Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203330303331.roa
File:                     3231362e3134352e3231382e302f32342d3234203d3e203330303331.roa (raw, json)
Hash identifier:          cty4HHDRmTl5n3foW6+CaOvsWXrrYFLBglYEkL0Dimo=
Subject key identifier:   FE:C1:FF:4F:F5:A1:9A:34:C4:3C:99:16:E6:40:0A:CD:1A:BE:D5:36
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       660D3BF550985C8F8F44479916246BC0FF91AB82
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203330303331.roa
Signing time:             Fri 05 Jun 2026 12:30:47 +0000
ROA not before:           Fri 05 Jun 2026 12:25:47 +0000
ROA not after:            Fri 04 Jun 2027 12:30:47 +0000
asID:                     30031
IP address blocks:        216.145.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 09:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:0d:3b:f5:50:98:5c:8f:8f:44:47:99:16:24:6b:c0:ff:91:ab:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun  5 12:25:47 2026 GMT
            Not After : Jun  4 12:30:47 2027 GMT
        Subject: CN=FEC1FF4FF5A19A34C43C9916E6400ACD1ABED536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:06:27:8e:a7:d1:1b:ce:b4:c6:2f:38:a6:05:
                    c7:3a:a9:38:89:da:61:ac:0c:12:c0:07:06:7d:ee:
                    d3:73:04:8e:f4:b0:2e:77:ba:96:cc:63:c5:06:54:
                    10:46:36:a0:2c:e6:b5:a4:cb:2e:15:f0:83:d3:d5:
                    1f:16:c2:42:e2:2f:20:79:fa:dd:5f:3c:21:3f:6d:
                    3a:25:ea:48:6d:25:4c:aa:72:9b:49:64:b0:4f:94:
                    86:12:bb:65:78:d6:5f:78:28:52:cf:4c:6b:60:3c:
                    03:06:68:f2:de:9c:a8:f5:c7:1e:02:e1:d9:ac:36:
                    c8:d2:cf:9a:1e:79:26:94:e1:9f:35:88:28:8b:0f:
                    5f:42:b8:a4:e7:40:cf:5b:e7:85:ae:c4:1b:8f:f5:
                    92:a6:9a:71:e4:b3:02:23:c7:81:31:36:6d:04:c0:
                    00:e7:a7:2e:1e:9d:dd:35:59:fc:93:79:38:c6:07:
                    4d:dd:4c:01:ea:28:b1:68:68:5d:f5:ce:a4:b5:d5:
                    14:34:1a:d8:5a:2d:00:95:2b:5d:e2:8f:02:cb:b4:
                    97:f2:f3:76:22:4d:7c:76:5c:0b:dc:30:30:d8:93:
                    48:b4:41:bb:ac:6c:f7:fe:14:0c:50:25:31:6d:77:
                    38:a2:be:8e:b2:c9:a7:5a:47:3b:08:d3:8a:36:8c:
                    04:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C1:FF:4F:F5:A1:9A:34:C4:3C:99:16:E6:40:0A:CD:1A:BE:D5:36
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:a9:80:2d:fb:d2:70:59:da:d0:1b:7f:77:b3:1e:38:fd:cb:
         b6:dd:b8:00:44:20:29:5f:72:81:f9:70:b6:c3:87:5a:b3:1c:
         31:a8:7c:d1:a8:c7:c7:27:a9:4c:73:ac:b5:aa:47:18:9d:e8:
         9c:3a:f1:13:15:ba:60:7c:e7:b0:6b:db:e5:5a:78:ed:5c:a8:
         99:a1:ca:49:c1:bf:0d:49:17:28:81:f3:d8:53:ef:99:dd:b4:
         63:e7:0e:5d:a9:12:58:bb:57:3b:81:81:6d:05:78:60:88:73:
         01:40:1c:6d:7e:da:ce:f8:3b:c7:1a:9c:22:1c:a7:3b:86:57:
         70:fa:37:b5:f0:ee:8b:1c:6e:36:18:b1:a2:b7:a5:af:5a:b1:
         d2:a7:89:f5:16:20:a7:8e:f4:cd:83:9d:00:41:9d:f9:f8:a0:
         d9:34:ae:7d:86:90:83:d1:c9:75:a8:81:43:f9:0c:ee:e4:94:
         40:b0:08:6b:04:3b:ce:1c:f8:7e:17:0f:42:00:33:ec:8f:23:
         16:e6:4d:d5:e3:b9:9a:42:64:d4:63:38:36:c6:28:c2:c3:21:
         38:b4:92:3d:62:b4:fb:6f:e1:2d:ca:10:99:3c:e2:4a:27:5a:
         32:cf:45:bb:5b:51:31:8e:9b:c2:52:f6:55:48:a1:1d:a8:ba:
         9d:39:2b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:26:06 2026 by rpki-client