Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231322e302f32342d3234203d3e20333937373236.roa
File:                     3231362e3134352e3231322e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier:          HlK1hcPGX4qRPDaNFHanXOhfuNXj4yI/szDDZJp24xQ=
Subject key identifier:   5B:BE:9B:55:8E:69:BA:0E:39:32:F5:35:27:D3:E3:C6:81:A0:AC:0F
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       569E6DA28075488E8AA5FECE62B47A43942A032D
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231322e302f32342d3234203d3e20333937373236.roa
Signing time:             Fri 05 Jun 2026 12:30:52 +0000
ROA not before:           Fri 05 Jun 2026 12:25:52 +0000
ROA not after:            Fri 04 Jun 2027 12:30:52 +0000
asID:                     397726
IP address blocks:        216.145.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 03:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:9e:6d:a2:80:75:48:8e:8a:a5:fe:ce:62:b4:7a:43:94:2a:03:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun  5 12:25:52 2026 GMT
            Not After : Jun  4 12:30:52 2027 GMT
        Subject: CN=5BBE9B558E69BA0E3932F53527D3E3C681A0AC0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:88:f8:1e:a5:6e:5f:df:e8:f6:af:d1:3b:b5:
                    6b:88:da:56:4a:5f:2b:df:e1:b3:cf:a3:3d:8e:40:
                    0a:b2:f2:c0:a4:0e:7d:20:e3:69:d9:98:5b:48:61:
                    f5:3d:2f:7c:df:9d:79:30:a4:99:19:83:a2:de:34:
                    f3:0a:50:4d:5f:32:bd:82:e3:50:40:16:d7:fc:10:
                    58:0d:dd:25:da:f0:22:94:db:18:80:16:fa:b8:c7:
                    d3:1c:b8:73:66:a6:d8:dd:26:14:b4:2f:52:c0:5b:
                    6f:6e:08:6e:22:d0:e6:61:74:fb:f4:14:74:b5:05:
                    cd:69:9d:42:b0:1f:8f:11:71:03:65:1e:b7:65:40:
                    b0:14:8e:af:c9:f9:96:ad:e3:b0:f8:8c:55:76:5b:
                    f1:43:84:1a:a5:90:b1:e1:01:83:8e:63:6d:4d:13:
                    64:5e:2b:42:31:cb:0d:ba:bd:e6:39:b6:17:23:f3:
                    95:ea:b3:dd:aa:ca:0d:d4:e3:44:c9:27:f7:fc:3c:
                    91:b5:1f:7c:f0:72:37:89:90:42:66:03:37:6d:a2:
                    f2:7d:07:89:a9:b5:c0:45:63:f1:a6:6d:e3:75:4f:
                    be:d3:f3:c4:b4:df:f7:69:45:e0:f0:8c:32:5d:db:
                    41:1a:b0:3f:d5:05:28:1f:d8:76:45:4b:49:48:40:
                    14:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BE:9B:55:8E:69:BA:0E:39:32:F5:35:27:D3:E3:C6:81:A0:AC:0F
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231322e302f32342d3234203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:1b:94:d6:ec:07:6a:50:4a:56:1f:0c:ed:a9:4e:32:50:cd:
         1c:18:78:f8:81:8e:cf:4e:83:f1:41:b9:81:f2:31:3d:2d:66:
         cc:9a:94:76:55:1b:53:84:c9:05:88:34:cb:99:91:53:75:48:
         be:45:6b:0a:83:ff:ec:52:ef:1d:be:0b:3e:71:7e:6a:0c:92:
         70:45:77:03:bd:ec:ee:f9:ac:9d:fd:b1:d0:00:ce:d4:49:22:
         f6:83:09:5a:c8:03:3f:80:e5:25:fa:19:37:40:27:3c:f1:f4:
         5b:6e:42:e5:59:96:65:72:a5:91:83:2c:32:2f:8c:17:54:b1:
         c1:7f:52:b7:d5:36:7f:1f:7a:28:bf:cf:44:e8:9a:03:16:e8:
         cb:07:03:09:b8:5d:75:02:f6:13:f9:c7:49:ae:d8:c6:90:47:
         4d:f1:4a:af:4d:8b:f9:1b:83:10:47:d5:a5:08:d2:45:b1:c0:
         ae:33:6f:f0:9a:b6:0d:e4:1a:d2:7d:3d:5e:8d:10:3e:93:b8:
         91:ae:59:93:60:8c:54:e7:d5:cf:5f:a3:0c:68:07:a3:87:00:
         02:10:63:4c:54:6d:2c:4b:c8:06:91:8e:55:93:65:db:6a:6a:
         b8:78:cd:ed:d2:14:8e:50:3f:54:1e:6b:91:42:24:f8:f6:cc:
         18:ea:a6:82
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIUVp5tooB1SI6Kpf7OYrR6Q5QqAy0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjYwNjA1MTIyNTUyWhcNMjcwNjA0MTIzMDUy
WjAzMTEwLwYDVQQDEyg1QkJFOUI1NThFNjlCQTBFMzkzMkY1MzUyN0QzRTNDNjgx
QTBBQzBGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoj4HqVuX9/o
9q/RO7VriNpWSl8r3+Gzz6M9jkAKsvLApA59IONp2ZhbSGH1PS983515MKSZGYOi
3jTzClBNXzK9guNQQBbX/BBYDd0l2vAilNsYgBb6uMfTHLhzZqbY3SYUtC9SwFtv
bghuItDmYXT79BR0tQXNaZ1CsB+PEXEDZR63ZUCwFI6vyfmWreOw+IxVdlvxQ4Qa
pZCx4QGDjmNtTRNkXitCMcsNur3mObYXI/OV6rPdqsoN1ONEySf3/DyRtR988HI3
iZBCZgM3baLyfQeJqbXARWPxpm3jdU++0/PEtN/3aUXg8IwyXdtBGrA/1QUoH9h2
RUtJSEAUWQIDAQABo4ICjTCCAokwHQYDVR0OBBYEFFu+m1WOaboOOTL1NSfT48aB
oKwPMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGRBggrBgEFBQcBCwSBhDCB
gTB/BggrBgEFBQcwC4ZzcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9BOTE5MkE5ODAwMDAvNC8zMjMxMzYyZTMxMzQzNTJlMzIzMTMyMmUzMDJm
MzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM3MzczMjM2LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHUMA0G
CSqGSIb3DQEBCwUAA4IBAQBJG5TW7AdqUEpWHwztqU4yUM0cGHj4gY7PToPxQbmB
8jE9LWbMmpR2VRtThMkFiDTLmZFTdUi+RWsKg//sUu8dvgs+cX5qDJJwRXcDvezu
+ayd/bHQAM7USSL2gwlayAM/gOUl+hk3QCc88fRbbkLlWZZlcqWRgywyL4wXVLHB
f1K31TZ/H3oov89E6JoDFujLBwMJuF11AvYT+cdJrtjGkEdN8UqvTYv5G4MQR9Wl
CNJFscCuM2/wmrYN5BrSfT1ejRA+k7iRrlmTYIxU59XPX6MMaAejhwACEGNMVG0s
S8gGkY5Vk2Xbamq4eM3t0hSOUD9UHmuRQiT49swY6qaC
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:45:42 2026 by rpki-client