Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231332e302f32342d3234203d3e20333937373236.roa
File:                     3231362e3134352e3231332e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier:          7eBui4qEINVZoGkllTo/lejuqdYIcK4rzGlV/qJfWRM=
Subject key identifier:   E0:98:18:8B:6E:83:96:D7:1C:B8:BE:4E:72:37:D2:56:8A:B7:23:9F
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       5B8F125FDB0FA087B82D622F3D00796706DE401B
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231332e302f32342d3234203d3e20333937373236.roa
Signing time:             Fri 05 Jun 2026 12:30:47 +0000
ROA not before:           Fri 05 Jun 2026 12:25:47 +0000
ROA not after:            Fri 04 Jun 2027 12:30:47 +0000
asID:                     397726
IP address blocks:        216.145.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 03:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:8f:12:5f:db:0f:a0:87:b8:2d:62:2f:3d:00:79:67:06:de:40:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun  5 12:25:47 2026 GMT
            Not After : Jun  4 12:30:47 2027 GMT
        Subject: CN=E098188B6E8396D71CB8BE4E7237D2568AB7239F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:db:75:67:66:d1:61:23:2f:ff:73:ca:0a:61:
                    25:ec:31:e8:84:43:5f:cd:9d:57:cb:2c:d5:80:63:
                    86:76:20:d6:db:15:9e:d4:49:36:9a:09:c3:c0:2f:
                    f7:d9:b7:b3:02:bd:8c:59:90:d9:bd:24:39:99:a5:
                    39:4c:f9:45:70:89:7c:2c:4a:e4:8a:ca:b9:a1:23:
                    37:ef:c6:80:43:b4:32:91:ae:5d:b2:9b:ce:ed:58:
                    24:19:da:28:88:b0:77:da:ec:cd:73:05:f5:ec:34:
                    b2:6d:e8:99:8e:15:a0:4c:df:36:5b:2f:f5:4f:8e:
                    5b:32:a8:c2:87:e9:73:5b:2d:30:43:7b:2a:df:51:
                    0b:ce:4f:2a:d3:3f:25:26:22:9d:65:c6:87:04:14:
                    cb:58:18:2b:67:4d:de:90:7f:36:fd:75:13:43:6a:
                    01:da:67:63:34:68:98:06:2f:b8:0f:5f:ec:1a:5f:
                    3b:85:21:60:32:87:81:64:1b:65:2b:11:8f:cb:fa:
                    72:e3:be:a2:50:64:40:2d:0e:92:3f:9f:40:63:a3:
                    97:1c:74:96:39:41:48:82:ee:57:45:8b:2f:77:f5:
                    e6:95:5e:52:89:d5:f2:59:1b:e9:d6:69:0b:2d:37:
                    c1:fb:50:e0:01:99:c0:b5:a6:82:18:fb:b1:03:02:
                    c8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:98:18:8B:6E:83:96:D7:1C:B8:BE:4E:72:37:D2:56:8A:B7:23:9F
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231332e302f32342d3234203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:65:35:dd:e3:53:ee:9e:8c:ae:18:7b:5d:c7:c3:67:c1:a1:
         d9:2a:c2:c4:77:f4:c9:45:e4:10:9c:a6:05:a3:a5:15:91:f0:
         7a:fe:7c:5f:15:98:0c:42:ab:11:57:f1:bb:fb:77:03:7f:ea:
         01:f0:af:2e:2d:d9:f8:7c:cf:92:cd:d4:99:b1:cc:5c:a1:d1:
         97:d8:2d:65:2b:8d:a5:43:35:63:93:4c:6d:a1:54:a8:5a:3e:
         f6:05:31:48:3b:1e:2a:9f:81:2a:c6:9e:c3:88:ba:93:4a:6e:
         a7:6d:a9:6a:00:d2:bb:02:5e:5e:aa:4c:21:f9:16:35:c9:9a:
         61:02:41:2c:17:15:f5:42:8b:f7:95:64:36:91:ea:14:25:57:
         7f:6e:49:97:54:d5:4d:4f:1e:51:cc:0f:40:4e:d4:d0:6e:af:
         75:5d:37:3f:20:0c:86:09:3d:bc:e6:2d:86:a8:2c:0b:96:cc:
         5e:84:16:68:6c:41:0c:eb:69:77:4e:95:72:3a:4c:e8:3c:af:
         28:d6:d2:da:56:23:cf:d4:f6:46:c2:5a:e5:2d:36:09:53:e8:
         c5:86:4d:44:00:70:38:93:0d:d2:53:af:d6:c1:ea:ad:98:be:
         58:3d:dc:c2:d2:0f:ab:f4:c6:de:eb:be:d9:10:c6:47:a1:26:
         18:c2:4b:34
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIUW48SX9sPoIe4LWIvPQB5ZwbeQBswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjYwNjA1MTIyNTQ3WhcNMjcwNjA0MTIzMDQ3
WjAzMTEwLwYDVQQDEyhFMDk4MTg4QjZFODM5NkQ3MUNCOEJFNEU3MjM3RDI1NjhB
QjcyMzlGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdt1Z2bRYSMv
/3PKCmEl7DHohENfzZ1XyyzVgGOGdiDW2xWe1Ek2mgnDwC/32bezAr2MWZDZvSQ5
maU5TPlFcIl8LErkisq5oSM378aAQ7Qyka5dspvO7VgkGdooiLB32uzNcwX17DSy
beiZjhWgTN82Wy/1T45bMqjCh+lzWy0wQ3sq31ELzk8q0z8lJiKdZcaHBBTLWBgr
Z03ekH82/XUTQ2oB2mdjNGiYBi+4D1/sGl87hSFgMoeBZBtlKxGPy/py476iUGRA
LQ6SP59AY6OXHHSWOUFIgu5XRYsvd/XmlV5SidXyWRvp1mkLLTfB+1DgAZnAtaaC
GPuxAwLIrwIDAQABo4ICjTCCAokwHQYDVR0OBBYEFOCYGItug5bXHLi+TnI30laK
tyOfMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGRBggrBgEFBQcBCwSBhDCB
gTB/BggrBgEFBQcwC4ZzcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9BOTE5MkE5ODAwMDAvNC8zMjMxMzYyZTMxMzQzNTJlMzIzMTMzMmUzMDJm
MzIzNDJkMzIzNDIwM2QzZTIwMzMzOTM3MzczMjM2LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHVMA0G
CSqGSIb3DQEBCwUAA4IBAQAzZTXd41PunoyuGHtdx8NnwaHZKsLEd/TJReQQnKYF
o6UVkfB6/nxfFZgMQqsRV/G7+3cDf+oB8K8uLdn4fM+SzdSZscxcodGX2C1lK42l
QzVjk0xtoVSoWj72BTFIOx4qn4Eqxp7DiLqTSm6nbalqANK7Al5eqkwh+RY1yZph
AkEsFxX1Qov3lWQ2keoUJVd/bkmXVNVNTx5RzA9ATtTQbq91XTc/IAyGCT285i2G
qCwLlsxehBZobEEM62l3TpVyOkzoPK8o1tLaViPP1PZGwlrlLTYJU+jFhk1EAHA4
kw3SU6/WweqtmL5YPdzC0g+r9Mbe677ZEMZHoSYYwks0
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:45:42 2026 by rpki-client