Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203630343932.roa
File:                     3231362e3134352e3231382e302f32342d3234203d3e203630343932.roa (raw, json)
Hash identifier:          r1GE6oneYe9TVdQOyJZ5M6B1G3eWHqubxTyQrTn7AsQ=
Subject key identifier:   07:D5:70:39:37:3E:09:BE:BD:7D:FC:C1:48:71:53:FD:3C:0D:79:B1
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       6F392C331EF0C50AF66F5BCA47026451451F514E
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203630343932.roa
Signing time:             Fri 04 Jul 2025 12:05:06 +0000
ROA not before:           Fri 04 Jul 2025 12:00:06 +0000
ROA not after:            Fri 03 Jul 2026 12:05:06 +0000
asID:                     60492
IP address blocks:        216.145.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 23:52:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:39:2c:33:1e:f0:c5:0a:f6:6f:5b:ca:47:02:64:51:45:1f:51:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:06 2025 GMT
            Not After : Jul  3 12:05:06 2026 GMT
        Subject: CN=07D57039373E09BEBD7DFCC1487153FD3C0D79B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f7:ca:9e:be:ef:94:0b:44:42:d8:fe:b8:8f:
                    05:18:f0:31:1d:c5:79:49:b2:2a:7b:1c:e5:da:73:
                    c3:02:21:e1:96:57:96:98:04:64:35:e7:67:de:a4:
                    10:22:8a:8f:5e:a2:3d:48:5d:d6:76:8d:fb:2f:b0:
                    42:e9:22:c6:73:c2:1b:50:c6:be:de:cc:62:a2:cf:
                    e5:d6:32:70:d1:0a:d4:1e:65:b6:79:59:89:5a:33:
                    b7:8c:0e:f7:b1:2e:29:71:f9:8e:d3:12:af:b4:e5:
                    d3:49:51:0a:fa:b2:c6:4f:28:9a:17:33:e4:ff:8a:
                    75:e7:d8:68:c0:08:ac:b2:1b:19:6b:ec:6d:2d:98:
                    08:dc:2c:f4:58:a3:71:b9:6d:0c:40:bf:58:b2:eb:
                    f4:a6:1f:4d:70:c9:b9:38:69:96:a0:98:c6:d2:ea:
                    21:b5:b0:4e:19:d3:8d:ab:4b:23:30:4d:51:97:cd:
                    b9:a2:56:70:b5:f1:72:de:43:f0:56:87:96:f3:d1:
                    db:ed:68:30:71:5a:46:f0:2e:a7:be:c4:5f:a6:83:
                    d0:aa:0f:ec:3b:52:99:18:c6:40:f5:7e:d0:e1:81:
                    cc:93:6c:38:4b:f5:6b:48:54:76:38:7e:ea:44:7e:
                    f3:4d:68:99:db:51:f0:51:3c:6b:60:01:b5:3f:e0:
                    72:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D5:70:39:37:3E:09:BE:BD:7D:FC:C1:48:71:53:FD:3C:0D:79:B1
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231382e302f32342d3234203d3e203630343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:f7:d5:95:d7:76:af:bf:31:c8:5e:0c:ec:17:60:9a:47:36:
         06:ab:b7:3b:2d:60:68:2d:ea:c1:88:ec:3c:f8:75:27:62:00:
         dd:d2:47:56:97:1e:20:09:e3:7f:35:52:bb:8d:86:4d:cc:d2:
         7b:2c:f5:dc:fb:7a:c9:35:22:f4:f5:d3:f5:b6:43:e2:90:87:
         d2:ad:ca:cd:6a:03:46:90:7f:f4:5b:b1:95:97:5b:ec:ee:7f:
         5a:df:67:b2:5a:ab:54:15:11:62:e8:7d:ad:aa:a2:3e:f3:41:
         56:36:b2:d7:34:ee:49:58:cd:58:48:62:3c:e9:59:e4:f6:68:
         31:f9:c3:cb:e0:f2:55:e0:80:97:83:27:6f:14:b1:14:7d:09:
         99:2f:5e:fe:21:4e:c3:d8:66:31:0f:48:5a:7d:54:30:b1:14:
         0d:38:3a:ed:33:a7:4b:66:22:b3:4e:73:15:d9:2b:ef:54:17:
         41:4e:e9:b2:fd:5d:01:f8:cb:9e:fd:f6:95:34:8e:7c:70:28:
         9d:5c:73:2c:3a:cd:a1:50:3a:4a:dd:7a:87:39:82:0f:df:94:
         8b:bd:b8:80:01:72:7e:cd:05:30:6d:6b:32:e4:f4:cd:fc:74:
         39:85:3b:15:2d:c7:0b:0f:89:94:62:6c:0a:6a:1e:08:72:c9:
         4d:57:48:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:52:54 2025 by rpki-client