Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e20313336373932.roa
File:                     3231362e3134352e3231382e302f32342d3234203d3e20313336373932.roa (raw, json)
Hash identifier:          CUZLFtSNQEviQkqK/km8CBK2+Eus9iw3qHB1i+7p0kM=
Subject key identifier:   50:CE:B4:C0:12:9D:6F:D2:61:E9:6E:96:8D:20:0A:DE:5F:A6:16:1B
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       166AF11FDF7ECECAB1D669C6CEE4C98418193337
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e20313336373932.roa
Signing time:             Fri 05 Jun 2026 12:30:53 +0000
ROA not before:           Fri 05 Jun 2026 12:25:53 +0000
ROA not after:            Fri 04 Jun 2027 12:30:53 +0000
asID:                     136792
IP address blocks:        216.145.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 09:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:6a:f1:1f:df:7e:ce:ca:b1:d6:69:c6:ce:e4:c9:84:18:19:33:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun  5 12:25:53 2026 GMT
            Not After : Jun  4 12:30:53 2027 GMT
        Subject: CN=50CEB4C0129D6FD261E96E968D200ADE5FA6161B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5f:6d:6c:93:e3:8e:b8:b9:14:33:90:1a:7d:
                    b3:ea:e7:46:fc:0e:39:18:3a:fb:74:95:b9:14:9c:
                    26:f3:fa:1c:09:10:bc:bd:24:96:9e:1d:a6:e1:8c:
                    16:2d:c1:3a:ef:e2:ee:1e:f0:32:c8:64:f1:60:5b:
                    e3:74:c9:e6:68:ac:34:03:b3:49:f4:3f:89:0e:d7:
                    9c:b4:dd:1f:d1:bd:20:05:00:31:ac:12:50:2b:b4:
                    4b:bb:8c:ae:3e:66:ed:a3:24:a1:df:71:fd:58:32:
                    7c:db:38:12:14:7c:cb:16:e9:74:94:05:c2:70:e4:
                    9e:56:c7:ff:51:56:6d:26:95:a1:c1:30:a1:ae:7f:
                    6e:0f:33:7a:dd:f8:0e:04:e8:93:1c:ab:76:93:6d:
                    95:a0:0c:a4:56:a4:65:33:07:f2:3c:a2:82:07:bb:
                    e6:70:66:8f:a7:1d:49:e9:fd:07:18:97:70:52:31:
                    fa:10:20:c2:8d:6a:ba:83:c8:da:c1:ac:b6:88:b5:
                    f5:c3:5e:ba:06:17:82:1d:cb:de:b9:0f:37:2f:67:
                    ff:c9:19:e5:12:8e:2a:4f:32:09:f6:0e:39:92:c4:
                    24:ef:4b:ff:b5:9c:93:a2:f4:03:b8:f1:42:d2:10:
                    cd:30:82:67:e6:92:61:2d:3c:62:55:19:21:be:e2:
                    fe:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CE:B4:C0:12:9D:6F:D2:61:E9:6E:96:8D:20:0A:DE:5F:A6:16:1B
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e20313336373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:78:b7:90:ce:84:21:9d:72:a2:d9:7a:29:a0:64:fd:d2:e6:
         df:71:bb:7f:e2:7c:1c:be:9c:32:77:30:c7:3d:f5:29:47:d6:
         14:fc:cb:4b:63:e3:9a:aa:ec:92:5d:4f:a8:97:29:6d:2a:66:
         a4:3f:0e:13:15:16:11:98:61:47:3e:32:59:39:6c:8f:e6:29:
         fb:43:3b:a2:3e:13:c8:25:ac:33:13:59:0f:29:f9:a7:52:09:
         06:e5:e4:ac:b7:75:1e:14:e5:aa:ea:b5:70:69:7d:06:2e:0e:
         03:ec:70:92:ac:bb:bf:34:a2:95:9b:ea:53:e2:0a:88:d2:12:
         04:28:26:86:6d:fb:43:1b:4e:25:95:ac:5e:cc:bf:62:ab:fc:
         08:5d:0d:75:7a:e3:20:fd:98:43:ce:5b:2d:bd:e1:36:a7:62:
         64:14:a5:2a:95:bc:f5:6b:e0:63:2a:8b:d5:62:6b:4b:5a:8c:
         22:68:02:47:22:8e:d6:ff:ac:48:4a:7e:c2:f7:5e:56:8c:39:
         13:cd:68:d7:c5:ab:2b:22:69:1c:9e:f1:f8:a7:92:ff:52:4a:
         74:37:59:fb:b8:73:64:08:c3:29:2e:da:70:61:b8:12:94:b7:
         14:c7:b0:d6:8f:19:22:2f:b6:27:0e:18:07:2d:18:1b:ba:ad:
         d7:d7:ea:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:59:38 2026 by rpki-client