Route Origin Authorization

$ rpki-client -vvvf rsync-rpki.inara.pk/repo/inara-asn149021/0/323430313a343365303a3a2f33322d3332203d3e20313439303231.roa
File:                     323430313a343365303a3a2f33322d3332203d3e20313439303231.roa (raw, json)
Hash identifier:          tEq0OCuEsCjyuU2/oHcW4NMK1mwuAzqUTQstNZxi9mo=
Subject key identifier:   79:DD:A7:AC:FD:7E:46:58:1C:80:EC:65:92:56:DA:77:33:C0:94:D5
Certificate issuer:       /CN=A91ECC240000/serialNumber=4705C57C492C7F619D5A6BF0C61B544BA79D4C3A
Certificate serial:       04A95FD6384F8747B78B92CAE5EB82A0B2969727
Authority key identifier: 47:05:C5:7C:49:2C:7F:61:9D:5A:6B:F0:C6:1B:54:4B:A7:9D:4C:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RwXFfEksf2GdWmvwxhtUS6edTDo.cer
Subject info access:      rsync://rsync-rpki.inara.pk/repo/inara-asn149021/0/323430313a343365303a3a2f33322d3332203d3e20313439303231.roa
Signing time:             Fri 25 Sep 2026 05:00:42 +0000
ROA not before:           Fri 25 Sep 2026 04:55:42 +0000
ROA not after:            Fri 24 Sep 2027 05:00:42 +0000
asID:                     149021
IP address blocks:        2401:43e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rsync-rpki.inara.pk/repo/inara-asn149021/0/4705C57C492C7F619D5A6BF0C61B544BA79D4C3A.crl
                          rsync://rsync-rpki.inara.pk/repo/inara-asn149021/0/4705C57C492C7F619D5A6BF0C61B544BA79D4C3A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RwXFfEksf2GdWmvwxhtUS6edTDo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Sep 2026 07:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:a9:5f:d6:38:4f:87:47:b7:8b:92:ca:e5:eb:82:a0:b2:96:97:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECC240000, serialNumber=4705C57C492C7F619D5A6BF0C61B544BA79D4C3A
        Validity
            Not Before: Sep 25 04:55:42 2026 GMT
            Not After : Sep 24 05:00:42 2027 GMT
        Subject: CN=79DDA7ACFD7E46581C80EC659256DA7733C094D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e3:9b:a6:4a:aa:db:59:52:2b:71:13:f1:5a:
                    ee:c3:1f:5b:46:f0:cf:05:62:88:ea:53:b1:7b:25:
                    c2:f3:f3:ce:db:90:50:50:21:04:eb:6f:b6:34:f9:
                    56:09:f4:18:67:47:08:49:49:d1:21:8b:5a:e4:d2:
                    1a:a1:b3:9b:a2:91:ba:02:27:fd:af:85:06:7a:11:
                    30:c1:6e:aa:b7:ab:be:c7:fd:d7:1f:70:f2:15:ed:
                    41:cd:c9:07:67:d6:08:8e:ba:b0:a9:a1:d8:32:50:
                    e8:01:e1:47:58:48:bb:76:27:06:7e:4a:e2:d2:bc:
                    b8:1c:c1:e2:8c:25:e6:87:d0:97:ca:46:21:a1:9d:
                    f9:a9:79:73:27:f4:91:03:10:91:f3:1d:ed:65:8d:
                    26:6f:06:7a:24:6a:ef:8c:10:1d:90:bb:c2:c0:ef:
                    75:d0:00:e1:45:d4:6f:bf:b2:45:37:1e:5a:01:de:
                    2a:63:c5:cb:c3:95:dd:f0:c9:8b:de:9a:be:a7:f6:
                    47:c8:df:17:ca:5a:7a:5b:8f:d5:52:ad:ae:4d:98:
                    a8:42:ef:00:f1:ac:ff:11:ec:d7:3f:3f:43:c9:81:
                    6f:09:26:b0:82:dd:ad:66:09:4f:bb:74:75:cd:f1:
                    aa:0b:8f:a5:a5:d7:c7:bf:bd:c1:f3:42:04:f6:ea:
                    07:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:DD:A7:AC:FD:7E:46:58:1C:80:EC:65:92:56:DA:77:33:C0:94:D5
            X509v3 Authority Key Identifier:
                keyid:47:05:C5:7C:49:2C:7F:61:9D:5A:6B:F0:C6:1B:54:4B:A7:9D:4C:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync-rpki.inara.pk/repo/inara-asn149021/0/4705C57C492C7F619D5A6BF0C61B544BA79D4C3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RwXFfEksf2GdWmvwxhtUS6edTDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync-rpki.inara.pk/repo/inara-asn149021/0/323430313a343365303a3a2f33322d3332203d3e20313439303231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:43e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:b0:1f:c6:48:87:8a:9c:44:f6:c1:f3:33:46:4e:7c:51:0f:
         14:42:40:c6:7d:cd:aa:c7:e8:4d:f0:ac:d4:65:f7:1b:0c:16:
         6c:25:27:90:0b:ae:2b:42:fa:5e:88:50:f3:00:70:91:66:1a:
         4a:99:49:2f:e1:be:bb:4c:eb:df:1b:a0:82:d0:f7:f3:0e:b0:
         21:82:7d:ba:83:66:57:9b:58:d5:db:9e:4e:6f:27:7c:dd:49:
         f8:0c:91:1e:06:5b:b9:04:c8:45:13:b4:0c:78:bd:ed:27:95:
         88:a3:65:84:49:2a:9c:41:e2:2f:f6:3b:92:d2:f8:37:b6:98:
         40:f0:c6:bb:53:85:46:1a:8c:e5:22:d4:a1:10:54:3a:76:8b:
         59:d1:9a:87:c7:42:89:f1:17:ec:0f:94:25:70:e6:ac:0e:e5:
         2c:46:97:3c:5e:07:d2:48:cc:1a:5a:2c:b6:d6:77:80:81:13:
         9c:bb:ec:2a:9a:6a:ab:6b:d7:75:6a:6a:d7:f4:20:77:d8:59:
         f0:bc:57:0b:19:b9:7a:69:1b:b1:b2:83:52:f9:e0:c0:5f:9e:
         e2:86:8b:09:86:4f:0d:97:7c:8a:33:7b:c3:27:b9:94:e5:bb:
         01:fe:22:d5:e6:30:19:fd:4a:16:47:79:60:19:ea:06:07:c6:
         7a:36:98:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:14:00 2026 by rpki-client