Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133302e302f32342d3234203d3e203330303331.roa
File:                     3137302e31302e3133302e302f32342d3234203d3e203330303331.roa (raw, json)
Hash identifier:          DccLs+F44nIvd27xHjn5O1BYto6JdSvHhPxhcQMfV54=
Subject key identifier:   01:FF:9A:9E:1B:15:E7:DE:9C:2F:53:9E:0A:FA:75:0A:E4:DB:98:91
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       6B3A4A1B4EA797974B85254B1E64E9B261B5F806
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133302e302f32342d3234203d3e203330303331.roa
Signing time:             Fri 04 Jul 2025 12:05:06 +0000
ROA not before:           Fri 04 Jul 2025 12:00:06 +0000
ROA not after:            Fri 03 Jul 2026 12:05:06 +0000
asID:                     30031
IP address blocks:        170.10.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 12:14:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:3a:4a:1b:4e:a7:97:97:4b:85:25:4b:1e:64:e9:b2:61:b5:f8:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:06 2025 GMT
            Not After : Jul  3 12:05:06 2026 GMT
        Subject: CN=01FF9A9E1B15E7DE9C2F539E0AFA750AE4DB9891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:68:de:da:3b:04:b6:ea:3e:e8:00:e5:18:a7:
                    f8:8e:21:10:b7:40:62:4b:87:b6:7b:1b:66:4a:d7:
                    e9:69:16:3d:3e:4b:84:91:73:a4:b6:7d:e8:34:7a:
                    fe:27:14:ab:e7:1d:17:0a:d1:d6:a0:d7:56:c7:0c:
                    72:e3:89:11:78:55:28:94:21:03:24:15:3c:ee:5e:
                    94:58:44:e1:ce:4e:a9:49:46:55:d1:7e:c4:b4:d2:
                    d3:b8:e6:4e:a6:28:ac:65:10:91:ed:e7:aa:cf:89:
                    ee:3b:ef:95:fa:f1:f9:88:d1:2a:3a:b3:2c:7f:f7:
                    36:a5:32:32:58:17:92:42:28:9b:29:45:ee:81:6f:
                    ad:d8:0d:0d:77:8a:d9:bb:e4:df:a1:aa:2f:c6:aa:
                    f0:88:b9:13:c1:c2:56:ef:80:44:57:40:d4:bd:5e:
                    94:ba:38:da:f6:3b:7a:52:ed:a2:93:64:0c:a7:7c:
                    82:fa:67:47:78:24:f4:ea:d6:35:08:79:94:9b:8e:
                    c0:7f:b5:08:db:98:75:69:e8:8d:0f:a9:0a:92:88:
                    65:b2:71:0d:1c:88:7a:a1:86:95:0c:39:0d:05:bc:
                    8d:81:7f:89:52:b5:7a:6d:08:31:72:68:0a:af:48:
                    12:4f:7f:7a:c6:19:94:d9:f9:af:b1:74:41:0e:04:
                    39:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FF:9A:9E:1B:15:E7:DE:9C:2F:53:9E:0A:FA:75:0A:E4:DB:98:91
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133302e302f32342d3234203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:fa:50:1c:6d:c0:96:5a:ae:71:89:90:ac:86:86:e5:ed:d0:
         97:dc:ea:da:cc:6d:bd:3a:be:d3:e4:2f:ca:e8:93:6d:0a:df:
         1a:07:00:e2:bb:7f:42:08:62:c6:33:23:a6:19:8b:28:93:8b:
         c3:0e:00:71:cf:1c:77:37:a4:07:e9:e7:3b:84:3f:56:08:e3:
         67:bb:20:2c:16:6a:57:37:05:c3:22:2d:1d:3f:74:8b:91:81:
         fe:74:67:6a:9c:8f:92:38:7d:b8:5f:15:a9:bb:db:dc:17:88:
         d1:ed:94:89:59:25:e6:79:ff:de:03:95:92:c9:a9:28:e9:6f:
         ec:14:2a:c9:f3:82:a9:7e:c6:5b:7b:6e:44:df:95:91:b8:5a:
         0b:3f:1f:da:19:23:a9:a7:38:58:7b:0f:c6:fd:1d:53:02:15:
         6c:6b:cd:9f:78:6b:cb:a0:69:7f:59:4e:34:3d:78:c9:0c:ea:
         81:da:51:83:93:b7:43:48:fb:9f:5e:d6:7c:c4:e2:51:60:7d:
         a8:ba:a2:f2:63:b2:6f:f6:3a:a1:0b:f4:6f:31:22:fa:93:f4:
         82:ce:01:b9:13:59:08:aa:07:bd:5c:90:5b:20:f4:92:b5:f2:
         c9:a8:f6:01:22:f1:90:5c:e2:fd:75:c1:17:c6:80:66:8d:6b:
         00:6a:78:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 04:53:03 2025 by rpki-client