Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135332e302f32342d3234203d3e203330303331.roa
File:                     3137302e31302e3135332e302f32342d3234203d3e203330303331.roa (raw, json)
Hash identifier:          Diw7yFc2N2yRitxFml688YMTYS7GhoEa+s1yB/kxNEw=
Subject key identifier:   73:83:3C:66:3A:1D:9F:49:D2:C2:E6:2D:09:A6:C7:3B:71:09:35:24
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       40A2B4010FF1B6332813690A9D2738E132D0D18A
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135332e302f32342d3234203d3e203330303331.roa
Signing time:             Fri 05 Jun 2026 12:30:47 +0000
ROA not before:           Fri 05 Jun 2026 12:25:47 +0000
ROA not after:            Fri 04 Jun 2027 12:30:47 +0000
asID:                     30031
IP address blocks:        170.10.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 09:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a2:b4:01:0f:f1:b6:33:28:13:69:0a:9d:27:38:e1:32:d0:d1:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun  5 12:25:47 2026 GMT
            Not After : Jun  4 12:30:47 2027 GMT
        Subject: CN=73833C663A1D9F49D2C2E62D09A6C73B71093524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:a4:8e:61:d4:27:5f:a7:1f:71:e9:da:1f:51:
                    03:b7:1b:e9:d2:ce:35:5d:fd:fe:0f:91:65:b7:89:
                    10:4d:59:a8:41:2c:2e:fe:eb:a6:47:53:6a:56:e1:
                    61:77:40:ff:63:71:18:a9:87:47:37:fb:b0:65:bb:
                    15:c2:35:10:fd:9b:58:4a:ff:8c:3e:bd:79:79:8e:
                    5a:0f:10:5d:e4:36:ae:85:3f:6b:de:a2:f3:b7:57:
                    a9:45:1a:46:c1:a0:8c:88:98:e9:a3:5c:43:53:a4:
                    15:7e:74:c3:b5:3f:a8:2a:9c:8d:b7:65:99:5f:5b:
                    1f:31:38:2c:8a:48:9a:81:fe:d6:ec:eb:b3:76:02:
                    f3:97:c7:2a:0f:3e:e0:9c:c0:2f:4b:aa:72:ae:22:
                    87:b5:66:ab:52:65:25:15:f9:05:05:b9:0a:3d:58:
                    26:81:dd:c3:60:4b:2b:ed:7d:13:4b:83:a7:ad:89:
                    fa:cf:65:36:12:04:e7:0d:2f:79:b5:53:75:7c:8d:
                    d5:3d:2d:b6:d8:64:11:03:00:a9:44:2d:b4:3c:1c:
                    fd:68:66:42:57:56:63:b2:bf:7b:1d:81:f8:cd:f6:
                    0c:87:03:8e:87:ce:45:b0:e3:c5:8b:ec:f0:db:a4:
                    78:92:c5:3c:11:de:b8:12:aa:cf:6e:41:db:de:45:
                    ff:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:83:3C:66:3A:1D:9F:49:D2:C2:E6:2D:09:A6:C7:3B:71:09:35:24
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135332e302f32342d3234203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:b2:7a:c2:57:9e:1b:50:e4:36:75:51:91:86:c9:03:bd:41:
         a1:18:53:a4:e4:f7:a7:11:f9:98:a2:14:e7:1e:3d:f7:94:fe:
         8a:88:0e:f7:47:7a:4c:f2:9b:8c:6c:93:e9:99:72:ad:c0:e7:
         9f:e9:c8:f2:c4:43:87:6d:d1:44:78:3f:b9:84:4d:f2:0e:51:
         ef:ec:eb:84:6e:9a:9d:2b:89:01:99:54:ba:0b:ce:f8:29:32:
         60:85:68:54:ce:82:67:6c:98:f3:f2:37:23:e4:ab:ab:d6:d6:
         e8:4c:5a:c4:2a:0a:75:f2:78:ea:de:12:65:83:3c:d8:a3:41:
         43:92:7b:6e:af:2f:b3:86:0e:09:87:aa:bc:d4:d3:b1:54:cc:
         55:94:9b:b1:cb:ea:d7:6a:04:15:3b:2d:ff:82:7d:a6:69:54:
         7a:3f:cd:50:6e:6f:ad:7f:bf:a6:6e:09:b3:e4:8e:e4:20:a5:
         dc:a0:6a:fe:19:16:a7:33:47:96:e9:b3:e7:83:50:51:17:41:
         1c:fa:8f:6e:0e:80:45:d2:98:26:5f:d5:ce:0e:1b:f9:7d:da:
         40:c5:4b:51:23:0e:f5:ae:ae:39:da:c8:a4:b3:47:ca:f7:67:
         e2:cd:6a:a2:fd:e3:fe:c6:85:99:1c:96:39:cc:60:d5:1a:ae:
         9f:3f:6d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:58:42 2026 by rpki-client