Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030393a3a2f34382d3438203d3e203330303331.roa
File:                     323632303a3133343a363030393a3a2f34382d3438203d3e203330303331.roa (raw, json)
Hash identifier:          uHdRQmk9VNSf4hxxbx7zfOcD99PL3NwG/okZR+Wfocs=
Subject key identifier:   C5:65:B2:D1:A1:33:32:44:0C:B4:97:29:2A:A8:53:DF:E8:85:B9:93
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       0716992CBE46123A53BDC47551CAB0BCCB3DB93A
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030393a3a2f34382d3438203d3e203330303331.roa
Signing time:             Fri 01 Sep 2023 11:14:32 +0000
ROA not before:           Fri 01 Sep 2023 11:09:32 +0000
ROA not after:            Fri 30 Aug 2024 11:14:32 +0000
asID:                     30031
IP address blocks:        2620:134:6009::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 14:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:16:99:2c:be:46:12:3a:53:bd:c4:75:51:ca:b0:bc:cb:3d:b9:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep  1 11:09:32 2023 GMT
            Not After : Aug 30 11:14:32 2024 GMT
        Subject: CN=C565B2D1A13332440CB497292AA853DFE885B993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:69:f6:da:48:e8:4e:d4:31:cf:44:ba:3f:e1:
                    cc:f7:e6:72:cc:aa:3c:5c:8a:54:d2:c0:f0:50:8f:
                    0c:31:f5:35:c4:ab:db:ae:2b:dd:6d:3c:79:17:f1:
                    8c:c7:d9:4a:e7:9f:51:d0:a2:ec:80:a3:ad:06:2f:
                    2f:66:91:89:b7:5c:bf:17:49:d9:06:da:9c:87:60:
                    87:21:09:84:8f:45:63:b7:77:d7:00:00:45:97:d4:
                    43:74:35:10:5c:56:b3:bc:4c:60:06:70:ad:59:36:
                    32:f1:87:02:35:89:ec:9c:2e:09:0f:95:07:e4:ef:
                    ce:fb:b0:4e:a8:fe:0b:b0:1b:44:2b:4d:2a:7b:df:
                    20:34:da:70:a0:71:11:dc:19:07:91:76:da:d7:87:
                    fd:da:c9:a1:8b:77:53:75:9b:9e:72:7b:71:3f:b3:
                    4f:9c:f2:6c:0e:7d:6f:f8:e3:fd:24:21:58:84:a2:
                    07:37:5b:69:c2:11:dc:db:5e:92:57:a5:53:d7:10:
                    cf:b2:4f:02:ea:b9:03:06:f6:2f:b4:ec:4f:f2:45:
                    e4:67:5d:29:3a:99:4f:b4:84:05:20:8c:21:51:b2:
                    59:ab:e9:f7:d5:c7:d2:f3:2f:9b:a2:e4:ec:bf:73:
                    71:13:45:ac:f4:11:54:0c:0e:3e:3a:b7:8b:9b:9e:
                    16:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:65:B2:D1:A1:33:32:44:0C:B4:97:29:2A:A8:53:DF:E8:85:B9:93
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030393a3a2f34382d3438203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6009::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:58:67:e0:ae:2c:34:60:12:76:d2:0f:72:37:4e:7a:a4:a7:
         04:f2:fc:06:a1:4d:a7:d3:39:11:0d:9d:88:ef:7b:1e:7a:ce:
         98:91:ef:ff:3c:a5:b1:77:7f:a6:5d:2d:e5:25:8d:fa:b3:69:
         6f:16:77:25:fe:1d:db:51:7d:5c:14:30:96:52:c6:6c:51:01:
         ee:12:a9:a2:e0:31:84:13:04:99:68:1a:3a:62:83:b3:4c:cf:
         17:d1:35:84:ee:f4:a9:4a:3b:49:d4:e1:f0:2e:d9:ee:0e:5d:
         67:86:64:e0:2e:49:d7:84:b2:d4:8c:65:a2:ef:b2:b5:84:ed:
         b4:cb:a8:68:93:e7:6f:74:65:a2:1d:0e:f1:e3:ec:f8:a9:f6:
         98:51:ff:42:3f:14:ef:49:0a:09:89:f8:94:0b:ac:45:ef:fc:
         f1:17:1f:73:ce:b4:f8:3f:2a:ef:d1:f3:4b:c0:82:66:1f:7b:
         74:86:e3:b1:c0:a5:8a:3a:b9:b2:c0:20:c6:57:a3:f2:fa:58:
         14:fc:de:38:8e:c5:56:78:86:a2:90:bb:1d:b8:77:04:1c:c6:
         fd:af:cf:15:02:8e:3c:33:55:dc:cf:3a:50:e7:6c:71:fa:cc:
         86:f2:73:b4:3a:9f:3f:ca:07:d2:89:b8:93:5c:b5:7a:fd:57:
         f1:5b:4b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 17:32:31 2024 by rpki-client on console-fra.rpki-client.org