Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231302e302f32332d3233203d3e20333937373236.roa
File:                     3231362e3134352e3231302e302f32332d3233203d3e20333937373236.roa (raw, json)
Hash identifier:          FDsdqdxIUV1kCPkjvVI/eEkyo9cZUEp7OfdOJVUSzTI=
Subject key identifier:   D0:EA:1F:AB:E5:73:2D:7F:BE:AD:39:7F:6C:10:82:94:9B:B7:BA:59
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       3F6701F74C423E7242D087E5CD3658030F838240
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231302e302f32332d3233203d3e20333937373236.roa
Signing time:             Fri 05 Jun 2026 12:30:46 +0000
ROA not before:           Fri 05 Jun 2026 12:25:46 +0000
ROA not after:            Fri 04 Jun 2027 12:30:46 +0000
asID:                     397726
IP address blocks:        216.145.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 03:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:67:01:f7:4c:42:3e:72:42:d0:87:e5:cd:36:58:03:0f:83:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun  5 12:25:46 2026 GMT
            Not After : Jun  4 12:30:46 2027 GMT
        Subject: CN=D0EA1FABE5732D7FBEAD397F6C1082949BB7BA59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:37:50:34:d1:a8:3f:fd:ae:89:18:01:a9:6d:
                    8f:dd:be:b9:3c:8a:02:d8:dc:d4:06:ac:25:f0:7a:
                    ba:dd:61:eb:0f:ed:f9:16:b9:be:6c:58:81:f6:30:
                    f8:9d:c1:63:da:cf:9b:f9:f1:5d:d1:62:e4:52:59:
                    6c:ac:3f:84:d0:07:17:21:2a:50:bd:50:1f:06:2e:
                    d7:27:46:ef:d6:50:21:53:16:a7:dc:d4:2a:0a:1f:
                    0e:eb:68:30:4f:63:e3:8d:42:4f:53:26:4c:bd:af:
                    3e:76:b9:99:87:2a:21:de:5d:5d:eb:4b:7f:00:99:
                    59:bc:e1:00:4e:55:c7:23:1b:e3:2c:85:4f:1c:90:
                    93:e6:c5:c8:5f:50:7b:3f:7b:ee:bb:53:b6:43:e7:
                    ab:c9:3a:10:dc:5d:25:32:13:a2:11:58:5a:93:61:
                    c7:ff:a5:9b:a4:f6:65:2f:55:9a:b4:09:d5:a8:4b:
                    06:0d:3e:37:33:b0:ff:ce:aa:df:29:b3:f3:c2:55:
                    e2:e2:7b:6a:cd:7c:3f:8e:55:c7:28:9d:c6:d3:77:
                    28:1b:e8:5b:92:23:8a:6f:40:e7:20:8d:e8:01:b6:
                    a6:91:21:c9:38:9c:1a:10:71:1e:3a:e6:bc:71:36:
                    37:69:02:81:c5:e2:a3:66:62:4f:b4:2b:69:cf:9c:
                    24:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EA:1F:AB:E5:73:2D:7F:BE:AD:39:7F:6C:10:82:94:9B:B7:BA:59
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231302e302f32332d3233203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:bc:6a:b2:8b:9d:79:b5:07:dd:49:2f:db:5e:f6:40:08:1a:
         9f:fa:04:d4:64:28:42:c8:02:69:bc:b8:10:04:c8:8c:c8:e2:
         a7:f7:50:2b:69:02:ee:48:da:a9:3c:c3:72:fd:81:97:02:36:
         16:fd:7e:cd:1b:6f:b5:0c:57:d9:93:26:bd:73:f0:f2:aa:e6:
         d2:e3:89:d0:ed:dc:be:cb:26:f3:8d:11:24:9e:30:1f:68:36:
         e8:50:cc:ca:1b:fb:6b:36:10:af:9d:38:c5:7d:41:f8:51:fa:
         34:e6:2d:8c:d9:af:b2:05:f7:cd:19:1d:c3:29:4b:61:46:67:
         91:be:1e:79:43:36:4e:a2:fa:93:1b:19:24:6c:57:20:0c:ec:
         32:84:f6:cf:0f:92:18:96:76:5c:08:a4:19:6a:11:cf:fd:bc:
         f3:33:ca:05:c3:2d:d6:85:66:e9:f3:0a:fa:99:c6:3d:61:33:
         b1:e0:6f:ed:c4:db:e8:57:9d:42:c1:75:d6:85:6a:ef:b0:17:
         26:a8:47:f3:26:32:cb:2b:33:9f:39:08:60:52:a6:19:f6:c3:
         2b:b8:16:f9:7d:a3:ad:b1:02:9e:85:c4:31:b4:17:1b:a9:15:
         9a:37:6a:e3:02:fc:9c:a2:75:c8:b1:03:04:c7:12:1e:bd:26:
         73:d2:ff:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:53:57 2026 by rpki-client