Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203337323335.roa
File:                     3231362e3134352e3231382e302f32342d3234203d3e203337323335.roa (raw, json)
Hash identifier:          iUBgXzMV1QJipJI5VlpEmp/R9zOBHi79ynyNmbY8YHU=
Subject key identifier:   43:6F:64:8A:33:B4:97:9C:97:DC:EB:8D:5D:B4:BF:0C:70:20:11:AD
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       2CFF9CEF7B816D9CC2A95284F36AE8EA37969216
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203337323335.roa
Signing time:             Fri 05 Jun 2026 12:30:52 +0000
ROA not before:           Fri 05 Jun 2026 12:25:52 +0000
ROA not after:            Fri 04 Jun 2027 12:30:52 +0000
asID:                     37235
IP address blocks:        216.145.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 09:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ff:9c:ef:7b:81:6d:9c:c2:a9:52:84:f3:6a:e8:ea:37:96:92:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun  5 12:25:52 2026 GMT
            Not After : Jun  4 12:30:52 2027 GMT
        Subject: CN=436F648A33B4979C97DCEB8D5DB4BF0C702011AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:dc:e7:93:39:6f:71:45:bc:27:48:90:aa:78:
                    6a:1e:dd:bd:0b:67:5b:03:88:5c:61:74:52:3b:97:
                    09:c5:34:18:0a:e4:4b:61:79:b3:9c:f5:6b:8c:30:
                    48:9f:e1:a3:0b:60:e4:09:16:bd:40:4f:c8:76:d3:
                    bd:14:fe:6b:3e:d1:05:0c:a3:ef:6f:1e:b0:93:dc:
                    ff:39:60:62:d2:5d:ef:c9:86:84:fc:ee:0e:5a:8a:
                    3e:0a:67:e3:30:a3:17:d6:4b:98:f7:d5:6b:af:26:
                    af:61:ae:8b:64:54:e5:27:b2:31:7e:c7:0a:d0:23:
                    33:4a:9c:56:bf:b3:a5:a2:c7:8e:c2:63:de:f8:82:
                    ed:20:62:8f:2a:22:3b:cc:34:f2:e3:77:b3:a1:95:
                    c9:c2:b6:f9:47:f7:65:d1:21:6e:5f:9b:30:53:6f:
                    c1:a8:3b:2a:37:ab:01:22:f3:5b:a2:61:0d:97:f3:
                    6c:a6:3b:e1:d2:fc:34:fc:a7:b4:aa:4a:d9:7c:23:
                    51:c4:bb:5d:ed:9d:62:2f:d2:64:4e:cd:3a:10:8b:
                    85:e8:d9:85:31:e1:af:05:12:77:4f:95:b4:ea:c9:
                    7e:9a:75:5b:3d:a1:a2:2c:dc:62:11:ec:ff:4e:2c:
                    60:38:97:af:41:93:b4:89:22:8a:2e:18:1a:14:51:
                    1d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6F:64:8A:33:B4:97:9C:97:DC:EB:8D:5D:B4:BF:0C:70:20:11:AD
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203337323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:fe:ad:b8:6f:59:8c:e8:b1:ec:28:31:13:2e:60:aa:35:13:
         0c:ce:1e:00:15:2e:4e:ba:d4:d8:b0:eb:e0:14:49:a6:b2:9d:
         87:51:6a:31:16:70:05:ab:7f:20:ec:2d:e9:c2:47:e7:a6:12:
         9b:18:25:53:10:1a:a3:38:1a:8a:3a:b8:1f:64:77:79:fb:dc:
         dd:bc:ff:bd:0b:ad:e6:a0:09:70:3d:c7:94:60:2c:fa:b6:10:
         58:90:49:c3:75:f0:e6:81:4f:ba:88:ac:60:d0:1d:70:00:6b:
         e7:1e:2c:f9:8b:16:07:50:ef:26:c8:fb:ae:d4:ef:78:2b:63:
         68:49:0e:a5:35:98:5a:2f:ca:50:70:79:e5:10:be:e5:b1:1e:
         dd:02:14:15:da:e6:03:f2:90:68:d5:5d:55:7d:f4:0e:73:05:
         94:8b:21:21:da:c4:8a:60:12:8b:bf:8b:f7:8b:aa:85:e8:37:
         ec:8c:5a:a8:c9:2d:ba:6b:42:5b:de:41:5a:b0:0b:d4:5f:57:
         a7:e3:c7:b3:36:20:57:b1:a6:78:c0:3f:ef:49:b0:7f:f9:60:
         a1:2b:ac:62:c7:73:be:a3:5d:03:13:c1:0b:38:51:a2:9a:12:
         39:94:52:5a:04:b1:2e:1d:55:4c:c3:fc:9b:31:69:36:ec:d5:
         56:36:a5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:55:55 2026 by rpki-client