Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203134363138.roa
File:                     323632303a3133343a363030623a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          8BeNotVJHJGcSI4F+LixktQToMgMfyZ4Ly88y+B9YzE=
Subject key identifier:   30:40:3E:6A:64:AE:6C:9D:4A:B7:D3:7B:50:74:4E:6F:25:76:16:A1
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       5D97CD585475493DEB3CF4D459B6C0827501ACD2
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203134363138.roa
Signing time:             Thu 17 Aug 2023 09:07:28 +0000
ROA not before:           Thu 17 Aug 2023 09:02:28 +0000
ROA not after:            Thu 15 Aug 2024 09:07:28 +0000
asID:                     14618
IP address blocks:        2620:134:600b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 03:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:97:cd:58:54:75:49:3d:eb:3c:f4:d4:59:b6:c0:82:75:01:ac:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug 17 09:02:28 2023 GMT
            Not After : Aug 15 09:07:28 2024 GMT
        Subject: CN=30403E6A64AE6C9D4AB7D37B50744E6F257616A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d5:77:29:ed:e1:6c:d9:a2:0c:2a:18:89:e6:
                    5b:73:6e:cc:59:6e:65:dd:82:23:13:a1:d8:5b:0d:
                    13:0f:07:f7:14:57:fa:e3:5d:ee:a1:0e:82:16:ed:
                    ce:d7:a2:ef:24:1b:6a:3f:94:ea:83:8d:80:d1:b4:
                    cb:ae:a9:ee:48:44:46:9b:32:ac:0c:a2:f3:5b:36:
                    5d:8e:11:70:05:a7:05:d0:3e:93:70:54:d6:21:48:
                    d6:ad:34:e6:9b:26:ca:98:8b:cc:f4:af:5b:87:a4:
                    3c:9f:90:26:fc:e2:a2:9a:5a:8e:64:50:b8:19:aa:
                    5f:1d:83:7f:c7:b5:a9:dc:fd:64:a7:3f:91:b4:a4:
                    bb:a0:40:fe:f7:8a:7a:ed:23:bf:ce:97:09:ce:69:
                    d4:7b:be:42:95:08:73:d7:ba:92:84:5a:38:c5:79:
                    7b:d2:e3:f0:c4:7e:73:4d:9d:19:a2:4d:be:e8:14:
                    76:30:c1:93:2f:97:c3:fd:f5:9b:d6:1c:1b:4d:a2:
                    56:bd:03:8e:9e:9f:9b:4e:48:63:80:64:be:6b:c2:
                    55:f1:a5:55:2c:a3:43:b7:71:6e:60:42:6d:6e:a0:
                    81:56:31:02:df:4d:06:d1:6a:44:56:07:70:38:9d:
                    4e:a1:44:2c:ca:6b:77:5a:04:31:73:12:8f:74:6d:
                    c8:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:40:3E:6A:64:AE:6C:9D:4A:B7:D3:7B:50:74:4E:6F:25:76:16:A1
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:600b::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:6a:0d:7f:6d:5d:45:fe:21:4b:38:62:b8:40:0d:d4:03:9e:
         5b:17:d3:1a:93:bb:0d:0f:f8:ce:e3:07:a2:f7:2b:5c:be:12:
         fb:a9:24:2a:a3:32:db:58:01:e4:79:97:08:49:ae:3b:12:92:
         b5:be:b7:85:de:90:58:a9:eb:fb:fc:7c:79:7f:59:f0:43:a4:
         e0:37:ea:e6:85:c0:fb:36:75:a7:59:0c:81:72:44:2d:ef:a1:
         e5:65:ff:1f:5c:5d:e3:c2:0f:8c:f0:6f:91:bc:60:36:d5:55:
         57:16:8f:45:4a:70:a0:a0:65:ce:00:c9:41:2a:65:43:c7:d0:
         d8:d5:77:bb:fd:32:46:16:03:fa:46:5c:8a:ef:fd:6b:6e:b9:
         b9:2a:b6:92:cd:57:e0:3b:7c:e4:7c:fb:26:7a:b0:ac:08:a8:
         49:f7:b9:24:34:90:c8:71:b8:21:37:4e:15:2f:91:2e:55:e7:
         de:75:f7:d8:d3:95:05:19:5a:92:dd:ea:38:b7:a6:ec:f8:ce:
         40:1a:ea:eb:f6:f0:97:3a:d2:47:59:41:30:25:f4:80:2b:c3:
         29:51:6d:22:eb:cb:a3:5f:1c:7a:f4:2c:2c:49:c1:9b:e8:0b:
         02:35:17:2b:73:af:ea:39:13:c4:a0:4d:fd:7c:1b:08:89:af:
         f1:ac:5c:62
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIUXZfNWFR1ST3rPPTUWbbAgnUBrNIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjMwODE3MDkwMjI4WhcNMjQwODE1MDkwNzI4
WjAzMTEwLwYDVQQDEygzMDQwM0U2QTY0QUU2QzlENEFCN0QzN0I1MDc0NEU2RjI1
NzYxNkExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttV3Ke3hbNmi
DCoYieZbc27MWW5l3YIjE6HYWw0TDwf3FFf6413uoQ6CFu3O16LvJBtqP5Tqg42A
0bTLrqnuSERGmzKsDKLzWzZdjhFwBacF0D6TcFTWIUjWrTTmmybKmIvM9K9bh6Q8
n5Am/OKimlqOZFC4GapfHYN/x7Wp3P1kpz+RtKS7oED+94p67SO/zpcJzmnUe75C
lQhz17qShFo4xXl70uPwxH5zTZ0Zok2+6BR2MMGTL5fD/fWb1hwbTaJWvQOOnp+b
TkhjgGS+a8JV8aVVLKNDt3FuYEJtbqCBVjEC300G0WpEVgdwOJ1OoUQsymt3WgQx
cxKPdG3I0wIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFDBAPmpkrmydSrfTe1B0Tm8l
dhahMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGUBggrBgEFBQcBCwSBhzCB
hDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQTkxOTJBOTgwMDAwLzQvMzIzNjMyMzAzYTMxMzMzNDNhMzYzMDMwNjIz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM0MzYzMTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB
NGALMA0GCSqGSIb3DQEBCwUAA4IBAQCMag1/bV1F/iFLOGK4QA3UA55bF9Mak7sN
D/jO4wei9ytcvhL7qSQqozLbWAHkeZcISa47EpK1vreF3pBYqev7/Hx5f1nwQ6Tg
N+rmhcD7NnWnWQyBckQt76HlZf8fXF3jwg+M8G+RvGA21VVXFo9FSnCgoGXOAMlB
KmVDx9DY1Xe7/TJGFgP6RlyK7/1rbrm5KraSzVfgO3zkfPsmerCsCKhJ97kkNJDI
cbghN04VL5EuVefedffY05UFGVqS3eo4t6bs+M5AGurr9vCXOtJHWUEwJfSAK8Mp
UW0i68ujXxx69CwsScGb6AsCNRcrc6/qORPEoE39fBsIia/xrFxi
-----END CERTIFICATE-----
Generated at Wed May 1 05:17:27 2024 by rpki-client on console-fra.rpki-client.org