Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203333353338.roa
File:                     3137302e31302e3134322e302f32342d3234203d3e203333353338.roa (raw, json)
Hash identifier:          TiKAjsLYWVmWnpvnzGbKV9DShavLsMDsk4baB04PYZ8=
Subject key identifier:   43:56:33:3A:46:92:E1:2B:0A:37:0B:50:67:2D:52:E1:FD:89:96:D7
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       41B13066DF446068CFF209E74BAB8D9E9404D24A
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203333353338.roa
Signing time:             Fri 05 Jun 2026 12:30:53 +0000
ROA not before:           Fri 05 Jun 2026 12:25:53 +0000
ROA not after:            Fri 04 Jun 2027 12:30:53 +0000
asID:                     33538
IP address blocks:        170.10.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 03:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b1:30:66:df:44:60:68:cf:f2:09:e7:4b:ab:8d:9e:94:04:d2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun  5 12:25:53 2026 GMT
            Not After : Jun  4 12:30:53 2027 GMT
        Subject: CN=4356333A4692E12B0A370B50672D52E1FD8996D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e3:d3:06:5d:b0:a4:82:6d:8d:d5:0c:e5:6c:
                    69:21:13:4a:57:7d:12:b8:44:1c:4b:0d:7e:38:6e:
                    1a:74:06:15:12:67:df:0d:47:7a:7d:33:59:78:f5:
                    cd:dc:de:b0:bb:c7:65:5a:2d:be:cc:e3:37:f1:6e:
                    32:ef:c2:94:45:65:30:24:45:21:dc:76:0a:91:b3:
                    4d:a8:ca:db:85:ee:98:ea:f3:b9:3d:96:d3:06:ac:
                    9b:aa:0c:bf:bc:7d:46:3a:5c:fb:44:1e:36:bb:bd:
                    99:95:f6:ff:f2:3b:59:6e:6d:0f:b0:3a:11:5d:79:
                    2a:89:22:42:6b:6b:06:af:c9:23:b7:3c:23:0f:bf:
                    ce:48:e2:1e:19:09:df:3b:06:d0:5e:7b:f6:b5:15:
                    5a:c3:ce:86:5a:0b:67:e8:ce:98:73:a5:91:48:a0:
                    e4:8b:3f:91:b5:9d:a2:ac:90:aa:ad:68:53:ad:55:
                    e5:ac:41:ed:f9:da:92:de:c4:9a:3e:36:e6:01:7a:
                    ee:01:26:b9:fb:f7:0e:21:71:46:a8:5d:ad:5d:fb:
                    70:59:27:ad:7e:d4:24:78:7c:fc:55:24:1c:77:0a:
                    80:c2:75:d0:aa:2d:6b:f9:6f:c3:28:7c:e3:6e:8e:
                    f6:88:9e:3b:4c:c9:60:22:bc:73:f8:21:fd:ab:1a:
                    9c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:56:33:3A:46:92:E1:2B:0A:37:0B:50:67:2D:52:E1:FD:89:96:D7
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134322e302f32342d3234203d3e203333353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:fc:e2:ef:ae:2c:5a:31:cc:f8:22:b1:46:eb:7d:d9:65:3d:
         55:44:a9:65:ec:53:7d:29:19:00:bf:27:07:fc:c3:1d:f5:e2:
         af:9a:3f:b5:fb:c6:13:e6:bc:13:29:48:55:db:93:28:b5:e1:
         bd:6c:a9:b8:a6:17:40:49:0e:c8:ae:1a:77:c7:f9:2b:81:be:
         ac:ae:ad:e6:f1:a8:0c:b7:aa:bb:97:25:a3:a8:18:95:a9:85:
         f5:af:5b:63:e4:3a:99:bf:45:c5:56:4f:1b:10:02:2b:f5:3d:
         e5:fc:1c:12:b5:45:ce:94:e8:73:38:99:7a:03:cd:7f:5a:d4:
         d2:53:0e:36:fe:1f:8b:53:ab:31:46:0b:0d:03:07:79:2d:01:
         d9:d2:a8:25:fa:41:c0:74:3d:44:03:68:44:2d:9d:fb:57:5f:
         08:64:29:e2:23:33:e5:eb:79:c5:db:03:58:e2:74:9c:bb:51:
         48:c7:a0:85:c9:00:f0:54:f4:20:52:74:1f:c0:a9:6f:ab:d2:
         5e:69:ce:96:e1:d0:80:16:6a:65:88:e5:4d:c6:01:fb:60:9f:
         50:06:e9:46:5f:91:e3:e6:19:a0:a9:58:2f:c6:31:3d:5c:d9:
         6f:c5:d6:cb:4a:da:44:c9:68:2a:cd:b4:d1:86:46:3e:ee:07:
         b7:2c:68:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:28:40 2026 by rpki-client