Route Origin Authorization

$ rpki-client -vvvf rsync-rpki.inara.pk/repo/inara-asn149021/0/323430313a343365303a383a3a2f34352d3435203d3e20313439303231.roa
File:                     323430313a343365303a383a3a2f34352d3435203d3e20313439303231.roa (raw, json)
Hash identifier:          M47xLWN5F9znhylukKSl5li2etkAOzUfoI9jfhFTqpE=
Subject key identifier:   CC:A3:D0:58:7E:29:28:56:37:7D:6B:D0:37:B0:2E:91:7D:B1:9B:A0
Certificate issuer:       /CN=A91ECC240000/serialNumber=4705C57C492C7F619D5A6BF0C61B544BA79D4C3A
Certificate serial:       2444518309E0FB41AFD623F9B5206D5D6FE36923
Authority key identifier: 47:05:C5:7C:49:2C:7F:61:9D:5A:6B:F0:C6:1B:54:4B:A7:9D:4C:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RwXFfEksf2GdWmvwxhtUS6edTDo.cer
Subject info access:      rsync://rsync-rpki.inara.pk/repo/inara-asn149021/0/323430313a343365303a383a3a2f34352d3435203d3e20313439303231.roa
Signing time:             Thu 24 Sep 2026 06:14:59 +0000
ROA not before:           Thu 24 Sep 2026 06:09:59 +0000
ROA not after:            Thu 23 Sep 2027 06:14:59 +0000
asID:                     149021
IP address blocks:        2401:43e0:8::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rsync-rpki.inara.pk/repo/inara-asn149021/0/4705C57C492C7F619D5A6BF0C61B544BA79D4C3A.crl
                          rsync://rsync-rpki.inara.pk/repo/inara-asn149021/0/4705C57C492C7F619D5A6BF0C61B544BA79D4C3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RwXFfEksf2GdWmvwxhtUS6edTDo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 00:54:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:44:51:83:09:e0:fb:41:af:d6:23:f9:b5:20:6d:5d:6f:e3:69:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECC240000, serialNumber=4705C57C492C7F619D5A6BF0C61B544BA79D4C3A
        Validity
            Not Before: Sep 24 06:09:59 2026 GMT
            Not After : Sep 23 06:14:59 2027 GMT
        Subject: CN=CCA3D0587E292856377D6BD037B02E917DB19BA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d7:bc:02:54:7d:eb:e3:ba:dc:39:fa:90:73:
                    c7:68:72:f9:6e:a0:0d:32:8f:01:94:a6:24:0a:e8:
                    bb:af:e3:1f:8a:53:14:4c:31:c7:6e:ca:ce:07:26:
                    ec:a8:89:33:a5:f0:f8:75:78:99:8f:a8:ca:d4:4a:
                    13:7f:c0:54:cb:e3:b7:dd:56:f6:47:8e:66:2e:b6:
                    24:0b:28:9f:1a:81:80:2b:75:f5:be:1d:72:78:3a:
                    ae:ab:b4:f0:58:28:fe:fb:1c:4e:bb:d5:4e:42:8a:
                    c6:10:36:4e:b5:ae:d4:fe:46:9e:e9:b6:a5:cf:cd:
                    9e:fd:a3:50:8d:b4:8a:1a:ee:5a:19:5c:06:72:86:
                    00:a8:08:a1:57:0b:35:42:de:28:8d:8b:6a:58:c2:
                    ef:c8:06:54:51:d9:c6:65:ea:bb:d2:24:11:f7:b1:
                    0e:37:36:96:5b:0f:cf:a2:ca:a0:82:75:04:4f:5f:
                    a7:50:ec:81:51:a0:81:14:f4:19:97:ee:b6:63:2f:
                    1f:ee:43:0b:de:ad:b9:2b:f9:18:00:5e:f4:0b:63:
                    2e:b3:00:53:77:1f:71:42:cf:41:b7:bc:a0:ac:a2:
                    9a:7e:ae:b9:d5:50:64:a0:13:cc:94:5f:ad:2b:c8:
                    fb:19:b8:85:d7:e0:57:a6:48:79:d8:9a:1a:c3:89:
                    ea:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A3:D0:58:7E:29:28:56:37:7D:6B:D0:37:B0:2E:91:7D:B1:9B:A0
            X509v3 Authority Key Identifier:
                keyid:47:05:C5:7C:49:2C:7F:61:9D:5A:6B:F0:C6:1B:54:4B:A7:9D:4C:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync-rpki.inara.pk/repo/inara-asn149021/0/4705C57C492C7F619D5A6BF0C61B544BA79D4C3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RwXFfEksf2GdWmvwxhtUS6edTDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync-rpki.inara.pk/repo/inara-asn149021/0/323430313a343365303a383a3a2f34352d3435203d3e20313439303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:43e0:8::/45

    Signature Algorithm: sha256WithRSAEncryption
         54:27:49:69:f9:7f:66:cc:40:ab:00:76:89:ff:3f:73:c1:e8:
         35:01:65:28:6f:20:8b:d7:6c:4b:6d:f8:72:1a:be:e0:7f:00:
         f3:0d:8a:e7:0d:76:d1:dc:95:dd:35:93:0d:1b:d2:37:00:17:
         92:44:ee:b3:86:58:78:fb:5c:99:69:7b:69:f6:e1:1d:14:e8:
         78:b8:06:1c:91:b3:76:30:d8:cd:5c:8d:ba:57:c6:45:a8:b0:
         20:b7:03:27:82:0f:da:7a:ee:e9:68:75:a1:b4:bd:b8:06:c5:
         a2:6d:b5:d3:4e:72:fb:12:26:70:0c:68:c0:b5:d5:85:11:06:
         33:b3:3c:bf:a6:a9:e3:59:8e:98:4c:b9:00:d4:41:86:50:79:
         23:58:85:a0:6b:cd:e1:86:0e:14:68:dc:ca:45:26:0a:5e:df:
         be:6a:b1:43:0c:78:dd:22:55:75:47:77:08:9b:56:33:30:20:
         72:e0:e1:4e:a2:11:2e:7b:29:d6:e9:42:29:0c:37:2f:c0:66:
         92:3c:db:e3:8c:d1:db:6c:d7:8d:c1:d0:f8:65:c5:55:54:e4:
         7b:e6:75:ce:d0:36:e8:10:19:32:04:dd:4d:0f:a7:f0:a1:bd:
         99:50:ce:91:39:f1:f9:d5:3a:d7:b8:00:54:c3:1e:8b:60:33:
         b7:a5:fa:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:09:37 2026 by rpki-client