Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231322e302f32332d3233203d3e20333937373236.roa
File:                     3231362e3134352e3231322e302f32332d3233203d3e20333937373236.roa (raw, json)
Hash identifier:          bw2T5CaWLjmIY+JZLSItaie2QqT7MFfAa7LhdhFvc3c=
Subject key identifier:   D0:CB:CC:A7:D0:3E:40:66:D1:B9:0D:D4:CD:E3:6E:9E:93:F2:D9:A1
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       0F569EB080A2CBCC52AAD0C8457B8EB772346D58
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231322e302f32332d3233203d3e20333937373236.roa
Signing time:             Fri 05 Jun 2026 12:30:49 +0000
ROA not before:           Fri 05 Jun 2026 12:25:49 +0000
ROA not after:            Fri 04 Jun 2027 12:30:49 +0000
asID:                     397726
IP address blocks:        216.145.212.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 03:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:56:9e:b0:80:a2:cb:cc:52:aa:d0:c8:45:7b:8e:b7:72:34:6d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun  5 12:25:49 2026 GMT
            Not After : Jun  4 12:30:49 2027 GMT
        Subject: CN=D0CBCCA7D03E4066D1B90DD4CDE36E9E93F2D9A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:39:9f:b1:4e:ea:8f:d1:03:cf:df:fb:20:cc:
                    a8:b6:1d:be:d2:83:7c:81:ce:f9:d3:db:85:8f:2c:
                    b8:2a:0a:4e:37:85:c5:16:17:d8:51:3e:46:a4:7f:
                    c8:a4:2e:f5:55:4d:ba:2e:ea:78:3f:0d:ab:50:90:
                    ac:cd:24:5b:39:57:4f:1a:bc:38:d4:16:74:2b:66:
                    b1:26:61:44:c2:0a:7b:c9:00:b0:04:b8:15:9c:53:
                    30:59:c2:b3:c2:07:3e:24:4d:74:12:00:7c:91:b1:
                    16:af:2a:26:85:8c:02:aa:44:75:4a:4e:e9:3a:61:
                    c8:de:80:3e:08:6d:00:22:f4:b9:47:82:31:76:eb:
                    7f:82:d7:9f:f0:28:cc:3d:4b:ae:f3:0c:2b:c0:b8:
                    c2:df:83:ab:04:82:d5:2b:1f:c4:6e:6b:29:06:e9:
                    48:8c:09:b5:85:71:73:47:c5:00:4f:7f:2a:18:5f:
                    5c:af:4b:29:dc:dd:80:1d:36:98:33:44:b4:8c:0d:
                    c4:b6:b7:86:10:a2:02:fe:72:ad:c1:d4:86:e1:0c:
                    b7:41:a2:af:bf:bb:81:91:a1:8e:9a:f8:67:45:61:
                    7f:6a:00:78:d4:0f:f8:f8:f8:e5:da:ce:54:97:70:
                    4c:c5:e3:c2:0f:b1:65:46:03:13:a0:36:da:d9:4b:
                    20:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CB:CC:A7:D0:3E:40:66:D1:B9:0D:D4:CD:E3:6E:9E:93:F2:D9:A1
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231322e302f32332d3233203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:12:13:89:46:18:58:53:39:40:67:a9:51:11:70:01:e2:d3:
         f5:b2:88:84:1a:b8:a7:ca:c1:87:a8:82:aa:d7:81:58:92:9f:
         4f:7c:c3:f3:55:0f:e8:d2:b3:d3:e6:4f:aa:62:61:c9:af:a9:
         cf:36:d8:6c:ba:2d:db:b2:c9:32:01:35:b6:47:3a:3c:61:05:
         12:a6:99:72:69:b6:81:49:70:b6:b1:c3:ed:93:1f:da:1d:91:
         cc:5f:17:ec:3a:23:48:d9:28:c7:62:13:ab:ee:f9:17:0a:24:
         17:57:8c:47:d0:16:38:c1:db:ee:f2:9a:28:3f:7b:91:0b:a1:
         11:13:7e:48:96:3e:51:af:2f:89:b2:cd:61:52:43:ff:ec:76:
         72:d7:25:68:ae:ca:98:3b:56:5b:bd:90:85:8e:fc:52:c6:14:
         35:0c:95:1e:71:6c:ce:19:c1:41:88:77:4e:ab:d8:96:61:0a:
         8f:f5:97:bf:8b:9d:48:4b:5f:92:a6:1c:44:de:e8:9b:04:93:
         56:bd:7b:d8:0b:8a:01:ea:89:87:c6:89:a7:31:80:90:21:b0:
         d2:52:90:01:ba:49:d5:f8:a8:a6:95:2f:11:5b:90:bc:72:d2:
         1e:44:88:3c:0b:c5:37:fa:0d:d6:0d:34:20:ca:aa:cd:4f:f4:
         00:f2:24:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:29:00 2026 by rpki-client