Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133312e302f32342d3234203d3e203330303331.roa
File:                     3137302e31302e3133312e302f32342d3234203d3e203330303331.roa (raw, json)
Hash identifier:          5wW7/+xJzuZ3zup+MTgqIHSl+MueD/8dCQoNNdKAcYI=
Subject key identifier:   C1:23:3E:17:7B:01:1E:F1:BF:EE:CE:2E:B3:4E:D8:76:C2:21:9E:DE
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       6F6E342E0E01D7D71AC31670EDC4D1EC7F6AE7E5
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133312e302f32342d3234203d3e203330303331.roa
Signing time:             Fri 05 Jun 2026 12:30:51 +0000
ROA not before:           Fri 05 Jun 2026 12:25:51 +0000
ROA not after:            Fri 04 Jun 2027 12:30:51 +0000
asID:                     30031
IP address blocks:        170.10.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 09:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:6e:34:2e:0e:01:d7:d7:1a:c3:16:70:ed:c4:d1:ec:7f:6a:e7:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun  5 12:25:51 2026 GMT
            Not After : Jun  4 12:30:51 2027 GMT
        Subject: CN=C1233E177B011EF1BFEECE2EB34ED876C2219EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9f:da:dc:5c:7b:3b:c8:fa:6a:ea:45:db:18:
                    9c:73:6b:41:6a:cc:58:a9:e2:3c:3d:1b:6f:14:c0:
                    22:92:c9:73:4d:81:bd:3a:45:c2:8f:04:3d:32:66:
                    b8:7b:ab:41:bf:bf:d4:b6:c3:4f:fc:ff:97:51:a7:
                    8c:46:62:c2:3b:05:e3:8e:c5:95:44:fe:9d:4d:eb:
                    89:e7:87:b2:8a:99:09:64:cd:de:db:f1:2b:c2:7d:
                    db:51:c6:00:58:1e:3b:57:df:62:12:95:10:b4:4b:
                    d2:2a:07:73:2b:70:3f:f5:e0:b7:c7:24:0e:c4:bc:
                    07:7f:b9:fc:c1:60:c7:67:5d:ea:4f:f5:9c:44:0e:
                    ac:d1:0c:e8:d7:9f:cf:d6:88:d8:1c:8b:1d:cb:64:
                    a3:dc:04:33:54:d5:24:9b:05:c6:41:f0:3c:ce:72:
                    32:65:92:14:b1:99:f4:f2:af:9a:41:c9:de:76:a3:
                    81:83:37:21:01:91:d9:3e:9b:9c:fd:d0:78:56:11:
                    01:0d:08:ae:4c:f9:bd:96:8a:98:ad:2e:d1:a2:b6:
                    99:d2:d5:1b:3d:91:13:41:37:fb:47:40:d0:42:c7:
                    7d:8e:a2:ce:4d:02:38:f6:b8:0e:bb:65:14:2b:aa:
                    60:82:f5:62:cd:dc:29:aa:a3:bc:07:41:1e:24:37:
                    95:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:23:3E:17:7B:01:1E:F1:BF:EE:CE:2E:B3:4E:D8:76:C2:21:9E:DE
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133312e302f32342d3234203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:4c:50:ee:c4:aa:08:f3:17:e5:19:70:52:f5:6b:84:16:f6:
         62:bb:77:70:22:d2:23:dd:0b:63:a0:4a:a1:8f:0b:90:77:17:
         6d:e0:fb:39:90:ec:71:e5:ad:99:1c:ca:f9:b5:87:4d:b6:fd:
         fd:ef:04:d5:77:e6:b3:b6:97:70:46:d9:88:4d:a5:e8:1a:cf:
         28:b1:fd:f9:bb:fe:cd:d4:b7:11:c6:5b:04:0e:0f:75:70:57:
         39:af:0e:1b:62:ab:2c:3b:8f:da:ae:00:a9:24:15:88:73:5e:
         a2:16:d1:bd:a9:3e:0a:f3:42:c9:d0:9b:31:7c:c2:f8:18:a1:
         b4:bf:62:cc:3c:c8:9c:9d:6d:4f:47:22:a9:ab:c7:50:97:7c:
         2d:f8:89:52:d8:4e:85:74:e8:1f:c0:cf:10:34:5b:6a:30:cf:
         ae:44:01:87:96:73:b4:d8:c6:ac:b0:c3:31:19:47:80:af:39:
         94:77:22:0d:b8:24:60:dc:01:b0:6e:24:4c:b7:fb:bb:cc:20:
         b6:e0:cb:41:d7:4f:28:89:bb:f5:20:95:15:31:33:2a:f4:e9:
         37:2e:7a:d7:8d:95:94:47:1f:da:73:f0:e4:99:88:fc:26:6f:
         7d:f4:1b:c2:88:7f:f9:83:78:1e:3b:9d:9e:98:c3:d3:50:ac:
         b9:72:bd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:58:58 2026 by rpki-client