Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231312e302f32342d3234203d3e20333937373236.roa
File:                     3231362e3134352e3231312e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier:          7839eFW0vc8fNaUHFRJz0LdkM9nJUTOmTdbPm+Y1U68=
Subject key identifier:   9B:90:C9:26:1F:4A:31:40:04:45:FA:A3:26:A3:D5:2B:2C:A4:A2:E6
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       0A0F2716B72E8217C95F71156F39304F3F1E2C5F
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231312e302f32342d3234203d3e20333937373236.roa
Signing time:             Fri 05 Jun 2026 12:30:49 +0000
ROA not before:           Fri 05 Jun 2026 12:25:49 +0000
ROA not after:            Fri 04 Jun 2027 12:30:49 +0000
asID:                     397726
IP address blocks:        216.145.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 03:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0f:27:16:b7:2e:82:17:c9:5f:71:15:6f:39:30:4f:3f:1e:2c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun  5 12:25:49 2026 GMT
            Not After : Jun  4 12:30:49 2027 GMT
        Subject: CN=9B90C9261F4A31400445FAA326A3D52B2CA4A2E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1b:ff:7d:8a:fe:72:88:01:2f:15:3d:af:00:
                    b3:d0:69:7a:84:95:c7:b7:0c:17:d3:1c:33:22:82:
                    e9:90:5b:28:f6:db:ba:09:0b:ba:31:9a:f8:ac:58:
                    8a:76:b4:c2:df:de:2d:ad:bb:7b:cc:85:10:21:54:
                    4c:85:4c:1a:6f:14:ad:52:83:05:b3:2d:80:fe:55:
                    f9:b8:2d:fb:75:0a:96:80:13:0c:fc:1c:30:60:05:
                    5d:ee:05:f7:ae:12:b4:f0:f2:64:d6:09:47:09:81:
                    42:ee:ff:01:ab:d6:51:9f:b1:a5:4a:67:17:7e:f1:
                    d0:98:7c:72:23:ee:c8:61:4c:36:8a:33:a9:8e:4d:
                    eb:b4:9f:65:a8:95:f1:0e:1b:3f:cc:ae:bb:16:cd:
                    98:3e:ad:4e:65:65:3d:42:eb:2d:ae:36:54:94:71:
                    3b:09:3a:df:62:c0:a2:0e:ea:d8:dd:c0:11:38:35:
                    a6:8d:67:c8:56:dd:13:b9:da:c6:10:46:27:7d:32:
                    6a:89:96:8a:cf:5f:b0:55:34:ec:2f:96:58:0e:d9:
                    c0:83:b5:aa:bd:b1:ad:f7:4d:3f:1d:78:4f:13:88:
                    d3:84:09:ce:be:96:09:2e:46:f9:6f:ba:a1:9e:f8:
                    49:8b:b7:ca:e6:96:24:43:91:99:bd:47:fd:3b:21:
                    22:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:90:C9:26:1F:4A:31:40:04:45:FA:A3:26:A3:D5:2B:2C:A4:A2:E6
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231312e302f32342d3234203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:a8:f9:85:bd:bd:9e:4c:88:15:1d:d1:33:8f:d2:b0:6b:e8:
         97:79:4f:e6:f0:63:61:8c:95:34:2d:61:79:10:19:3f:d7:f0:
         c1:f1:54:e9:b3:7b:60:ca:cd:03:6a:27:4b:3a:9c:c3:43:8f:
         89:a4:ed:a3:d2:3a:1d:49:89:d1:93:2a:1a:98:1a:c9:0d:4b:
         62:f9:b7:a6:8d:9a:0f:3c:35:86:a6:1b:38:1e:12:7d:d0:1e:
         79:9b:e4:67:f1:ed:07:c3:71:41:5b:b5:d9:7c:3b:a3:d1:1b:
         00:8e:a6:f2:c4:9f:83:7b:c7:f6:82:c6:22:4f:0a:3c:1c:97:
         d0:be:2c:2b:83:44:36:5b:40:25:ff:1d:2f:54:22:68:70:37:
         b1:b2:82:1b:93:25:c0:fc:e4:cb:04:bd:88:ac:a9:8a:81:ee:
         3a:9d:10:b4:72:d3:96:d7:a8:88:65:42:1f:29:c5:c4:c4:59:
         ae:f5:ee:2a:c9:ac:da:07:ee:2c:40:99:89:95:a4:e3:b0:f8:
         79:06:1f:ad:2f:c0:cd:16:20:3b:6b:e6:7a:00:fe:de:fa:c1:
         c9:02:f1:f4:48:b4:65:16:31:c2:83:ba:0d:dd:8c:6c:53:5d:
         04:00:09:2b:08:52:01:9c:a8:ba:b0:60:6f:2b:e3:58:cd:6e:
         7f:ec:37:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:45:42 2026 by rpki-client