Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030383a3a2f34382d3438203d3e203330303331.roa
File:                     323632303a3133343a363030383a3a2f34382d3438203d3e203330303331.roa (raw, json)
Hash identifier:          Z9S09mTWwiZipAHYtTVyG4xKw+P69uo8KLQlYRzLjtc=
Subject key identifier:   4C:EC:36:3B:15:2E:71:41:2C:D2:0F:4E:4F:9D:AD:0B:24:8F:22:93
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       2E8C3314D34B557D124E734B18BA7423E89357BF
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030383a3a2f34382d3438203d3e203330303331.roa
Signing time:             Fri 02 Aug 2024 11:24:30 +0000
ROA not before:           Fri 02 Aug 2024 11:19:30 +0000
ROA not after:            Fri 01 Aug 2025 11:24:30 +0000
asID:                     30031
IP address blocks:        2620:134:6008::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:8c:33:14:d3:4b:55:7d:12:4e:73:4b:18:ba:74:23:e8:93:57:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:30 2024 GMT
            Not After : Aug  1 11:24:30 2025 GMT
        Subject: CN=4CEC363B152E71412CD20F4E4F9DAD0B248F2293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:03:b7:97:6f:2c:58:04:fa:b2:33:23:86:14:
                    db:09:db:f1:31:2c:f6:a0:ee:18:57:d1:49:1d:f7:
                    76:b3:2c:35:98:13:35:22:90:76:cf:af:f2:f1:bc:
                    30:a9:c9:89:19:22:0b:94:27:be:d6:67:a4:42:56:
                    b7:24:09:81:e7:29:c9:3a:9e:6e:83:10:d0:30:f9:
                    72:1d:80:df:8f:ce:26:97:f1:b5:1b:55:a2:04:a1:
                    16:cd:82:10:f4:d6:b4:04:be:7c:9e:0e:f9:5b:1b:
                    06:a1:ad:29:33:0b:78:2d:5b:fb:eb:88:e5:3b:3a:
                    22:3b:b3:fc:61:d1:d3:82:bf:ce:bc:95:7a:c7:f3:
                    6e:b4:6b:5e:98:c7:32:27:12:35:5a:1b:1c:6a:2f:
                    1c:1e:b7:78:3f:ab:c2:25:e1:41:0e:de:58:90:12:
                    85:36:8f:82:f4:29:12:8a:30:5b:72:c4:3f:f1:93:
                    f1:e9:f6:ae:bd:09:ad:d1:c3:03:f0:98:00:20:3d:
                    85:13:0b:08:11:ab:58:56:27:db:b1:e3:a8:0c:b9:
                    fa:50:0e:e7:59:60:fd:9d:35:ab:88:77:1d:f2:4e:
                    6c:13:8c:4e:95:6f:be:97:e4:97:15:c7:c3:ff:82:
                    34:5d:8e:29:35:a0:9c:e1:a6:c5:39:a5:21:bd:43:
                    93:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EC:36:3B:15:2E:71:41:2C:D2:0F:4E:4F:9D:AD:0B:24:8F:22:93
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030383a3a2f34382d3438203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6008::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:a9:69:ec:30:11:ac:1e:23:c3:e1:a9:7e:ec:9c:7e:d5:49:
         91:35:68:f2:e9:28:79:7a:f2:ca:6c:5b:48:3e:5e:d6:0b:2c:
         be:7c:5f:01:4b:60:f6:8e:f5:29:0c:2a:25:89:69:d1:81:46:
         7a:46:bd:1e:22:aa:9a:16:1d:01:fa:ae:5e:d0:a0:ed:13:de:
         7d:79:71:f3:a9:06:4e:46:44:79:bb:ef:a4:a4:8e:2f:c1:e9:
         69:0c:31:13:5b:ce:43:bb:f3:87:86:5f:bb:01:04:d7:59:af:
         61:21:52:df:33:97:9d:e5:b6:4d:e7:11:77:14:02:9a:f9:4a:
         fe:38:24:3b:1b:03:d6:0e:9a:f7:8c:07:54:01:eb:9f:98:7a:
         e8:32:98:ed:34:c5:d8:58:68:d0:f7:3e:11:b4:db:0b:09:5b:
         05:c8:a3:c2:7f:9d:b0:1d:2c:2f:38:4b:67:d3:58:d9:26:56:
         67:56:f4:d7:a9:47:7c:c8:73:33:d2:5f:d2:d5:89:eb:e9:43:
         33:17:c2:71:41:24:15:20:8f:e7:83:46:5f:8f:96:b7:2b:ab:
         ba:64:34:47:e6:cc:30:86:fa:ec:2d:e6:d3:66:09:74:69:db:
         a3:a1:fd:ec:1a:49:3e:1d:18:a6:b0:2b:c9:22:94:25:72:1d:
         4f:16:47:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:14:01 2024 by rpki-client on console-ams.rpki-client.org