Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030343a3a2f34382d3438203d3e20333937373236.roa
File:                     323632303a3133343a363030343a3a2f34382d3438203d3e20333937373236.roa (raw, json)
Hash identifier:          1K5rzIDUHpyzaasU2gx+54mva5pI8dZskCIjoeoHvPA=
Subject key identifier:   E2:62:77:B3:6D:5D:4B:0E:11:E3:C9:C9:EE:83:AA:D1:0A:E4:37:2A
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       79AAB83D7A911F68D26C9E1CF4358916F7A8BED8
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030343a3a2f34382d3438203d3e20333937373236.roa
Signing time:             Fri 01 Sep 2023 11:14:32 +0000
ROA not before:           Fri 01 Sep 2023 11:09:32 +0000
ROA not after:            Fri 30 Aug 2024 11:14:32 +0000
asID:                     397726
IP address blocks:        2620:134:6004::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 00:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:aa:b8:3d:7a:91:1f:68:d2:6c:9e:1c:f4:35:89:16:f7:a8:be:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:32 2023 GMT
            Not After : Aug 30 11:14:32 2024 GMT
        Subject: CN=E26277B36D5D4B0E11E3C9C9EE83AAD10AE4372A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5f:45:0a:e9:2b:fa:c5:b3:6e:12:b2:0a:fa:
                    d9:ec:bd:2d:b1:e0:59:cf:f0:54:5b:21:f4:fd:ad:
                    8a:ba:f5:b6:50:b0:68:d6:ff:43:f9:bf:58:1c:20:
                    b1:1b:a9:66:a4:bb:fd:6d:14:d1:e5:63:24:fb:b7:
                    bc:51:61:a9:71:09:44:b8:6b:5c:70:5f:7b:98:f1:
                    da:e3:5d:5e:59:1e:f3:3d:bf:45:dc:f8:dd:eb:e2:
                    3f:2b:4d:80:c8:43:dd:d0:de:7a:60:a3:c9:1d:6f:
                    cf:97:2d:13:0e:08:f5:01:9a:98:4f:d4:a8:90:93:
                    60:72:57:49:7f:b1:5f:e0:ef:f4:1c:06:33:de:04:
                    1b:35:ee:65:af:9f:1a:4a:ac:29:ce:b2:61:7b:9b:
                    a2:80:ce:22:24:fd:4f:e4:53:83:89:ef:26:c0:1e:
                    d0:16:bc:3b:cf:50:88:10:00:de:6b:74:98:c2:a3:
                    08:41:56:39:de:4a:90:0e:70:07:7a:5f:97:5c:d2:
                    d3:82:c3:55:2e:01:fd:f1:8b:71:6c:f4:fb:b2:1a:
                    2b:6c:3b:98:92:a1:7b:1e:0d:f7:76:9a:ff:b2:19:
                    2f:66:c2:5c:a1:0d:e9:80:04:94:22:dc:80:15:d0:
                    ea:05:ac:22:d8:4c:83:ab:37:a6:49:d7:81:82:55:
                    e6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:62:77:B3:6D:5D:4B:0E:11:E3:C9:C9:EE:83:AA:D1:0A:E4:37:2A
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030343a3a2f34382d3438203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6004::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:50:cf:67:1f:66:1d:b0:b9:6f:12:e8:3e:bc:be:6a:8f:e2:
         ea:f2:bf:f9:5e:79:90:ff:4d:d9:b7:e5:3a:f3:b7:13:c1:28:
         c4:3b:ac:f2:60:cf:f7:83:a3:9d:2a:4e:ec:5f:2a:3b:24:19:
         11:87:df:15:c7:4a:2a:65:00:f4:8b:42:6c:55:77:ef:77:b7:
         97:e4:90:38:bc:44:ff:a5:d3:cb:22:b6:01:a8:37:f4:1c:02:
         ca:22:16:2f:3b:6c:d5:07:57:99:e8:30:95:01:a4:88:96:cf:
         51:e6:b9:20:9d:01:32:f8:cd:36:13:ef:ab:4d:c5:a5:ff:d0:
         44:91:fc:01:e1:70:0d:af:cc:23:63:02:db:d0:b9:ba:d1:69:
         6a:77:81:5f:8e:3e:6d:a5:49:12:08:10:a1:99:8b:87:d5:2e:
         0f:09:4d:ff:86:a8:ee:c2:c5:9e:f1:45:2d:a8:79:fd:22:73:
         a8:38:e3:3c:74:f0:c3:9c:dd:1d:63:87:e8:e4:64:e3:a6:a8:
         01:11:65:ca:5c:f5:77:58:18:15:1b:b1:e6:33:a1:e2:f8:99:
         53:a1:f6:14:6e:32:36:c7:9a:b8:bd:aa:b9:fd:06:f3:ed:d9:
         2c:c9:ee:45:dc:c3:3b:bb:3d:20:a2:d9:ff:d6:a2:04:87:87:
         36:60:41:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 01:06:14 2024 by rpki-client on console-ams.rpki-client.org