Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203432343237.roa
File:                     3231362e3134352e3232322e302f32342d3234203d3e203432343237.roa (raw, json)
Hash identifier:          XhsgtBqq1CkOWoyO7+3FQNFo6hq9KwYjjtNgCvkpRdg=
Subject key identifier:   16:31:84:8B:69:58:FA:56:91:23:E9:52:E1:43:14:6C:A2:5F:53:4E
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       44B7CB7A78A3B2B459EF7CBC78C6746BC3DF7467
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203432343237.roa
Signing time:             Fri 04 Jul 2025 12:05:10 +0000
ROA not before:           Fri 04 Jul 2025 12:00:10 +0000
ROA not after:            Fri 03 Jul 2026 12:05:10 +0000
asID:                     42427
IP address blocks:        216.145.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 23:52:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b7:cb:7a:78:a3:b2:b4:59:ef:7c:bc:78:c6:74:6b:c3:df:74:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jul  4 12:00:10 2025 GMT
            Not After : Jul  3 12:05:10 2026 GMT
        Subject: CN=1631848B6958FA569123E952E143146CA25F534E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:17:52:ab:86:60:21:cf:4a:d4:4b:b6:82:8d:
                    13:bb:27:05:a1:b7:98:af:5e:d4:61:c8:96:a8:ad:
                    0e:45:6f:72:46:03:d4:e6:7e:5b:4d:ac:93:08:2f:
                    79:df:c6:94:fe:aa:68:7f:a7:c7:1b:f6:21:f6:8f:
                    61:77:c8:60:d5:59:db:fd:1f:c7:c9:d5:e7:6e:fb:
                    3f:c9:1e:ea:c2:b5:06:a5:48:51:f0:84:54:ef:12:
                    16:68:1f:b3:e1:68:6c:90:4f:33:4a:ae:45:6b:70:
                    29:60:1f:b4:42:d3:bc:3a:14:42:7f:1d:f3:ba:12:
                    13:99:8d:3d:80:e6:65:ab:75:14:6e:79:fc:2a:99:
                    0d:72:77:a1:18:bb:04:53:b3:61:54:41:12:1e:24:
                    63:ce:30:0a:eb:2d:1b:c6:bc:72:e3:9b:86:e6:21:
                    5b:4c:86:f9:4a:85:32:ec:fc:ca:0c:61:df:d9:8c:
                    92:b5:87:ae:16:52:73:8a:85:3f:08:ae:83:b6:1d:
                    08:c4:90:ed:db:7b:db:5f:13:c8:45:03:e4:b8:d1:
                    5a:30:b1:ba:4e:54:1c:21:97:dc:b6:72:aa:fc:6b:
                    63:84:3f:a9:a8:c0:50:fa:fe:6c:2a:dc:50:3c:dd:
                    dc:f6:09:bf:25:ea:05:cc:1a:2f:61:90:ac:f6:90:
                    d0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:31:84:8B:69:58:FA:56:91:23:E9:52:E1:43:14:6C:A2:5F:53:4E
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203432343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:48:a5:74:6c:df:f9:75:7d:2c:44:8f:e4:7a:6c:48:7f:f3:
         5d:03:ba:af:42:1f:a5:f5:1a:14:c6:b5:0c:85:0f:8b:d5:30:
         59:7d:16:a0:3f:f0:f8:96:a6:f8:32:c9:68:8c:68:06:f3:83:
         1c:67:38:2e:7e:75:cf:cc:00:df:2f:ac:11:a5:7e:67:93:1b:
         ca:a0:2b:fc:5d:94:fc:51:19:57:60:41:7a:d4:1c:44:92:3e:
         01:67:e4:e2:c6:70:e2:82:2d:57:55:2e:4b:05:38:3e:05:d9:
         33:83:2f:1b:a5:3a:43:90:8f:13:6e:89:be:86:80:b4:32:b1:
         17:ad:b2:28:d9:45:c3:e1:53:5e:53:a2:ae:2c:54:c6:88:03:
         ba:db:93:b4:35:c9:f1:b5:2b:55:ea:6e:ea:90:c0:6d:e8:3d:
         d9:60:d7:5d:d5:40:34:53:d4:22:01:c4:89:17:6c:6c:58:a0:
         55:f5:60:de:0d:fc:8e:c1:7e:eb:86:d3:a9:ba:d2:0b:32:2e:
         a9:13:1d:2b:78:1d:7b:ac:03:76:09:82:a1:04:db:73:af:8a:
         af:ca:cc:67:c4:49:f9:dc:c2:d0:1a:bb:43:25:f7:0d:8b:1d:
         c9:2f:92:27:67:aa:88:9c:f4:4a:ab:ff:8e:8b:3c:dd:92:26:
         fa:95:63:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:18:43 2025 by rpki-client