Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134332e302f32342d3234203d3e203330303331.roa
File:                     3137302e31302e3134332e302f32342d3234203d3e203330303331.roa (raw, json)
Hash identifier:          bQ/yzZjFiWbbru8IadN0HLuD7oLgOX14wDaxPab2dqg=
Subject key identifier:   0B:2F:6F:CD:2C:76:2B:80:68:C3:FB:25:23:E1:1F:96:81:CA:CE:F1
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       3D685EF31760B6BFF62F0CF000BCD835192A34EA
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134332e302f32342d3234203d3e203330303331.roa
Signing time:             Fri 05 Jun 2026 12:30:53 +0000
ROA not before:           Fri 05 Jun 2026 12:25:53 +0000
ROA not after:            Fri 04 Jun 2027 12:30:53 +0000
asID:                     30031
IP address blocks:        170.10.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 09:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:68:5e:f3:17:60:b6:bf:f6:2f:0c:f0:00:bc:d8:35:19:2a:34:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun  5 12:25:53 2026 GMT
            Not After : Jun  4 12:30:53 2027 GMT
        Subject: CN=0B2F6FCD2C762B8068C3FB2523E11F9681CACEF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e3:bb:68:a9:bb:02:d4:ad:dc:19:f4:47:1a:
                    d5:b7:1b:52:6a:74:84:03:68:ca:83:16:92:36:0d:
                    a4:9d:8e:c7:45:25:bd:04:1b:0a:20:f8:f0:b7:03:
                    3b:05:c0:b1:13:1e:fc:26:1e:fd:c3:f1:43:42:58:
                    1b:a9:77:56:d1:fe:58:d1:ed:8a:38:34:70:69:52:
                    e6:66:46:84:5c:50:29:84:1f:25:56:e2:fa:3c:08:
                    05:4b:5f:d5:2e:da:bb:a4:8d:e6:1a:2b:a7:ae:c7:
                    40:51:63:91:a5:c2:69:b0:47:4a:23:62:bd:39:31:
                    f7:31:9c:71:f3:de:30:1a:2c:fc:69:12:0c:57:85:
                    b0:1b:d0:27:2c:87:24:df:79:d2:ba:cd:a8:29:5e:
                    d6:b1:ff:ce:72:29:81:20:52:e8:f6:fd:90:f5:09:
                    49:c9:f7:ea:8d:33:4e:01:3b:62:9f:c5:1b:88:58:
                    62:90:9c:1e:53:52:1e:7f:63:9f:ba:42:ff:74:7c:
                    92:b4:af:ca:82:56:0e:b4:00:4f:71:c3:c5:78:12:
                    70:78:c0:98:90:f7:85:19:ab:d5:79:5c:c6:4e:5b:
                    8d:4c:ff:c2:5d:15:e3:1d:cf:b1:e5:be:e7:04:b0:
                    76:8e:b2:b3:d6:71:25:02:7a:33:7c:69:51:01:4f:
                    59:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:2F:6F:CD:2C:76:2B:80:68:C3:FB:25:23:E1:1F:96:81:CA:CE:F1
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134332e302f32342d3234203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:25:7f:93:05:90:cb:fd:db:50:3d:26:c9:83:88:6e:79:d0:
         4e:00:84:bc:9b:13:35:be:5f:1e:7f:b3:cd:41:e8:04:b0:30:
         1f:d0:a2:12:e8:72:d1:2e:c0:ea:4a:58:25:1a:18:12:e7:cc:
         2f:5c:bc:09:6d:5f:b8:7a:03:03:42:5c:b5:ff:85:85:eb:fd:
         07:2d:13:49:2d:82:23:2f:a8:db:ee:a4:b4:b8:b5:43:f7:58:
         5c:2d:99:12:93:6e:a9:0c:1c:e5:5b:29:e0:09:c5:31:28:03:
         71:c6:6e:fb:7d:b2:6a:a0:24:a0:ca:3c:56:a4:b6:7a:22:5d:
         19:5e:04:84:0a:ed:ce:e6:92:94:fb:6a:0a:00:13:a2:4a:6f:
         e9:c1:23:41:ad:2a:4a:c4:6f:c4:14:79:64:7b:b1:a3:84:5c:
         16:59:cf:d7:ba:38:aa:35:54:26:38:ac:6e:fb:7c:23:4b:73:
         02:da:d6:8c:f7:b8:34:f1:d0:e8:d8:f4:35:ac:38:4d:bf:b2:
         ac:a4:a7:65:85:90:06:9f:b9:12:15:fc:57:14:bd:04:b2:d4:
         03:87:6c:76:b6:5d:1c:35:9a:6f:c0:5c:7f:74:be:38:6a:26:
         c8:36:93:72:d0:db:9f:a4:4f:2a:92:69:a7:bb:09:cc:26:87:
         3e:5e:20:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:58:44 2026 by rpki-client