Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133322e302f32332d3233203d3e203330303331.roa
File:                     3137302e31302e3133322e302f32332d3233203d3e203330303331.roa (raw, json)
Hash identifier:          Pj+EJ9qUN+vn1mjGoeqBFCMqn1H84Vg47OVP4ozN26I=
Subject key identifier:   1D:CF:17:0E:B2:A7:D8:DF:7E:EA:49:6C:E3:CF:C1:3D:5F:61:96:B8
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       7157B5375E0C8B8E4AE27D1A5282677BC778AC2B
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133322e302f32332d3233203d3e203330303331.roa
Signing time:             Fri 05 Jun 2026 12:30:50 +0000
ROA not before:           Fri 05 Jun 2026 12:25:50 +0000
ROA not after:            Fri 04 Jun 2027 12:30:50 +0000
asID:                     30031
IP address blocks:        170.10.132.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 09:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:57:b5:37:5e:0c:8b:8e:4a:e2:7d:1a:52:82:67:7b:c7:78:ac:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun  5 12:25:50 2026 GMT
            Not After : Jun  4 12:30:50 2027 GMT
        Subject: CN=1DCF170EB2A7D8DF7EEA496CE3CFC13D5F6196B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3d:f8:99:c4:89:67:a5:39:b4:8d:13:91:ba:
                    1b:4c:54:82:96:59:76:e7:1c:b5:27:8d:5a:e7:74:
                    ef:ca:dc:ad:2d:e5:53:91:33:f4:60:de:57:d8:5d:
                    95:36:35:cd:1c:e3:91:5d:3f:1e:4f:bb:92:7e:a5:
                    3c:d5:5d:7c:f6:99:ff:05:01:0a:67:e4:85:fc:e2:
                    97:7a:0e:a0:86:9c:47:e9:c1:a2:89:7a:43:9d:56:
                    b0:da:9b:8b:4f:f5:dd:fd:8f:da:ba:0d:b0:c4:8d:
                    0d:8d:c2:10:f9:90:1e:af:1f:f6:c7:db:23:20:65:
                    dd:5f:8e:05:17:67:e6:64:f4:ff:01:b3:dc:a1:73:
                    82:60:03:40:d9:1a:be:c6:89:21:a3:43:23:e5:d3:
                    1e:e9:09:7f:ec:e4:ab:a6:bd:7a:37:92:92:d2:c1:
                    ea:5c:7d:7d:dd:0f:09:bc:21:db:13:cd:e1:8d:8c:
                    c1:94:87:23:75:02:28:b5:37:bb:e0:3d:b9:cd:26:
                    b7:f5:b7:bb:69:7a:59:a6:ea:13:b6:e1:ea:7b:3c:
                    d6:97:f2:f0:1e:22:0e:6c:05:0a:cf:57:dd:48:c9:
                    26:44:3e:e0:77:84:77:6c:64:b7:09:61:33:3d:2c:
                    43:5f:c7:0a:28:e5:a8:f2:19:ca:ac:bf:89:f6:6b:
                    7b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:CF:17:0E:B2:A7:D8:DF:7E:EA:49:6C:E3:CF:C1:3D:5F:61:96:B8
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3133322e302f32332d3233203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:16:0f:e5:80:f5:b1:e3:17:eb:76:90:6f:b6:07:f5:a7:03:
         69:40:8b:ad:b0:0d:00:ee:9d:86:aa:c4:7a:52:58:27:fc:d1:
         4e:81:c4:0f:62:60:f1:f1:e0:31:90:4c:1e:86:e0:be:90:81:
         04:b0:c5:b1:44:3c:7c:10:d6:2c:ec:97:63:13:a0:76:f8:92:
         27:f1:9e:fb:be:7b:3c:86:39:6c:fb:95:95:57:eb:12:8d:35:
         85:f5:be:63:20:4e:75:ad:3a:61:40:38:1b:b8:70:1a:ea:49:
         9b:c5:2e:1c:4a:dd:40:6d:63:8a:16:0a:58:5e:ea:0b:17:06:
         b8:46:61:eb:19:d9:07:a4:9b:2a:52:79:c5:2d:9f:f0:26:2a:
         ab:57:50:2f:21:c8:d3:ed:81:44:3e:80:fc:1f:05:b9:83:16:
         84:b6:eb:17:09:25:af:84:5c:fb:78:a4:8e:0f:8f:c4:41:67:
         28:74:51:1f:94:5d:c2:fb:83:6a:26:e1:aa:f2:f3:71:3e:d7:
         a5:28:b0:bc:c2:c6:f8:48:75:47:c9:2e:74:ba:e5:e7:98:83:
         5b:a7:51:d1:c9:4b:14:22:a5:a6:3a:4b:0d:a2:9a:03:9d:ac:
         31:00:ef:6d:d9:e3:11:fe:e9:8b:53:4b:c3:fd:15:8a:c1:7c:
         f2:b8:f9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:57:28 2026 by rpki-client