Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203432343237.roa
File:                     3231362e3134352e3231382e302f32342d3234203d3e203432343237.roa (raw, json)
Hash identifier:          0J14BW+5YTyIYktxy3Quqw0XQiv+vPvpY95YSjFkz54=
Subject key identifier:   DC:E1:79:4D:84:5B:AE:FF:02:DE:B6:F4:97:AB:52:D0:55:E6:1A:BD
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       2DFD35D149C6F529A77AA793CBDA3CD2E1BD6C77
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203432343237.roa
Signing time:             Fri 05 Jun 2026 12:30:49 +0000
ROA not before:           Fri 05 Jun 2026 12:25:49 +0000
ROA not after:            Fri 04 Jun 2027 12:30:49 +0000
asID:                     42427
IP address blocks:        216.145.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 09:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:fd:35:d1:49:c6:f5:29:a7:7a:a7:93:cb:da:3c:d2:e1:bd:6c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun  5 12:25:49 2026 GMT
            Not After : Jun  4 12:30:49 2027 GMT
        Subject: CN=DCE1794D845BAEFF02DEB6F497AB52D055E61ABD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:84:9e:f1:e1:c9:74:18:a2:80:e4:c6:65:bc:
                    a8:d0:d9:54:03:8b:34:ef:8c:62:75:dc:58:83:c5:
                    a1:66:6d:29:12:f2:a0:25:2a:c6:bd:cd:02:62:3f:
                    8c:c9:87:f9:f6:7f:3d:c6:e2:b0:54:21:60:15:1c:
                    f7:ea:66:42:87:ed:f8:4c:c9:cd:84:96:ac:bc:41:
                    20:61:61:96:76:4b:8d:2d:ba:d6:be:22:27:8b:0e:
                    8c:01:b0:ea:a1:71:6b:d7:80:bc:25:c5:ca:35:e8:
                    03:9d:01:17:98:84:44:7c:76:f4:1a:d7:fe:52:54:
                    bb:09:29:6d:11:c8:5d:72:7c:45:33:e8:89:72:f0:
                    73:b6:2c:58:71:52:91:8b:50:ff:86:da:b1:a5:bf:
                    16:58:3c:34:76:fb:1b:b6:9b:28:1b:01:5b:07:27:
                    f1:c7:d5:7f:23:39:24:c2:47:53:06:c2:cd:3e:2c:
                    3e:8d:01:08:10:ca:72:7f:35:73:52:53:c6:d0:05:
                    48:83:9d:08:29:5d:cd:d6:06:f7:3e:f9:03:2a:11:
                    08:28:39:ce:c4:12:1d:2f:21:ca:39:2c:24:c4:3c:
                    21:ac:50:3e:a6:d3:72:ac:0e:df:4d:f7:2e:67:e4:
                    19:2d:a9:af:7f:5a:12:cb:d8:fa:7e:e4:85:46:bd:
                    ee:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E1:79:4D:84:5B:AE:FF:02:DE:B6:F4:97:AB:52:D0:55:E6:1A:BD
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203432343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:6a:f1:2b:48:31:28:04:b1:86:60:c7:a4:a1:16:30:2c:ff:
         21:f4:1f:53:fc:b1:8b:cc:77:ba:5b:28:db:d3:74:f4:3f:40:
         af:09:81:6b:63:a8:4c:c4:08:11:c0:1b:84:1a:b3:95:e1:85:
         7e:d8:f1:4f:15:fc:4c:22:5f:f6:80:cd:b9:f4:d9:9a:43:02:
         49:36:31:cf:eb:74:b2:fa:3e:56:04:33:b1:e4:ce:97:2e:0a:
         cb:9b:0b:8b:b0:32:c9:72:3b:68:18:16:8d:14:2b:44:2b:5f:
         fa:3e:b7:5b:4c:f3:d8:22:c4:39:06:a2:b0:87:cb:ba:6f:5f:
         53:f3:70:4a:2a:7f:b1:2c:ab:e1:f0:99:3d:b5:42:dc:4d:ed:
         ad:06:41:1c:29:e8:ba:a5:99:3b:50:ae:ed:27:3c:f0:ce:c5:
         15:05:ca:07:5e:91:ce:a0:c6:dc:0a:17:7b:64:fb:ee:57:72:
         ac:cc:54:e6:61:52:cf:4c:4c:11:77:75:cd:aa:01:7c:31:b3:
         d6:7b:6f:98:c8:fa:c1:15:81:a0:0b:dc:32:ad:1d:c6:11:65:
         27:1c:bb:10:8d:58:19:16:01:30:34:05:f5:59:6e:96:48:86:
         78:de:e1:49:0e:8e:cd:2d:50:bf:68:f7:28:d0:fc:d0:6d:9d:
         ef:10:b6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:45:59 2026 by rpki-client