Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030383a3a2f34382d3438203d3e203330303331.roa
File:                     323632303a3133343a363030383a3a2f34382d3438203d3e203330303331.roa (raw, json)
Hash identifier:          k0I41NYzb1NEavcnEtc6AvVCglA77aOGGwfxy9nBd6A=
Subject key identifier:   C1:15:86:AF:26:0F:E3:FE:8B:54:89:F8:73:B1:55:8E:8E:D3:A8:7D
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       2A16A0D3A3A3F4DFB660F5E172B82184CBF78A48
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030383a3a2f34382d3438203d3e203330303331.roa
Signing time:             Fri 01 Sep 2023 11:14:26 +0000
ROA not before:           Fri 01 Sep 2023 11:09:26 +0000
ROA not after:            Fri 30 Aug 2024 11:14:26 +0000
asID:                     30031
IP address blocks:        2620:134:6008::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:16:a0:d3:a3:a3:f4:df:b6:60:f5:e1:72:b8:21:84:cb:f7:8a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:26 2023 GMT
            Not After : Aug 30 11:14:26 2024 GMT
        Subject: CN=C11586AF260FE3FE8B5489F873B1558E8ED3A87D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d8:92:a0:fd:d5:2d:7a:a6:aa:a1:7c:7c:36:
                    4f:fa:f7:86:7d:be:06:94:c6:ac:7a:37:95:79:d3:
                    6c:b0:a4:38:19:f7:fe:72:fc:50:24:20:3c:1d:51:
                    42:09:e1:f5:41:ec:ff:98:e0:03:da:a2:ba:c4:85:
                    eb:5b:93:f4:b2:1e:ec:07:c8:67:b9:6d:62:ea:06:
                    20:ec:f8:f0:43:cf:69:11:e2:83:4f:26:1f:1c:99:
                    9a:2b:1f:8c:98:e0:7e:49:e1:54:2c:b1:b1:a1:4c:
                    e2:dd:31:fa:46:34:ef:60:b3:c8:7e:98:ae:59:4f:
                    bc:bb:8b:73:0c:97:2b:90:db:b2:af:b1:86:ce:6e:
                    9c:31:ab:e6:87:67:63:ee:1b:cd:cb:e6:fa:0a:84:
                    a0:5a:93:62:67:bc:a0:45:87:9b:f1:f5:62:3f:18:
                    e1:a1:bb:20:4f:38:46:c3:a3:e2:d4:ed:0f:d8:c4:
                    9c:81:78:73:9e:21:c4:aa:ff:fb:ca:e3:18:c5:e4:
                    f3:59:20:7a:f5:a1:94:0b:44:b2:83:b1:7b:35:56:
                    33:9c:ef:f1:1e:19:b3:e0:88:51:54:7e:5a:98:d4:
                    b7:a2:30:be:31:37:e5:94:6b:7a:61:23:9f:f1:ff:
                    87:97:c3:15:4b:70:4c:08:37:52:73:04:1e:1b:fb:
                    55:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:15:86:AF:26:0F:E3:FE:8B:54:89:F8:73:B1:55:8E:8E:D3:A8:7D
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030383a3a2f34382d3438203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6008::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:67:33:ff:13:63:eb:50:aa:1d:80:35:28:82:66:3e:33:86:
         6a:60:69:48:91:5d:d4:5a:10:a8:fe:8e:f7:04:30:cd:b4:8d:
         ab:2e:f5:ad:df:80:e7:b0:84:14:8a:4d:d1:0c:4e:56:cd:92:
         39:b2:54:37:1b:00:39:52:2f:98:12:f9:da:df:a2:19:1c:02:
         c1:8d:fb:34:08:49:a7:46:b9:c8:42:1b:00:7c:e7:ae:a0:9d:
         b9:8c:cb:67:9d:ea:55:19:44:f4:85:f8:93:28:a4:2e:cd:57:
         aa:a0:72:c6:97:cc:76:34:ba:b7:56:77:7a:d3:77:75:0f:c2:
         ba:db:1f:8d:b2:41:8b:65:ef:56:92:98:51:f6:47:d6:16:57:
         ba:68:c0:3d:be:b4:6e:a7:6d:d5:71:2d:9a:9b:06:55:98:b8:
         a6:26:49:73:5e:5e:72:30:f6:ec:15:98:4d:0d:f0:53:bc:31:
         be:a9:5a:a4:cf:08:97:db:80:68:15:1c:5b:c0:5e:90:b2:77:
         b9:4a:c9:7c:94:d4:09:07:c5:a0:57:96:91:a1:34:ee:31:43:
         d1:87:df:7b:e4:7a:de:6d:40:b4:58:a4:d4:bc:c2:5b:13:67:
         ab:8d:7b:68:bf:2c:44:d3:67:12:f2:3c:21:35:82:50:e7:80:
         6b:f1:30:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 16:41:33 2024 by rpki-client on console-ams.rpki-client.org