Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133302e302f32342d3234203d3e203330303331.roa
File:                     3137302e31302e3133302e302f32342d3234203d3e203330303331.roa (raw, json)
Hash identifier:          kGILK31Q3VbY/fIzHyYKUE0m/qExCeSHYmlB2bf3me4=
Subject key identifier:   1A:78:85:EA:1D:03:54:19:68:7B:13:21:B6:FB:B2:A8:0E:96:C5:8B
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       7619EA7C58BCADB1BA80F1FAF6F7AD7E7F4A0811
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133302e302f32342d3234203d3e203330303331.roa
Signing time:             Fri 05 Jun 2026 12:30:50 +0000
ROA not before:           Fri 05 Jun 2026 12:25:50 +0000
ROA not after:            Fri 04 Jun 2027 12:30:50 +0000
asID:                     30031
IP address blocks:        170.10.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 09:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:19:ea:7c:58:bc:ad:b1:ba:80:f1:fa:f6:f7:ad:7e:7f:4a:08:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun  5 12:25:50 2026 GMT
            Not After : Jun  4 12:30:50 2027 GMT
        Subject: CN=1A7885EA1D035419687B1321B6FBB2A80E96C58B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d5:d9:e9:2f:58:3c:03:9e:a4:58:9b:b2:8f:
                    ad:70:0f:db:4f:16:48:50:8a:12:57:b1:d8:9c:df:
                    6d:f6:57:de:41:bc:2c:0d:e5:16:62:b7:3c:3a:d6:
                    25:72:1d:01:81:bd:af:47:18:dd:d5:55:e3:49:fb:
                    a9:2e:34:d8:f6:3f:99:cc:1a:96:50:92:91:b2:86:
                    20:54:b1:07:79:8f:d7:f5:81:70:df:0a:2e:90:f3:
                    2a:97:d1:d2:08:9c:18:ee:3b:a3:af:2f:af:fc:61:
                    7e:45:2f:d0:e4:4b:ed:47:1a:b1:49:61:af:1e:7d:
                    fe:bc:f0:1d:55:23:cd:14:a6:42:6f:60:88:be:45:
                    d7:76:64:c5:97:9a:a1:52:ae:42:3e:81:eb:35:a8:
                    d3:06:89:ee:77:6c:51:1a:14:e9:77:23:dc:02:52:
                    7e:b9:c7:9a:77:5a:e6:5c:f7:7c:5b:02:f9:f3:e0:
                    2a:03:1b:09:39:cb:41:27:01:a4:86:b4:08:cb:15:
                    77:34:d6:a8:aa:42:aa:90:cb:64:80:ee:3c:ef:b0:
                    99:04:98:00:a5:fd:fa:8f:3d:ae:e9:86:3b:92:73:
                    16:2d:cd:b9:d6:7b:8d:15:cf:57:89:52:02:ad:20:
                    05:f1:d1:e3:9f:8b:dc:99:ce:fb:15:7b:80:18:15:
                    0e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:78:85:EA:1D:03:54:19:68:7B:13:21:B6:FB:B2:A8:0E:96:C5:8B
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133302e302f32342d3234203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:be:e8:b9:07:bf:48:86:e6:58:7f:e2:dc:c7:39:0b:2a:36:
         ba:4a:91:86:98:75:43:a6:a6:8b:60:f3:1d:9a:1d:e1:51:8a:
         4e:23:6b:14:cc:bd:1a:a9:a6:2c:f7:8a:8b:10:1c:aa:f7:8e:
         67:72:22:0d:26:7e:0c:c4:c4:93:b3:5d:be:11:3c:1a:5a:5f:
         c9:51:9f:27:4f:a0:1f:82:43:4b:bf:da:6a:7a:a0:0f:45:55:
         8c:4b:e8:c8:49:f1:d5:a6:a6:83:c2:b8:73:a9:56:79:01:a1:
         b2:cf:1d:7b:a0:f9:5a:5a:9a:72:9b:c7:e4:e7:7d:9f:9d:01:
         90:13:35:f7:a9:f0:5a:68:9b:e2:a9:84:cc:d5:4f:8e:9e:49:
         2c:92:e1:d7:21:35:d5:be:ab:5d:af:68:27:fa:36:2b:13:e7:
         b6:10:fe:65:7c:81:fd:63:02:fd:eb:0e:e9:57:3d:6b:44:ae:
         fc:5d:87:9b:b5:3c:43:e0:e2:bf:9d:e1:91:73:0e:a9:6b:c6:
         7b:eb:b3:33:5f:44:c6:72:77:24:31:b3:65:ab:37:76:78:79:
         cc:d0:0c:fb:5f:a2:d0:ed:85:36:3a:f5:b4:99:a5:29:5c:30:
         29:be:77:55:55:60:0f:46:66:47:a8:11:2e:e4:4f:3c:7e:4f:
         9c:81:9b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:58:45 2026 by rpki-client