Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203330303331.roa
File:                     323632303a3133343a363030623a3a2f34382d3438203d3e203330303331.roa (raw, json)
Hash identifier:          RoASqj+5OGItAI+I7t/MefDyWKak3S9D6OlzRqMmnQc=
Subject key identifier:   0D:2F:21:4E:96:03:20:C0:9F:E1:A6:EE:89:13:59:45:FB:E5:02:C7
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       0EBC6C708E3A4C150AD4D0C97EA001CB6EA5DA1F
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203330303331.roa
Signing time:             Thu 18 Jul 2024 09:18:19 +0000
ROA not before:           Thu 18 Jul 2024 09:13:19 +0000
ROA not after:            Thu 17 Jul 2025 09:18:19 +0000
asID:                     30031
IP address blocks:        2620:134:600b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 07:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:bc:6c:70:8e:3a:4c:15:0a:d4:d0:c9:7e:a0:01:cb:6e:a5:da:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul 18 09:13:19 2024 GMT
            Not After : Jul 17 09:18:19 2025 GMT
        Subject: CN=0D2F214E960320C09FE1A6EE89135945FBE502C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2f:3f:6d:61:70:0a:03:26:a0:f4:58:65:eb:
                    85:da:b5:7e:19:a5:98:91:9a:7d:60:06:db:f8:65:
                    3b:35:42:b4:7d:40:f5:d8:fc:51:cc:f3:fd:63:6a:
                    7a:1d:4d:db:5f:68:50:81:32:25:28:0d:2f:e0:99:
                    bc:bd:d3:74:f3:5d:74:55:6f:c8:43:17:4d:7b:fb:
                    fc:2f:d1:98:67:1f:d8:1a:dc:83:7d:90:b4:5d:d6:
                    15:75:fb:25:77:0e:69:b7:36:15:d8:29:3f:61:1a:
                    92:24:4e:07:d2:fe:28:3f:7c:de:73:08:74:2d:72:
                    95:02:ff:4d:9b:7e:02:8f:6c:18:66:eb:1e:58:5c:
                    ba:af:40:aa:11:93:b4:e7:d5:c9:2c:54:be:d5:9e:
                    e0:f6:73:be:b6:5b:18:91:8a:96:fd:26:17:27:97:
                    29:6a:73:32:4e:f0:0c:db:16:28:60:2d:32:b0:05:
                    f3:38:0c:48:20:bf:49:3b:83:90:7e:63:20:ff:a9:
                    54:08:63:4b:d0:63:1a:a8:7e:a7:23:bb:41:68:a4:
                    18:77:c6:ac:29:c5:55:53:d6:14:d7:90:7a:ed:79:
                    a0:ba:07:66:ef:70:04:e3:57:4e:98:10:3c:4c:4f:
                    83:d4:fb:40:1a:6c:d5:a7:4e:4c:dd:71:5c:ee:b0:
                    cf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2F:21:4E:96:03:20:C0:9F:E1:A6:EE:89:13:59:45:FB:E5:02:C7
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:600b::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:1d:a0:09:e3:c7:16:85:f2:07:a4:6e:f4:8f:35:2a:4e:8b:
         a1:ae:e4:70:eb:ba:10:ed:72:04:59:b1:db:33:b5:99:18:9b:
         76:f0:63:fe:5e:7e:87:d7:31:37:4d:89:bc:6f:64:ec:3d:74:
         9f:09:6b:b9:77:55:52:03:db:2a:38:a9:28:b9:78:21:29:2b:
         c1:48:94:13:91:dc:b4:be:cf:8a:17:70:53:f6:f0:f3:87:83:
         d3:31:36:b8:48:88:d4:ac:ad:04:87:58:c0:3f:80:3a:18:9e:
         9e:9a:3d:33:df:ad:c1:5d:de:5e:cc:31:70:f5:43:b6:4d:07:
         42:fd:27:0f:46:19:aa:de:01:b8:0a:91:05:4c:04:fd:22:c5:
         f4:7e:ce:e2:bf:04:19:14:6e:9c:b8:30:ce:0d:cb:c3:a5:48:
         94:dc:b1:00:cf:47:55:54:96:8f:4f:15:1d:ee:08:0c:be:32:
         b7:65:2b:78:cb:70:b5:49:b2:f7:16:f8:3f:24:5c:c1:b3:26:
         c5:a9:cd:53:11:09:89:c2:40:26:b5:95:38:25:fd:21:c7:c7:
         d2:84:e4:91:7e:fe:9e:6e:21:3b:41:09:3a:26:f6:48:24:7a:
         2a:c5:b2:b8:51:e5:77:c2:c1:dc:37:7d:12:59:e7:f8:d4:a6:
         8f:bd:a8:9e
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIUDrxscI46TBUK1NDJfqABy26l2h8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjQwNzE4MDkxMzE5WhcNMjUwNzE3MDkxODE5
WjAzMTEwLwYDVQQDEygwRDJGMjE0RTk2MDMyMEMwOUZFMUE2RUU4OTEzNTk0NUZC
RTUwMkM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC8/bWFwCgMm
oPRYZeuF2rV+GaWYkZp9YAbb+GU7NUK0fUD12PxRzPP9Y2p6HU3bX2hQgTIlKA0v
4Jm8vdN08110VW/IQxdNe/v8L9GYZx/YGtyDfZC0XdYVdfsldw5ptzYV2Ck/YRqS
JE4H0v4oP3zecwh0LXKVAv9Nm34Cj2wYZuseWFy6r0CqEZO059XJLFS+1Z7g9nO+
tlsYkYqW/SYXJ5cpanMyTvAM2xYoYC0ysAXzOAxIIL9JO4OQfmMg/6lUCGNL0GMa
qH6nI7tBaKQYd8asKcVVU9YU15B67Xmgugdm73AE41dOmBA8TE+D1PtAGmzVp05M
3XFc7rDPgQIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFA0vIU6WAyDAn+Gm7okTWUX7
5QLHMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGUBggrBgEFBQcBCwSBhzCB
hDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQTkxOTJBOTgwMDAwLzQvMzIzNjMyMzAzYTMxMzMzNDNhMzYzMDMwNjIz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB
NGALMA0GCSqGSIb3DQEBCwUAA4IBAQAVHaAJ48cWhfIHpG70jzUqTouhruRw67oQ
7XIEWbHbM7WZGJt28GP+Xn6H1zE3TYm8b2TsPXSfCWu5d1VSA9sqOKkouXghKSvB
SJQTkdy0vs+KF3BT9vDzh4PTMTa4SIjUrK0Eh1jAP4A6GJ6emj0z363BXd5ezDFw
9UO2TQdC/ScPRhmq3gG4CpEFTAT9IsX0fs7ivwQZFG6cuDDODcvDpUiU3LEAz0dV
VJaPTxUd7ggMvjK3ZSt4y3C1SbL3Fvg/JFzBsybFqc1TEQmJwkAmtZU4Jf0hx8fS
hOSRfv6ebiE7QQk6JvZIJHoqxbK4UeV3wsHcN30SWef41KaPvaie
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:22:20 2024 by rpki-client on console-fra.rpki-client.org