Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030373a3a2f34382d3438203d3e203333353338.roa
File:                     323632303a3133343a363030373a3a2f34382d3438203d3e203333353338.roa (raw, json)
Hash identifier:          NE0OsKlXNzisy75JR1dLCXQLwnJDi3W3x0MPp7n+oM4=
Subject key identifier:   8F:49:2B:0A:3A:7C:E8:45:50:84:5C:FB:05:E0:25:8C:14:FE:F0:B6
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       2C1BCEA5C9939986C42D276BFA69AD85C84D20EE
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030373a3a2f34382d3438203d3e203333353338.roa
Signing time:             Fri 01 Sep 2023 11:14:30 +0000
ROA not before:           Fri 01 Sep 2023 11:09:30 +0000
ROA not after:            Fri 30 Aug 2024 11:14:30 +0000
asID:                     33538
IP address blocks:        2620:134:6007::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 May 2024 10:03:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:1b:ce:a5:c9:93:99:86:c4:2d:27:6b:fa:69:ad:85:c8:4d:20:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:30 2023 GMT
            Not After : Aug 30 11:14:30 2024 GMT
        Subject: CN=8F492B0A3A7CE84550845CFB05E0258C14FEF0B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ff:8b:40:e9:d5:07:f2:b7:69:e6:dd:e5:04:
                    a3:32:eb:6c:18:b1:70:2e:a7:20:82:a9:0f:b6:d8:
                    49:bd:ca:a8:bc:e9:92:e7:df:30:3d:ff:6b:22:06:
                    bb:ab:90:67:1d:c7:ad:34:df:27:15:d1:1a:ab:6b:
                    d6:f6:19:6c:fa:53:6f:d0:b4:e0:2e:6f:c0:a9:7c:
                    57:ff:0c:20:8b:e7:81:64:09:ef:d6:df:4a:dc:a4:
                    cb:71:8a:f0:21:a8:2a:5b:67:49:e7:fe:3a:62:20:
                    fe:46:e6:39:6c:e7:ff:a2:52:7a:af:fc:81:4c:fe:
                    5f:e7:07:53:e3:44:3c:f2:6c:14:8e:05:55:b8:c2:
                    c1:6c:74:9c:5c:48:b1:e6:bd:ae:a3:a9:13:e7:6a:
                    d6:17:45:bf:a0:1f:df:6f:b0:ca:14:30:a3:86:47:
                    23:be:f2:a6:c9:cc:37:31:e8:60:45:a8:d4:b7:2c:
                    9d:4e:79:f2:22:74:a7:46:e5:79:28:70:93:ef:6a:
                    30:4e:64:ae:ff:36:c4:1e:16:b2:cb:ea:37:29:e1:
                    3a:c7:94:10:1c:bb:28:ea:71:5c:4e:13:82:c8:5c:
                    bd:68:dc:44:3d:c7:01:82:c1:8a:12:40:59:1e:7a:
                    82:02:f1:ee:3f:ed:30:6d:79:1a:74:c8:e4:68:57:
                    19:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:49:2B:0A:3A:7C:E8:45:50:84:5C:FB:05:E0:25:8C:14:FE:F0:B6
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030373a3a2f34382d3438203d3e203333353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6007::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:31:56:c5:a4:de:81:ae:0c:bc:11:29:9b:f5:34:55:dd:d3:
         2b:3c:f3:60:e7:fc:46:59:00:83:53:0c:79:42:97:44:60:22:
         f0:75:ff:36:73:07:25:9d:58:8a:63:7a:cf:94:09:b8:99:f4:
         d3:16:d7:92:9d:2a:4f:1f:55:28:67:2f:40:7e:33:a4:ac:1c:
         02:91:2e:d2:c7:b1:70:8c:d1:31:3d:4e:1f:22:9d:d3:a3:28:
         51:44:15:1b:82:1c:6a:bf:ea:ed:a0:ec:fc:7a:c5:ba:a7:59:
         30:11:bc:c0:d5:04:67:15:4c:26:14:4c:7a:2d:51:ad:2a:c2:
         59:46:da:ab:8d:75:f4:46:8b:37:99:98:0d:96:0c:da:a7:12:
         6c:04:f1:7f:d7:f2:0d:d7:20:a8:55:40:12:ec:06:aa:24:e0:
         60:36:42:0e:4b:99:68:f2:ed:f8:d9:c0:2d:da:08:9e:b8:57:
         5a:c3:79:35:f8:dc:07:98:99:07:35:49:1b:cc:1f:a4:18:43:
         22:6d:21:cd:b5:34:b2:4b:03:15:53:b2:10:49:ec:1f:bb:65:
         b9:ad:13:5d:b1:80:2b:ee:21:3e:30:03:0f:e7:70:3e:88:0f:
         f7:0a:89:27:84:db:1e:86:1c:47:56:d9:b5:19:5c:0c:d0:86:
         6d:cb:a6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 09:10:36 2024 by rpki-client on console-ams.rpki-client.org