Route Origin Authorization

$ rpki-client -vvvf rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135372e302f32342d3234203d3e203330303331.roa
File:                     3137302e31302e3135372e302f32342d3234203d3e203330303331.roa (raw, json)
Hash identifier:          IdiBLz2vf6DUt9QKOcLD88QoNEjREU2If61WHUO1Vdk=
Subject key identifier:   D3:C6:48:D4:67:E5:B2:74:C4:9E:3A:D5:EE:EB:18:ED:C1:04:B8:EA
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       7661276FAC62E8CD07924D358CB0C25AAD316DFF
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135372e302f32342d3234203d3e203330303331.roa
Signing time:             Thu 17 Sep 2026 19:41:04 +0000
ROA not before:           Thu 17 Sep 2026 19:36:04 +0000
ROA not after:            Thu 16 Sep 2027 19:41:04 +0000
asID:                     30031
IP address blocks:        170.10.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 17:33:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:61:27:6f:ac:62:e8:cd:07:92:4d:35:8c:b0:c2:5a:ad:31:6d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Sep 17 19:36:04 2026 GMT
            Not After : Sep 16 19:41:04 2027 GMT
        Subject: CN=D3C648D467E5B274C49E3AD5EEEB18EDC104B8EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bd:cc:99:5b:1f:65:71:0a:41:1e:69:cf:46:
                    1f:18:92:87:f3:06:54:cd:37:85:e1:44:46:55:98:
                    bb:0d:25:0f:06:55:04:92:7f:e2:49:6e:23:06:28:
                    fb:d0:7c:4c:ef:7f:23:bf:a4:1f:33:54:b7:2e:5d:
                    91:47:11:69:20:7b:6c:df:aa:68:4a:4e:56:6f:2e:
                    24:ca:7b:26:41:4a:53:b6:8a:0d:5b:bf:4e:0c:15:
                    c8:ab:a6:f1:11:6d:e8:d2:f3:fd:18:5d:26:f8:21:
                    44:49:b8:e4:56:af:29:e0:c9:c8:6d:71:95:7a:a4:
                    91:08:3d:f3:b7:22:20:32:40:f8:a0:8c:c0:cc:78:
                    ce:78:22:0d:80:0d:9b:5a:e4:97:9e:e7:72:88:68:
                    4b:25:72:db:76:0d:3c:70:24:3c:31:49:a3:2b:6f:
                    aa:08:e2:a3:58:0c:48:67:2f:39:7e:b6:11:74:f3:
                    9e:48:4d:e8:91:4a:ad:78:29:08:5f:f7:5a:4c:0f:
                    78:28:c4:48:af:07:8c:87:5b:e8:c7:65:8f:58:2d:
                    c7:43:83:d8:85:88:ad:c6:1e:2d:cf:04:f1:b5:ce:
                    2c:d3:1d:d7:91:81:a4:43:34:57:69:cf:d5:38:4e:
                    40:7a:9b:2b:a1:3d:f4:5e:64:3e:e0:1d:eb:1b:36:
                    cd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C6:48:D4:67:E5:B2:74:C4:9E:3A:D5:EE:EB:18:ED:C1:04:B8:EA
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3137302e31302e3135372e302f32342d3234203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:2a:6a:39:33:bd:68:31:64:e1:37:10:50:07:54:2a:0f:cf:
         d1:d5:09:a7:17:25:61:24:08:ed:8d:d4:d9:a4:46:8f:75:7a:
         44:a5:d8:9a:bf:a2:d5:60:b8:72:6b:47:8b:e9:ad:f6:4a:10:
         36:50:3d:06:e3:40:9b:6a:90:34:5b:d4:3d:a6:4e:89:a0:70:
         e5:4d:59:f6:f7:ca:14:1f:b6:86:93:f2:8b:97:66:8b:fd:d0:
         1f:1c:27:3e:03:fb:5b:fa:77:90:be:f7:b1:81:bb:a0:01:41:
         fa:35:1a:ba:05:06:28:a2:94:8a:84:07:f5:93:85:04:ba:8f:
         34:46:62:b7:aa:3f:27:a3:13:e9:8e:fd:6e:a1:01:74:db:60:
         31:26:01:47:15:6a:09:0f:17:09:82:49:d0:a1:94:b6:02:c5:
         d4:f5:8c:11:80:d6:e0:98:62:0c:e3:29:0c:de:bc:b5:91:37:
         01:ea:96:58:e5:3d:91:ef:4d:9f:d1:2c:3d:25:a3:17:4e:c3:
         a5:0e:0c:0b:fb:3f:f2:db:d6:cf:95:59:cf:06:9c:6d:e6:dc:
         10:ef:9d:e9:3a:1f:a2:2a:ff:1c:aa:43:28:86:18:d1:24:ae:
         51:70:89:8f:45:1e:48:06:ba:d3:ec:da:84:77:a6:49:f9:1e:
         ca:66:45:55
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIUdmEnb6xi6M0Hkk01jLDCWq0xbf8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjYwOTE3MTkzNjA0WhcNMjcwOTE2MTk0MTA0
WjAzMTEwLwYDVQQDEyhEM0M2NDhENDY3RTVCMjc0QzQ5RTNBRDVFRUVCMThFREMx
MDRCOEVBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs73MmVsfZXEK
QR5pz0YfGJKH8wZUzTeF4URGVZi7DSUPBlUEkn/iSW4jBij70HxM738jv6QfM1S3
Ll2RRxFpIHts36poSk5Wby4kynsmQUpTtooNW79ODBXIq6bxEW3o0vP9GF0m+CFE
SbjkVq8p4MnIbXGVeqSRCD3ztyIgMkD4oIzAzHjOeCINgA2bWuSXnudyiGhLJXLb
dg08cCQ8MUmjK2+qCOKjWAxIZy85frYRdPOeSE3okUqteCkIX/daTA94KMRIrweM
h1vox2WPWC3HQ4PYhYitxh4tzwTxtc4s0x3XkYGkQzRXac/VOE5AepsroT30XmQ+
4B3rGzbNVQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFNPGSNRn5bJ0xJ461e7rGO3B
BLjqMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGLBggrBgEFBQcBCwR/MH0w
ewYIKwYBBQUHMAuGb3JzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9zaXRv
cnkvQTkxOTJBOTgwMDAwLzQvMzEzNzMwMmUzMTMwMmUzMTM1MzcyZTMwMmYzMjM0
MmQzMjM0MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqgqdMA0GCSqGSIb3
DQEBCwUAA4IBAQBBKmo5M71oMWThNxBQB1QqD8/R1QmnFyVhJAjtjdTZpEaPdXpE
pdiav6LVYLhya0eL6a32ShA2UD0G40CbapA0W9Q9pk6JoHDlTVn298oUH7aGk/KL
l2aL/dAfHCc+A/tb+neQvvexgbugAUH6NRq6BQYoopSKhAf1k4UEuo80RmK3qj8n
oxPpjv1uoQF022AxJgFHFWoJDxcJgknQoZS2AsXU9YwRgNbgmGIM4ykM3ry1kTcB
6pZY5T2R702f0Sw9JaMXTsOlDgwL+z/y29bPlVnPBpxt5twQ753pOh+iKv8cqkMo
hhjRJK5RcImPRR5IBrrT7NqEd6ZJ+R7KZkVV
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:42:57 2026 by rpki-client