Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030353a3a2f34382d3438203d3e20333937373236.roa
File:                     323632303a3133343a363030353a3a2f34382d3438203d3e20333937373236.roa (raw, json)
Hash identifier:          w3yIADjSxk+pa6Gvh/CMs1P5YRYxc9jwlwk72JxiA1M=
Subject key identifier:   F4:4C:19:ED:8A:EA:41:92:F8:8A:A9:08:56:4B:CD:46:94:EA:BC:DC
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       601EE136881E7ACBC683DB7D1F3C5072905A22D5
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030353a3a2f34382d3438203d3e20333937373236.roa
Signing time:             Fri 01 Sep 2023 11:14:26 +0000
ROA not before:           Fri 01 Sep 2023 11:09:26 +0000
ROA not after:            Fri 30 Aug 2024 11:14:26 +0000
asID:                     397726
IP address blocks:        2620:134:6005::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 00:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:1e:e1:36:88:1e:7a:cb:c6:83:db:7d:1f:3c:50:72:90:5a:22:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:26 2023 GMT
            Not After : Aug 30 11:14:26 2024 GMT
        Subject: CN=F44C19ED8AEA4192F88AA908564BCD4694EABCDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:91:87:53:78:eb:11:62:c9:77:03:4b:7f:20:
                    cf:84:98:e1:19:c2:1a:3b:4c:3b:f5:aa:4b:13:c2:
                    7e:51:48:5a:03:e0:39:1d:b0:1c:39:48:32:df:0c:
                    97:79:a7:bb:49:55:2e:cd:28:f3:23:af:c4:e0:ed:
                    5f:0a:48:0b:c1:d3:cb:57:cb:e7:93:5f:1f:31:09:
                    18:f0:39:8e:18:62:eb:b2:5a:02:ee:fd:15:c4:6c:
                    16:2e:58:8a:a6:86:ef:85:79:a1:40:d6:a9:87:3c:
                    1c:3e:82:78:07:21:3c:e4:b8:50:43:c8:5d:97:4f:
                    57:7d:5c:61:b5:b8:d0:99:04:94:7c:de:86:b4:d8:
                    3c:4a:78:1b:85:04:13:13:0c:cb:6a:aa:aa:28:8f:
                    5c:a3:5b:d1:63:8d:fa:07:03:98:08:b2:a7:c6:3e:
                    16:79:11:11:d7:8e:c7:5d:a1:93:ec:00:2b:f9:37:
                    01:72:12:56:58:14:2b:e0:81:dd:c3:48:85:3c:70:
                    cd:3d:53:87:76:22:eb:82:39:e5:cd:e9:b6:77:fa:
                    e8:17:3a:8d:b3:c9:b9:10:eb:53:a6:39:16:26:df:
                    8f:f2:f7:9c:fa:fb:58:a6:81:70:f7:cd:1c:0e:eb:
                    f2:29:56:cd:33:c9:3d:75:e6:8a:c2:d3:92:bf:95:
                    0f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4C:19:ED:8A:EA:41:92:F8:8A:A9:08:56:4B:CD:46:94:EA:BC:DC
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030353a3a2f34382d3438203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6005::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:3f:ac:48:70:06:51:e2:7c:2d:bc:43:de:c7:89:75:62:e7:
         9a:72:a5:e3:30:1c:63:cc:a4:2d:b5:b5:d7:a2:24:e3:9a:16:
         7c:24:10:3a:a7:37:d0:60:e6:0d:ea:25:ac:21:35:96:40:28:
         b5:af:3c:24:06:df:e3:17:bc:3f:2d:0d:51:80:e0:9e:70:a4:
         a7:c8:d6:05:72:42:0d:b0:4b:a1:d0:45:35:7e:53:0d:05:f1:
         59:78:7e:38:77:97:25:0a:af:ae:8a:1a:82:ee:47:81:45:92:
         41:9c:2f:39:a7:49:ab:a5:cd:84:69:06:7a:3b:97:49:5e:02:
         c4:b2:a6:2c:d4:df:d3:51:41:6d:e7:4e:29:e1:7a:83:1d:50:
         29:5a:f2:12:69:df:a7:d7:f8:bd:5b:69:0c:88:98:be:85:88:
         e3:00:bf:ac:73:7a:4f:58:24:b7:83:65:a1:fb:81:e3:f5:b4:
         48:47:1c:62:9a:b3:b8:4b:27:d7:e9:2f:9b:b1:e5:e2:31:81:
         11:30:d9:f0:9f:ec:5a:81:e5:b2:d0:a6:62:d7:a0:32:b8:5e:
         af:19:6e:f0:9f:03:25:6e:d7:56:82:18:00:87:bc:8f:a0:43:
         c2:50:0f:20:d8:2f:54:2f:71:98:ce:26:e7:0e:a6:84:f8:4e:
         bc:1b:6f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 00:46:29 2024 by rpki-client on console-fra.rpki-client.org