Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231342e302f32332d3233203d3e20333937373236.roa
File:                     3231362e3134352e3231342e302f32332d3233203d3e20333937373236.roa (raw, json)
Hash identifier:          N3q8FxQOj2PxQN3K4NMM9Izx8tZjsSyHGfxOlkFFV4A=
Subject key identifier:   E7:4D:6B:DC:47:DD:80:E2:72:4D:32:80:F2:1E:22:92:22:75:D0:16
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       2FA1DEFFF4711BAF1648941A4FFCEAFB13C9BB7D
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231342e302f32332d3233203d3e20333937373236.roa
Signing time:             Fri 05 Jun 2026 12:30:49 +0000
ROA not before:           Fri 05 Jun 2026 12:25:49 +0000
ROA not after:            Fri 04 Jun 2027 12:30:49 +0000
asID:                     397726
IP address blocks:        216.145.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 03:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:a1:de:ff:f4:71:1b:af:16:48:94:1a:4f:fc:ea:fb:13:c9:bb:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun  5 12:25:49 2026 GMT
            Not After : Jun  4 12:30:49 2027 GMT
        Subject: CN=E74D6BDC47DD80E2724D3280F21E22922275D016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:57:16:fd:e1:f5:2b:ad:b1:75:f2:06:0f:01:
                    68:13:89:3a:5d:a3:2b:9a:b3:de:37:b5:cd:5d:b5:
                    bc:1e:e3:79:cf:1b:a2:88:2b:8d:50:7e:b1:b7:57:
                    4c:d1:3b:99:04:b9:b3:7d:66:cc:e0:e6:10:20:dd:
                    41:dd:de:df:3c:bd:24:8e:dc:d0:64:b6:eb:e8:0f:
                    0d:dc:08:ed:dd:49:21:d0:aa:6a:17:19:96:43:90:
                    be:65:8e:27:05:b6:e4:65:90:ca:89:e5:26:af:a7:
                    12:94:88:e8:c5:9e:d7:0e:ba:fa:75:d6:ec:d9:ae:
                    07:5f:04:60:a9:3c:f9:b9:61:be:62:e5:b3:60:94:
                    c8:16:f9:ee:b1:6b:2c:ec:8f:75:41:c1:20:43:fa:
                    48:69:08:2e:0f:ad:f6:68:27:f0:1b:76:d6:5b:01:
                    8d:f6:79:1a:c4:10:38:47:d5:2e:12:2f:75:14:01:
                    5e:53:9c:7e:20:2c:c9:90:a3:e6:24:a0:e9:dc:7e:
                    eb:85:d4:3e:d8:38:e0:0d:22:8d:ec:3a:35:d4:77:
                    05:28:d1:fd:c3:d1:ff:49:14:9c:06:67:84:c0:27:
                    45:b4:c1:73:a5:f8:c6:18:44:c1:73:3a:a4:f6:24:
                    9d:87:01:a2:fb:d5:4a:da:76:e9:48:1e:07:39:60:
                    aa:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4D:6B:DC:47:DD:80:E2:72:4D:32:80:F2:1E:22:92:22:75:D0:16
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231342e302f32332d3233203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:77:e9:c4:7b:96:da:f9:be:5f:9f:19:fc:74:55:be:5a:61:
         44:c0:1f:2d:cf:fb:9c:9c:99:01:98:ec:24:83:1d:8f:68:3e:
         b4:d7:80:4b:f6:47:66:03:01:4b:72:43:cf:2d:77:2c:43:85:
         ac:4c:26:62:48:43:ff:8f:d6:b3:8e:af:71:44:d0:57:57:fa:
         5d:e3:03:ae:5c:35:6b:d5:75:25:30:f0:89:80:d4:7e:6a:6b:
         52:69:5d:f8:ad:2a:de:50:32:e1:0a:65:dc:26:fd:9c:92:ae:
         98:9a:fb:37:e7:fe:43:5e:3c:fe:97:f1:a4:d0:4d:72:63:15:
         d7:fc:22:54:5a:2c:48:fa:c4:f2:bf:55:ed:1b:33:dc:24:90:
         56:bf:b5:a8:1f:65:37:b0:2f:14:25:0e:6f:6e:b1:50:b7:2d:
         1a:8b:66:60:78:7a:26:ed:2d:c5:8d:21:b3:57:4e:99:a3:f7:
         e5:5d:e4:6a:4f:71:bf:11:73:a0:a8:41:f7:33:81:6c:df:73:
         01:78:73:98:0e:0f:fb:8a:03:e3:08:dd:bc:8d:d5:9b:e6:25:
         24:ac:bd:2c:23:dc:50:ae:ad:1e:ad:9f:54:67:6b:a2:c9:1c:
         a7:9d:68:cb:3b:7d:98:9e:29:4a:8c:26:82:79:0d:77:d3:18:
         1b:c7:fe:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:22:04 2026 by rpki-client