Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030393a3a2f34382d3438203d3e203330303331.roa
File:                     323632303a3133343a363030393a3a2f34382d3438203d3e203330303331.roa (raw, json)
Hash identifier:          gz4vDkH301vxuHEPYPMrRWOE+DKsumFw3dIjIJf5/iI=
Subject key identifier:   D6:8C:22:57:01:79:07:83:B0:3B:D3:28:CA:F5:51:13:37:AA:A2:BC
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       03EAD87A1404227C9A22F40EF25745D9E48B6498
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030393a3a2f34382d3438203d3e203330303331.roa
Signing time:             Fri 02 Aug 2024 11:24:26 +0000
ROA not before:           Fri 02 Aug 2024 11:19:26 +0000
ROA not after:            Fri 01 Aug 2025 11:24:26 +0000
asID:                     30031
IP address blocks:        2620:134:6009::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ea:d8:7a:14:04:22:7c:9a:22:f4:0e:f2:57:45:d9:e4:8b:64:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug  2 11:19:26 2024 GMT
            Not After : Aug  1 11:24:26 2025 GMT
        Subject: CN=D68C225701790783B03BD328CAF5511337AAA2BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d4:6e:32:e7:9c:e8:38:b4:e4:57:8d:5f:dc:
                    38:84:d4:4a:f5:13:53:d3:ad:5f:1c:bc:ce:00:46:
                    b6:a0:bb:00:e5:9d:77:07:57:d1:54:c7:fb:94:65:
                    bc:91:20:00:6d:a7:4d:5f:87:af:da:6d:22:56:0d:
                    a5:6c:57:48:83:82:f8:0e:3c:f0:3e:44:11:af:05:
                    13:36:77:7c:24:22:cc:9e:4b:e3:d0:ee:06:bc:73:
                    7a:80:79:ab:17:93:63:88:8b:1e:91:26:37:9e:8c:
                    af:4a:82:a7:af:63:e4:84:fe:50:f5:db:aa:a4:5b:
                    b4:03:b9:ee:04:27:58:19:aa:f8:4c:cd:00:61:ae:
                    3d:d7:c6:d2:e4:53:91:70:e4:63:6f:19:fb:19:61:
                    e1:cd:96:e8:9c:32:d7:9b:d2:2c:1c:e2:33:7b:4b:
                    51:5e:c6:24:d2:03:ef:38:aa:6d:91:92:42:f1:fa:
                    ae:63:73:d4:58:22:f0:99:c2:28:d9:9f:f7:91:71:
                    88:6e:73:ff:4f:a7:d4:d5:1b:ef:fc:12:ee:21:cd:
                    f5:40:14:3c:de:4e:6a:01:60:c6:1e:32:5f:bb:30:
                    c6:b4:ec:7e:5e:8d:f0:a4:61:10:f9:ee:e0:7a:bc:
                    5e:07:a5:5d:5c:a9:c6:90:be:0d:e1:e9:9a:57:57:
                    2b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:8C:22:57:01:79:07:83:B0:3B:D3:28:CA:F5:51:13:37:AA:A2:BC
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030393a3a2f34382d3438203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6009::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:c1:d8:0e:88:86:8f:6d:45:52:a5:24:8d:1d:80:a3:6b:58:
         8c:6c:43:bd:cc:89:1e:c8:77:21:dc:00:4f:bd:a8:2d:de:49:
         4d:c9:b0:02:41:f0:80:94:ef:c0:8d:8b:a5:cc:af:a4:67:87:
         b2:d1:25:59:4d:88:02:2a:d0:0a:83:e1:00:87:52:dc:e5:7b:
         a7:bd:9c:91:de:47:97:c7:f8:07:2e:ff:96:88:24:09:ea:62:
         d9:6a:e2:f1:c5:de:0e:8a:2f:8e:47:dd:5c:db:c7:41:21:bf:
         8b:7f:6c:c1:b6:a9:1f:d5:68:1f:d0:a7:52:4e:83:63:1d:07:
         10:81:78:f7:33:8e:86:0d:cc:a8:f5:cf:03:57:31:2c:ab:ff:
         be:25:0e:98:70:b2:92:51:9d:5d:f4:ab:be:90:0a:54:41:9b:
         bf:e0:02:4e:c8:38:8b:c1:70:ac:df:5c:29:d0:03:6f:05:5a:
         9b:50:b5:ca:de:dd:97:27:27:1c:a0:a8:37:3e:29:61:70:19:
         e2:90:17:6d:54:dd:96:4f:41:1a:62:25:8a:a7:84:e9:e1:46:
         ba:23:b6:48:e8:ca:ff:5e:2e:34:7e:64:6b:92:5f:d4:1b:64:
         96:4f:34:a6:b8:e1:5a:af:1c:3a:d0:41:5f:b1:01:32:36:25:
         da:10:02:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org