Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030353a3a2f34382d3438203d3e20333937373236.roa
File:                     323632303a3133343a363030353a3a2f34382d3438203d3e20333937373236.roa (raw, json)
Hash identifier:          avK5oGh8ai4w9ntH2ONWnHfqdJI20jWDSQ4cc4TPywg=
Subject key identifier:   25:86:44:01:23:7A:F6:38:E8:60:4B:B0:9C:C5:92:F3:0D:45:90:8D
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       6356AC4A947B7BA8389A7398D241E1C18DCBD71B
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030353a3a2f34382d3438203d3e20333937373236.roa
Signing time:             Fri 02 Aug 2024 11:24:30 +0000
ROA not before:           Fri 02 Aug 2024 11:19:30 +0000
ROA not after:            Fri 01 Aug 2025 11:24:30 +0000
asID:                     397726
IP address blocks:        2620:134:6005::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:56:ac:4a:94:7b:7b:a8:38:9a:73:98:d2:41:e1:c1:8d:cb:d7:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:30 2024 GMT
            Not After : Aug  1 11:24:30 2025 GMT
        Subject: CN=25864401237AF638E8604BB09CC592F30D45908D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:bb:00:ef:70:50:99:3d:55:bf:59:bd:fb:50:
                    08:ef:e6:98:4c:60:71:f6:e4:af:a7:7d:08:d5:0b:
                    d3:07:b2:87:40:1b:87:9d:a9:de:2f:ae:be:7c:7e:
                    0f:ae:a6:c3:d1:3e:e1:0f:94:ec:2c:0b:b6:42:97:
                    06:57:bb:00:24:77:0a:b5:6e:66:af:4d:5e:c8:9d:
                    62:f4:49:aa:85:4a:e7:da:71:1d:5d:38:ba:40:25:
                    38:94:90:6f:c9:97:d6:dd:02:c9:c8:6f:24:18:ac:
                    65:c9:76:8e:ea:78:90:16:d9:8f:33:98:83:b6:d9:
                    f9:a4:4a:a8:71:76:e9:93:58:6b:50:9b:87:d1:02:
                    5f:f8:62:53:ab:07:8c:66:c7:f7:15:f5:df:f7:08:
                    bb:dc:66:8c:dc:d4:27:ab:61:bc:79:57:1c:c9:d7:
                    1d:c6:a4:fc:51:5e:d4:61:5f:68:64:c5:0f:86:12:
                    d4:78:3d:4a:fa:96:f4:fd:e8:95:00:87:7e:3d:17:
                    28:40:8b:43:aa:f1:65:f5:b7:4c:42:21:ad:33:da:
                    0e:fc:c8:7c:3c:5d:b4:50:51:fa:d6:dc:bb:78:52:
                    73:fe:ba:74:5a:5e:05:90:dd:f6:7c:5d:11:bf:06:
                    78:a1:8e:f2:53:5d:ac:da:5a:08:fe:9a:28:ac:9e:
                    9f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:86:44:01:23:7A:F6:38:E8:60:4B:B0:9C:C5:92:F3:0D:45:90:8D
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030353a3a2f34382d3438203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6005::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:7c:2b:8f:ca:11:18:57:b0:7c:cb:06:34:55:45:10:71:0b:
         fd:ec:8e:32:f5:5a:fe:6a:bf:48:39:f3:1e:67:fa:16:c5:df:
         1d:82:1f:20:97:8e:2e:54:bc:10:6e:eb:89:07:e7:53:86:ff:
         9c:09:77:3b:f9:28:7e:26:f1:ea:7d:17:c0:01:13:df:5e:0b:
         40:d6:d0:b4:d9:10:2c:d5:cf:1b:85:d7:e3:08:d8:6d:86:16:
         e0:cd:a9:81:09:f6:ae:13:e3:4f:c9:4e:24:d6:35:80:48:10:
         88:1e:a2:70:57:dc:46:c7:2e:e9:1c:37:bd:4f:84:76:9a:a0:
         4e:a8:95:34:fa:d4:57:12:17:48:b6:dd:9a:be:a3:5d:e4:00:
         24:46:b9:38:4c:6d:53:eb:9f:0b:23:20:74:9c:4e:e9:f3:eb:
         1b:fd:ec:7e:77:df:f2:59:31:bf:84:63:03:2a:a3:8c:b7:6f:
         94:ff:16:9b:65:89:6d:20:0e:60:35:3c:ce:3b:bf:71:5a:85:
         9e:10:98:2e:05:38:fa:6a:fa:28:95:c3:28:f9:76:5a:c8:8e:
         69:fd:70:82:b9:59:5e:56:ed:dd:f4:24:f0:91:1a:d4:0b:c8:
         08:be:a8:6e:66:4f:67:5e:c9:ae:bf:d2:8b:9d:08:18:95:f1:
         c0:06:28:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org