Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230382e302f32342d3234203d3e20333937373236.roa
File:                     3231362e3134352e3230382e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier:          6Pc8YSiEPxhAJMX5ic4v1+hNxvcfdNINR9s0Bj6TdBY=
Subject key identifier:   C1:CF:16:40:D4:03:47:8F:46:12:AB:C1:05:7C:9E:AA:DF:29:0B:C0
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       7D7D7AC092F1CEE09C509A10292EB97040BD8764
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230382e302f32342d3234203d3e20333937373236.roa
Signing time:             Fri 05 Jun 2026 12:30:46 +0000
ROA not before:           Fri 05 Jun 2026 12:25:46 +0000
ROA not after:            Fri 04 Jun 2027 12:30:46 +0000
asID:                     397726
IP address blocks:        216.145.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 03:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:7d:7a:c0:92:f1:ce:e0:9c:50:9a:10:29:2e:b9:70:40:bd:87:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun  5 12:25:46 2026 GMT
            Not After : Jun  4 12:30:46 2027 GMT
        Subject: CN=C1CF1640D403478F4612ABC1057C9EAADF290BC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d3:87:b6:aa:76:47:a9:2b:a4:b6:d1:d1:e2:
                    ef:67:c6:bb:3e:56:d4:a8:5c:3d:90:2c:dc:35:6f:
                    0b:2b:14:e5:38:d1:01:1b:f5:8f:97:ad:06:47:94:
                    ca:41:03:5c:ad:52:9a:9f:86:58:96:6d:18:09:00:
                    fb:fc:0a:2b:d4:9d:b6:cb:73:3a:19:b2:55:0e:95:
                    2b:a7:8d:ce:24:82:0f:b5:24:fb:a3:6e:f6:ed:16:
                    ab:5a:e7:11:ed:bf:19:34:0c:c7:61:1a:8f:5b:91:
                    c5:d9:86:72:f8:1b:04:44:f8:c6:47:5a:c6:7d:d4:
                    46:88:d6:11:74:79:28:f1:f1:d1:8b:b8:12:93:f9:
                    08:70:12:48:0f:08:1b:c3:2b:71:8d:18:9e:2c:4d:
                    93:7d:13:80:06:ab:85:5f:95:ca:c1:d0:51:8c:be:
                    c9:1f:aa:71:95:ac:05:a3:69:39:4d:be:17:03:a4:
                    ee:b7:c7:fc:ea:bc:fc:c7:51:51:15:d2:cc:83:58:
                    35:aa:09:b8:84:c8:b2:82:18:6c:6b:6f:50:99:64:
                    6a:13:1c:84:c7:83:cc:b1:b5:d4:ac:90:3b:34:9a:
                    86:58:c0:a4:13:fa:3e:75:18:4f:2a:5d:9a:46:de:
                    5e:40:ea:b9:34:0e:5f:23:e6:7d:b2:19:5a:1f:83:
                    34:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CF:16:40:D4:03:47:8F:46:12:AB:C1:05:7C:9E:AA:DF:29:0B:C0
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3230382e302f32342d3234203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:d9:0d:1c:83:3e:5e:84:c9:48:24:7a:e8:05:8c:24:fd:21:
         f9:f0:ae:4f:5f:7e:fb:5c:be:81:b2:d2:25:ea:33:26:5b:b6:
         87:1a:db:32:87:68:be:04:fd:57:03:59:b4:1e:25:2c:7b:10:
         10:8d:7c:39:9d:75:6a:60:0f:a7:23:87:1e:86:45:8b:26:18:
         fd:00:a5:94:e2:3a:46:4d:fd:bf:6f:0b:83:e2:7d:16:22:a0:
         e7:3e:bb:c4:ff:c6:58:dc:ad:e2:1f:7d:3e:3d:02:5a:74:d2:
         e9:3a:f6:e6:5a:d0:f6:08:da:bb:a7:5d:8f:19:bc:60:de:4f:
         05:12:95:dd:56:ae:50:70:1f:07:34:10:c4:d3:60:6c:e5:8f:
         db:27:55:ed:55:9b:7a:9b:dc:b0:8e:33:bd:58:8e:62:7a:24:
         4e:8c:15:4a:14:5b:ef:64:e7:91:7b:d3:92:50:9e:53:c0:0c:
         fa:3b:43:7a:f4:7e:a7:4c:8d:dd:10:ea:63:bc:4a:33:d3:9d:
         6a:39:c1:12:98:07:48:bf:8d:e1:0e:f7:13:8f:7a:35:1c:b5:
         cb:b4:9d:55:77:f4:27:c2:97:df:65:fa:58:67:4a:b1:69:67:
         7b:9a:6e:71:be:f8:a3:9a:6c:5e:17:25:c7:4c:6e:7d:ad:8b:
         bc:6d:50:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:38:03 2026 by rpki-client