Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134332e302f32342d3234203d3e20333936393832.roa
File:                     3137302e31302e3134332e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          +Wo/qrVNX0zoR1DNsdctd8awG3h+UuLfmHU0F4oKBh4=
Subject key identifier:   C1:D9:EA:9C:49:9C:50:E3:AD:C7:65:86:C8:29:6A:A9:11:50:8A:10
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       5CA1A62E459C1AA24C5BCF59BB3F6F00A09BD607
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134332e302f32342d3234203d3e20333936393832.roa
Signing time:             Fri 05 Jun 2026 12:30:52 +0000
ROA not before:           Fri 05 Jun 2026 12:25:52 +0000
ROA not after:            Fri 04 Jun 2027 12:30:52 +0000
asID:                     396982
IP address blocks:        170.10.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 09:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:a1:a6:2e:45:9c:1a:a2:4c:5b:cf:59:bb:3f:6f:00:a0:9b:d6:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun  5 12:25:52 2026 GMT
            Not After : Jun  4 12:30:52 2027 GMT
        Subject: CN=C1D9EA9C499C50E3ADC76586C8296AA911508A10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:11:27:94:16:07:72:c7:78:15:26:49:09:85:
                    cf:e6:39:a3:c1:13:87:ea:3a:d1:c0:87:44:9a:6b:
                    5e:8a:7f:5c:fa:28:72:14:e0:c5:c3:99:ef:b1:49:
                    ee:c0:6c:3b:fc:94:62:e1:71:82:46:a0:51:f7:38:
                    d6:5f:97:52:82:ac:ba:6e:2f:c6:8a:1f:69:d0:c8:
                    73:4a:a2:c8:c7:5e:03:38:d9:c4:fc:60:6b:fc:14:
                    cc:57:c8:5d:17:8a:b8:e2:22:cd:d4:60:c4:3f:9b:
                    8a:74:98:4e:b8:b0:64:bb:97:86:c6:3e:c1:cf:14:
                    b8:34:d5:1b:09:4d:c2:af:68:ae:56:23:ab:b0:ee:
                    3f:bc:f9:e7:b4:73:57:45:14:8f:6f:fa:f7:aa:95:
                    37:11:cc:83:d8:99:65:70:7e:6f:40:0f:99:28:c0:
                    10:33:47:c6:01:8d:dd:4f:f2:d2:5b:5a:df:fb:64:
                    e5:9b:e2:58:cd:d5:8f:fe:e6:4b:96:33:fd:26:46:
                    cb:68:cc:09:e3:5e:4b:fd:41:2b:51:4a:16:c2:54:
                    d1:48:ef:4d:0e:7d:8b:88:7d:a4:0e:9a:84:8d:ef:
                    f7:bd:7a:54:b7:02:86:09:a4:9e:8b:7a:9a:1c:45:
                    6b:23:fb:cb:64:11:27:75:25:06:51:9c:2a:53:7d:
                    b0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D9:EA:9C:49:9C:50:E3:AD:C7:65:86:C8:29:6A:A9:11:50:8A:10
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3134332e302f32342d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:19:aa:f8:44:24:e1:44:4f:a3:fb:01:80:ce:ff:c2:d0:03:
         2c:44:66:1e:0b:44:a7:6a:b1:26:fb:67:29:4d:3a:97:38:4f:
         e5:b0:6c:07:30:43:87:1e:37:c4:85:44:6e:9f:0b:9c:96:1c:
         03:a6:7b:a1:30:d6:76:26:8a:c8:d9:5d:4a:7b:e8:90:8c:b1:
         74:52:5e:12:57:8b:31:fb:bc:7c:f4:5c:74:f8:11:29:d1:41:
         f8:18:f0:87:2a:58:6d:c6:b3:c7:7d:ff:28:ba:46:f6:4d:88:
         cf:b7:1b:44:8a:35:94:94:57:fc:6c:8d:e0:0b:34:d9:5f:02:
         fc:4c:b9:10:13:94:d3:60:f1:dc:3c:8f:6f:cd:c8:48:58:c7:
         6e:7a:7e:5a:ab:e8:39:00:d2:fc:2f:96:6a:ae:65:aa:62:24:
         dc:f9:7c:2a:f7:0a:17:71:32:0b:8a:e7:f8:24:8e:c5:92:5d:
         bb:84:50:98:40:6a:77:16:5a:3a:8a:b6:6a:f3:65:33:63:73:
         e2:97:d1:22:d7:cf:26:ca:70:6e:4e:28:bb:38:c1:18:36:d6:
         b9:47:ec:d9:8f:40:21:08:fd:38:80:bc:ba:f7:ab:c4:5a:51:
         59:21:6e:77:8a:55:5c:21:ce:d3:be:3d:90:aa:8a:eb:5f:f4:
         2b:31:a0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:22:37 2026 by rpki-client