCzXB4wGT9g6E/9k+yrEovVKniJ9VEa1H0IrIkaaXuaiRccrEt
-----END CERTIFICATE-----
Generated at Thu May 9 09:43:27 2024 by rpki-client on console-fra.rpki-client.org