Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203136353039.roa
File:                     323632303a3133343a363030633a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier:          h23aulD/9drWWwBHPbastBsDq3XbTJy6/Lb1gPAWJ1o=
Subject key identifier:   9B:4F:D6:55:92:30:E5:6D:F9:98:8B:FB:46:23:E2:A5:3E:8E:17:10
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       5DEE2316F14A60D8BA9BA0F7C2680809E8776702
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203136353039.roa
Signing time:             Thu 17 Aug 2023 09:07:58 +0000
ROA not before:           Thu 17 Aug 2023 09:02:58 +0000
ROA not after:            Thu 15 Aug 2024 09:07:58 +0000
asID:                     16509
IP address blocks:        2620:134:600c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 15:17:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ee:23:16:f1:4a:60:d8:ba:9b:a0:f7:c2:68:08:09:e8:77:67:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Aug 17 09:02:58 2023 GMT
            Not After : Aug 15 09:07:58 2024 GMT
        Subject: CN=9B4FD6559230E56DF9988BFB4623E2A53E8E1710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:45:3f:6d:46:0c:f6:bf:92:94:97:2a:cb:b6:
                    a2:0f:65:ef:4d:57:ac:11:8c:88:c5:85:0e:46:0f:
                    3f:99:9a:69:02:a0:f2:a1:35:e7:09:ce:9f:d3:ff:
                    c0:cc:05:c1:1a:df:39:8a:14:06:63:58:51:16:15:
                    ec:da:8e:d7:a0:bc:24:0b:95:47:92:4b:b0:86:38:
                    cd:35:63:02:54:1f:86:9a:cd:d1:17:f2:d1:dd:ee:
                    66:a2:df:40:f4:0d:91:a9:90:f0:29:72:6b:71:16:
                    81:c8:ac:b5:cc:09:13:87:00:51:ab:13:d6:8b:88:
                    87:cb:54:a0:38:21:c1:08:f0:c3:cd:5d:ae:ba:5d:
                    32:fc:27:ca:4e:76:ac:1d:7c:ad:f8:47:1f:52:4b:
                    47:a9:5c:d1:7f:be:24:d5:bb:cd:a0:2d:39:42:8f:
                    62:5b:38:cf:91:38:ab:37:32:5e:3b:8c:32:9c:1a:
                    fa:07:2d:e2:8c:75:67:72:3f:03:4c:e2:2f:12:96:
                    51:b0:92:2b:8e:03:bb:9c:99:55:b0:c9:b3:ef:ea:
                    44:bc:0b:a1:b6:03:21:f5:ef:9b:fe:37:2e:50:7b:
                    e8:7a:b1:30:85:ef:d9:0a:c4:2f:ed:cf:03:d5:82:
                    14:74:b9:ac:ed:55:73:60:09:2b:e3:4b:d7:05:95:
                    8f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4F:D6:55:92:30:E5:6D:F9:98:8B:FB:46:23:E2:A5:3E:8E:17:10
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:600c::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:ac:a3:29:f5:10:dd:27:bb:2a:4c:92:e3:f1:54:66:ec:a3:
         ab:d7:53:b8:fe:fb:a0:cd:68:e0:3f:be:c5:e5:cd:8c:76:f2:
         0b:7d:8e:38:1b:7f:d5:dc:34:d9:ff:47:90:d9:24:c6:0d:54:
         58:3e:2a:a6:a8:05:62:13:e0:d5:84:2d:1d:79:97:10:8b:63:
         4d:f8:bc:14:3a:87:77:9a:14:3b:71:1d:d5:1f:20:89:8a:95:
         d6:40:3f:a4:d8:a5:e6:cb:0b:f8:95:f3:9d:a6:8c:f7:8f:09:
         07:98:9c:11:9c:1e:46:ab:0e:db:bf:b9:75:90:ae:8c:2b:11:
         c6:b8:80:32:9c:0f:d2:ca:8f:24:22:42:97:1a:dc:06:bc:a0:
         9a:25:a7:fb:a3:b4:9f:b5:1a:a4:03:51:f1:ee:7c:ae:0b:b7:
         4e:2d:25:d2:f3:5b:08:30:14:9b:b2:30:f5:8b:fb:89:84:2c:
         09:d8:eb:b7:b0:9b:52:04:e4:4b:43:ce:0d:4a:27:ae:d4:c0:
         60:99:0a:99:62:61:ac:0d:d0:d5:f2:1e:2c:52:20:d6:43:6a:
         7b:4b:f4:8c:7b:a6:38:36:ee:23:ea:53:12:80:c8:22:c6:72:
         7a:47:14:db:6b:e7:2c:56:71:32:fe:9a:54:f0:b4:91:d9:c9:
         af:20:41:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:54:23 2024 by rpki-client on console-ams.rpki-client.org