Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203333353338.roa
File:                     3231362e3134352e3232322e302f32342d3234203d3e203333353338.roa (raw, json)
Hash identifier:          LrxwjHFLRc/Z1NiymnTI6fanwGBDbpAznPTgmON2umA=
Subject key identifier:   06:B3:1C:42:72:49:CD:2A:AD:E7:B9:E3:23:86:75:6A:8F:57:C1:0B
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       5B388C06EE61947ECDAAC85E0D7B6E02F1F07495
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203333353338.roa
Signing time:             Fri 04 Jul 2025 12:05:09 +0000
ROA not before:           Fri 04 Jul 2025 12:00:09 +0000
ROA not after:            Fri 03 Jul 2026 12:05:09 +0000
asID:                     33538
IP address blocks:        216.145.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 12:14:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:38:8c:06:ee:61:94:7e:cd:aa:c8:5e:0d:7b:6e:02:f1:f0:74:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:09 2025 GMT
            Not After : Jul  3 12:05:09 2026 GMT
        Subject: CN=06B31C427249CD2AADE7B9E32386756A8F57C10B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7f:d4:a9:79:5f:6c:48:0f:c3:f0:c8:9d:b2:
                    d0:ff:6d:e0:51:8b:ac:48:78:c3:78:fb:1a:da:01:
                    22:9a:83:70:7b:44:1f:e9:78:cf:51:f6:ea:bc:5d:
                    1a:a3:3d:13:9f:e8:e6:23:ac:74:ec:e0:a4:0b:16:
                    f5:ab:2b:ac:a5:59:09:69:a0:50:60:a9:c6:fc:0d:
                    5d:f2:d5:f8:00:0a:56:92:38:37:18:bc:93:33:67:
                    8c:34:33:09:b7:63:d0:fe:ba:f3:01:d2:51:1e:12:
                    98:44:1b:a6:b7:4c:fa:35:c6:98:77:a2:65:2d:49:
                    5d:a4:60:ef:04:f8:50:81:97:b9:6d:81:fd:b1:b6:
                    87:b9:c4:d4:08:8a:33:f2:63:23:cf:9e:b0:70:55:
                    b0:4d:0c:96:f8:ee:c7:4c:65:5f:84:c4:6b:9d:2d:
                    76:6f:1b:06:a9:93:14:86:24:64:aa:2e:5f:d8:ac:
                    27:e5:c6:ee:54:65:95:47:2e:3e:d9:f4:4a:b7:be:
                    10:14:27:2f:08:80:d0:09:08:7b:86:bc:d2:d2:c5:
                    0c:f1:85:8f:1d:e1:f7:fa:e8:6b:b9:93:56:8b:e6:
                    1a:e0:fa:4e:9e:f6:69:f9:e0:44:f6:e5:88:d5:61:
                    eb:f0:5a:b8:d3:63:96:64:85:47:3c:8c:5a:09:f6:
                    ca:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B3:1C:42:72:49:CD:2A:AD:E7:B9:E3:23:86:75:6A:8F:57:C1:0B
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203333353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:27:8c:d6:69:16:71:61:7c:15:c2:3b:fb:b4:ae:eb:2d:1d:
         35:c2:db:3a:e1:71:eb:e5:8e:26:1a:8a:bc:ac:04:0f:78:a8:
         fb:63:6a:fe:80:8c:c6:46:31:dc:29:90:e8:5d:cb:e6:56:a8:
         24:14:0b:97:16:37:3b:6d:a4:a0:26:6e:12:03:11:7e:f6:4e:
         32:ec:1d:ef:5d:4a:5d:f8:db:16:fd:c0:1e:87:ae:96:b3:83:
         cb:d0:95:64:f5:a9:5c:62:b0:d8:bc:7f:dc:0e:c5:bb:31:8b:
         6b:5e:42:5e:55:c9:a6:0b:7a:17:61:10:09:d9:82:08:c8:c9:
         85:d3:1c:b6:bc:6c:8b:9c:60:d9:2f:72:bd:de:9a:1e:bc:38:
         7a:0f:3d:e0:47:4c:8f:44:0a:fb:23:b6:b2:9c:af:a9:a2:92:
         a4:0f:3e:ec:0b:57:f7:df:57:99:50:7d:d3:03:24:85:74:95:
         98:97:69:30:27:b3:df:d0:88:60:16:cf:66:ff:09:8f:cc:6f:
         1d:7e:a4:11:af:da:27:1a:60:9f:6c:40:31:33:84:c3:67:86:
         42:e4:27:a5:a7:b4:3d:61:0e:c9:ff:d9:a0:43:a3:21:da:4b:
         d5:67:d1:f2:a1:7f:e5:d0:ce:1e:46:eb:2c:03:64:76:6e:2f:
         d4:5c:66:31
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIUWziMBu5hlH7NqsheDXtuAvHwdJUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjUwNzA0MTIwMDA5WhcNMjYwNzAzMTIwNTA5
WjAzMTEwLwYDVQQDEygwNkIzMUM0MjcyNDlDRDJBQURFN0I5RTMyMzg2NzU2QThG
NTdDMTBCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13/UqXlfbEgP
w/DInbLQ/23gUYusSHjDePsa2gEimoNwe0Qf6XjPUfbqvF0aoz0Tn+jmI6x07OCk
Cxb1qyuspVkJaaBQYKnG/A1d8tX4AApWkjg3GLyTM2eMNDMJt2PQ/rrzAdJRHhKY
RBumt0z6NcaYd6JlLUldpGDvBPhQgZe5bYH9sbaHucTUCIoz8mMjz56wcFWwTQyW
+O7HTGVfhMRrnS12bxsGqZMUhiRkqi5f2Kwn5cbuVGWVRy4+2fRKt74QFCcvCIDQ
CQh7hrzS0sUM8YWPHeH3+uhruZNWi+Ya4PpOnvZp+eBE9uWI1WHr8Fq402OWZIVH
PIxaCfbKaQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFAazHEJySc0qree54yOGdWqP
V8ELMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGOBggrBgEFBQcBCwSBgTB/
MH0GCCsGAQUFBzALhnFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5ldC9yZXBvc2l0
b3J5L0E5MTkyQTk4MDAwMC80LzMyMzEzNjJlMzEzNDM1MmUzMjMyMzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzMzMzUzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JHeMA0GCSqG
SIb3DQEBCwUAA4IBAQCUJ4zWaRZxYXwVwjv7tK7rLR01wts64XHr5Y4mGoq8rAQP
eKj7Y2r+gIzGRjHcKZDoXcvmVqgkFAuXFjc7baSgJm4SAxF+9k4y7B3vXUpd+NsW
/cAeh66Ws4PL0JVk9alcYrDYvH/cDsW7MYtrXkJeVcmmC3oXYRAJ2YIIyMmF0xy2
vGyLnGDZL3K93poevDh6Dz3gR0yPRAr7I7aynK+popKkDz7sC1f331eZUH3TAySF
dJWYl2kwJ7Pf0IhgFs9m/wmPzG8dfqQRr9onGmCfbEAxM4TDZ4ZC5Celp7Q9YQ7J
/9mgQ6Mh2kvVZ9HyoX/l0M4eRussA2R2bi/UXGYx
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:53:48 2025 by rpki-client