Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203134363138.roa
File:                     323632303a3133343a363030633a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          IRemgMMdz/4W2YFWTxXzgvlBrqYtrz27d+oo3lLkExM=
Subject key identifier:   DD:F0:10:2A:19:61:92:D1:F4:D6:AA:55:EF:51:47:92:91:03:4D:5D
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       1F9E62EC36B4CAE8FCA0B4D32DA015DAB6865A95
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203134363138.roa
Signing time:             Thu 17 Aug 2023 09:08:07 +0000
ROA not before:           Thu 17 Aug 2023 09:03:07 +0000
ROA not after:            Thu 15 Aug 2024 09:08:07 +0000
asID:                     14618
IP address blocks:        2620:134:600c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 23:07:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9e:62:ec:36:b4:ca:e8:fc:a0:b4:d3:2d:a0:15:da:b6:86:5a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug 17 09:03:07 2023 GMT
            Not After : Aug 15 09:08:07 2024 GMT
        Subject: CN=DDF0102A196192D1F4D6AA55EF51479291034D5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bb:b0:31:37:52:70:39:a7:34:12:eb:47:8f:
                    05:63:d2:b3:08:36:59:0e:b2:00:21:72:7f:01:99:
                    89:2b:f6:4c:08:41:4d:2e:09:9f:84:53:6a:34:87:
                    94:63:5f:af:be:d0:9b:94:35:22:e9:b6:bb:1f:d9:
                    d5:be:30:5e:7a:17:60:01:85:c2:c7:f7:ec:e9:eb:
                    bb:45:d4:9c:f6:07:05:d1:d0:49:9e:76:09:c4:91:
                    34:8d:58:dd:33:91:8e:15:26:8a:fd:72:68:38:ce:
                    b5:89:fa:d2:49:3f:75:4e:20:82:f7:a4:e7:56:26:
                    6d:13:04:24:22:d3:1a:96:80:98:fd:3e:cf:f5:69:
                    f9:08:75:97:28:c1:eb:3e:b6:23:8e:5c:9e:0e:13:
                    0f:b8:c2:a1:31:05:d6:22:20:5f:66:0b:fd:14:e5:
                    07:0b:5c:bf:c1:d6:66:31:ff:6f:02:08:38:61:63:
                    6e:1b:83:b3:56:d1:6f:7e:1c:8e:bc:65:af:67:47:
                    a0:74:c1:8a:2e:ed:58:14:a7:de:01:3a:53:9c:c1:
                    15:ec:a9:36:72:e4:f3:8d:74:4c:9d:e2:02:d0:67:
                    d7:70:92:f8:f1:29:90:3d:76:5d:ba:4f:8f:76:ec:
                    6c:d0:9f:f9:78:31:b3:21:1e:3a:1d:98:a3:4d:d8:
                    81:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F0:10:2A:19:61:92:D1:F4:D6:AA:55:EF:51:47:92:91:03:4D:5D
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:600c::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:7d:fd:7c:52:e6:a6:dd:a1:b5:e0:59:7e:8c:b7:e9:77:32:
         28:42:25:bb:99:25:e1:70:b6:bd:51:22:53:33:fc:55:03:17:
         a1:f9:85:68:c7:59:0d:dc:e6:97:76:6b:a1:8e:82:db:53:79:
         3a:0f:f4:9b:40:d6:fe:6b:a0:f4:8b:92:4e:4a:04:17:7f:31:
         99:6e:7a:b9:4c:27:23:df:78:34:1d:cd:55:4c:60:a2:27:88:
         f4:1b:09:a2:d0:65:c0:66:e2:33:81:0e:62:ac:15:ba:e5:a1:
         62:f4:40:15:82:07:cc:99:b0:82:1f:d0:f4:ac:ee:4c:bc:79:
         09:7d:b0:87:7a:d7:7e:2e:d1:05:4f:24:42:4e:26:90:a8:18:
         96:f0:67:9c:56:83:e1:88:34:e7:15:c0:89:b9:57:22:44:ed:
         35:9d:b8:c0:65:35:a3:5f:73:b1:fc:6e:2a:ad:6c:7a:a9:d3:
         df:2e:77:a2:62:97:48:d0:2c:99:b3:87:46:58:0b:66:30:d4:
         88:1c:03:c8:4f:f5:25:bb:3a:77:ad:3e:5e:7f:02:0a:99:81:
         9b:13:af:da:03:df:0c:15:62:fc:fa:77:bc:e4:36:80:02:d6:
         40:1e:15:c0:64:a4:7b:a8:10:a7:b3:4a:3a:16:5d:03:78:6a:
         0e:0e:aa:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:10:28 2024 by rpki-client on console-ams.rpki-client.org