Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203630343932.roa
File:                     3231362e3134352e3232322e302f32342d3234203d3e203630343932.roa (raw, json)
Hash identifier:          PBEcVdMBv1ItTezo7D7T6WpGVFBwkshJBOQq51wItAo=
Subject key identifier:   1A:0F:C1:68:EC:1A:28:F2:28:8E:E9:AF:07:F6:DC:35:A2:0C:18:46
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       133A9F1E3CD10946D0310B4F1791538D28536D7C
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203630343932.roa
Signing time:             Fri 05 Jun 2026 12:30:53 +0000
ROA not before:           Fri 05 Jun 2026 12:25:53 +0000
ROA not after:            Fri 04 Jun 2027 12:30:53 +0000
asID:                     60492
IP address blocks:        216.145.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 09:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:3a:9f:1e:3c:d1:09:46:d0:31:0b:4f:17:91:53:8d:28:53:6d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun  5 12:25:53 2026 GMT
            Not After : Jun  4 12:30:53 2027 GMT
        Subject: CN=1A0FC168EC1A28F2288EE9AF07F6DC35A20C1846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f4:44:08:69:3d:dc:49:24:73:8f:5b:e3:4a:
                    80:07:d9:ed:d5:d7:95:81:d0:32:fa:28:45:be:b8:
                    6b:3f:bc:6c:fc:61:55:b5:d8:4a:65:d0:78:67:f3:
                    f1:de:3b:f3:0e:8e:fc:d4:bd:52:36:ac:21:a1:87:
                    6d:1d:7a:10:9b:a1:48:e9:68:cd:0e:e2:44:92:08:
                    6d:23:d3:fd:3f:5b:b6:2e:6b:04:9b:bb:57:31:f7:
                    95:d8:a1:59:b3:4e:1e:69:56:3b:45:72:d7:7f:5f:
                    5a:db:b0:d4:c6:ea:62:f6:ce:f0:2c:32:e2:c8:90:
                    29:69:ad:8a:e7:37:d1:0d:31:e7:e1:43:0e:f4:d0:
                    2e:45:9d:77:61:31:57:d8:ad:1c:fc:82:59:21:fc:
                    ae:fe:09:af:42:79:2f:c3:13:a0:b4:1b:f6:f3:56:
                    fb:86:24:98:71:7b:41:7e:4a:00:a9:52:ee:66:ff:
                    ea:c2:b3:c2:e8:8c:1c:75:f2:22:d8:c3:ac:2d:2f:
                    96:92:47:7b:0a:22:21:2a:18:ea:e8:f4:72:10:79:
                    0a:e9:d3:8a:e4:2e:e9:6c:54:34:60:e7:a4:ba:a4:
                    a3:9f:b3:f1:c6:10:33:b4:96:cd:2e:73:04:16:10:
                    d0:c9:23:bd:87:ea:5c:b3:a2:62:a7:f0:77:23:75:
                    0d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0F:C1:68:EC:1A:28:F2:28:8E:E9:AF:07:F6:DC:35:A2:0C:18:46
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232322e302f32342d3234203d3e203630343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:8e:6d:11:bc:1e:1e:db:7c:29:94:68:7c:fc:d5:e4:69:3e:
         15:4e:53:06:79:a6:5d:82:f2:5b:09:f7:77:b8:f9:e6:a7:25:
         61:6c:14:b9:39:88:a5:97:02:a3:d2:39:d4:52:e1:2e:83:ca:
         74:a6:0b:d6:ec:07:2e:48:1a:87:f9:d1:dc:5e:42:c3:b4:97:
         31:fd:19:01:0c:a1:33:05:4c:c0:24:e0:26:71:bd:8d:0a:a6:
         84:c9:3f:cc:e7:a7:9d:8a:53:51:ed:e4:c7:52:66:fc:ff:28:
         10:14:29:e3:3c:e2:5c:d6:f7:92:71:c5:c6:bb:ca:a7:be:53:
         70:7c:0c:07:db:df:62:75:08:88:b2:37:ba:d4:33:0b:00:30:
         d0:67:7a:e3:4e:a5:8f:a6:3f:b3:1f:80:d1:ec:00:0c:08:e8:
         bb:98:9e:fd:46:db:ad:52:14:f5:51:42:0e:1b:34:03:55:46:
         0b:1b:8f:38:f3:43:ef:11:55:9b:69:40:b8:5e:62:13:db:d3:
         dd:fa:44:f9:4a:7b:90:a2:18:af:48:6a:fd:60:61:5f:b3:14:
         00:e7:6e:31:be:b1:0d:a1:bf:29:33:22:c0:70:0a:1b:60:0f:
         45:06:f9:6d:1f:e7:69:ff:d1:9c:e9:6f:54:7b:fa:58:81:6b:
         01:9c:5d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:10:58 2026 by rpki-client