Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030373a3a2f34382d3438203d3e203333353338.roa
File:                     323632303a3133343a363030373a3a2f34382d3438203d3e203333353338.roa (raw, json)
Hash identifier:          6wQsmRfQIbnNkH4wRRjdC82qAoZyxvvMqnSIlWuyAgI=
Subject key identifier:   3D:1C:7C:9C:BD:0F:6F:16:5D:43:C5:6D:47:F6:1C:A2:F3:BA:FD:C2
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       21F5A6155CB080918879AB97E6318D7CF652E99B
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030373a3a2f34382d3438203d3e203333353338.roa
Signing time:             Fri 02 Aug 2024 11:24:26 +0000
ROA not before:           Fri 02 Aug 2024 11:19:26 +0000
ROA not after:            Fri 01 Aug 2025 11:24:26 +0000
asID:                     33538
IP address blocks:        2620:134:6007::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f5:a6:15:5c:b0:80:91:88:79:ab:97:e6:31:8d:7c:f6:52:e9:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:26 2024 GMT
            Not After : Aug  1 11:24:26 2025 GMT
        Subject: CN=3D1C7C9CBD0F6F165D43C56D47F61CA2F3BAFDC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dc:f8:8c:04:1c:40:9d:8a:f6:e9:7f:4e:a5:
                    91:bd:79:04:3b:f9:b9:3d:24:14:dd:e8:bf:85:88:
                    ed:eb:e5:13:5b:29:4e:6c:80:78:d6:24:2c:df:34:
                    e9:0f:ac:d5:42:94:b1:cd:68:6b:bb:d5:33:60:18:
                    72:4a:da:63:a4:68:3e:d4:35:f8:44:79:65:28:7b:
                    6b:17:89:7b:86:3f:b0:7f:b6:08:92:a2:31:b2:c2:
                    91:79:59:54:af:54:d9:db:b2:50:e0:65:fd:40:b5:
                    ea:21:fd:d1:38:33:41:62:9c:f7:a5:1b:83:0a:30:
                    ed:f8:55:bf:73:6d:65:57:2e:53:47:3b:9a:1d:03:
                    41:90:84:f6:76:f7:c8:12:5d:0d:45:32:2b:d4:81:
                    04:d3:64:3b:2e:39:58:25:ec:11:69:a9:41:9b:21:
                    38:34:db:86:74:e7:fc:7b:3d:a5:6e:21:1a:df:51:
                    71:b8:c7:ce:55:ed:af:74:ac:d1:ca:47:b7:bd:b0:
                    8f:c6:ca:9f:0a:9b:4d:95:ff:24:62:37:9b:ac:df:
                    93:c6:43:9a:c4:0c:22:d4:6a:e3:e3:4b:c5:86:e8:
                    1a:ec:05:e2:19:7e:ec:d5:79:b9:ca:dd:f0:3d:47:
                    f2:43:13:1b:0b:e9:18:29:11:32:c1:9f:17:0b:63:
                    3d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1C:7C:9C:BD:0F:6F:16:5D:43:C5:6D:47:F6:1C:A2:F3:BA:FD:C2
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030373a3a2f34382d3438203d3e203333353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6007::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:17:3d:27:6d:52:75:de:66:78:cd:6f:02:86:b8:e2:3e:10:
         4c:3d:1f:52:4b:1f:b5:11:a5:e8:69:3e:b2:e1:6f:70:61:ce:
         ce:ad:4b:88:df:c2:f7:fe:c3:47:11:57:21:ac:2a:cc:23:a9:
         01:d7:be:12:91:e9:63:3f:72:ac:11:d2:5a:3d:07:d3:1e:8b:
         67:fd:a2:89:30:c4:97:8d:37:c7:af:2a:58:0f:36:fd:39:ef:
         e2:5c:c1:23:d7:d1:26:57:c7:18:40:cd:4d:33:06:d9:97:21:
         00:84:c0:36:08:6d:68:56:8c:c9:d3:ac:35:60:64:80:da:6b:
         58:51:35:05:05:77:ef:5a:2e:96:56:2d:7e:e7:27:10:2f:41:
         a1:2e:8b:e7:38:9c:c0:04:6a:95:58:95:1e:c8:f2:92:6c:c5:
         54:c0:23:a0:5b:fb:91:f3:f0:eb:dc:3e:92:04:e8:5c:a9:32:
         d2:d5:81:b6:24:74:5c:ed:03:14:e8:15:02:24:92:1e:7e:2f:
         f0:64:99:65:55:44:69:21:60:a6:03:9e:9d:39:da:bd:73:51:
         ad:dc:69:78:94:af:79:40:9e:6b:09:d5:2e:aa:d7:37:b8:22:
         16:f6:3c:b4:b2:22:cf:46:69:95:b5:4e:5e:89:f6:d6:04:c2:
         e6:17:52:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org