Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232332e302f32342d3234203d3e20333937373236.roa
File:                     3231362e3134352e3232332e302f32342d3234203d3e20333937373236.roa (raw, json)
Hash identifier:          PIApNC9EgeK419rZdiejznn5OKF9Xln4NmvBWiEjs3w=
Subject key identifier:   D5:E3:02:44:01:96:A9:66:08:8B:B0:B3:F8:EC:06:F5:E4:66:D6:29
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       0283B067B61C9961CE166F16F8F42D832B74F1DD
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232332e302f32342d3234203d3e20333937373236.roa
Signing time:             Fri 05 Jun 2026 12:30:50 +0000
ROA not before:           Fri 05 Jun 2026 12:25:50 +0000
ROA not after:            Fri 04 Jun 2027 12:30:50 +0000
asID:                     397726
IP address blocks:        216.145.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 03:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:83:b0:67:b6:1c:99:61:ce:16:6f:16:f8:f4:2d:83:2b:74:f1:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun  5 12:25:50 2026 GMT
            Not After : Jun  4 12:30:50 2027 GMT
        Subject: CN=D5E302440196A966088BB0B3F8EC06F5E466D629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:24:7d:ce:1d:54:f1:2a:79:0c:d1:30:26:49:
                    e5:aa:e8:da:1e:28:44:50:e2:b0:0b:f8:03:47:98:
                    37:18:d5:98:2d:e9:8b:44:93:61:91:02:25:96:08:
                    37:4c:8c:78:4e:49:0b:3d:5e:db:60:b0:40:60:43:
                    96:29:0f:f3:2a:a9:9d:e8:10:8a:1a:8a:e2:df:d0:
                    14:62:dd:30:24:44:89:1c:77:2f:6b:b0:2e:90:c8:
                    41:15:32:2e:61:06:a0:ac:6e:3e:08:aa:d8:ae:bd:
                    d7:8f:c9:ac:a3:fb:9b:47:24:bd:33:21:45:ee:df:
                    fb:7e:64:99:75:1b:73:ff:e4:42:e9:3b:c7:03:0f:
                    8c:82:55:8a:d8:a1:60:2c:15:e8:f5:11:6c:b8:3f:
                    c3:04:09:75:53:46:16:cb:12:04:34:6b:bb:43:9a:
                    b0:59:9b:0b:fe:4a:d4:4d:66:dd:44:c6:97:07:4b:
                    89:f4:77:ff:a2:6c:4a:4f:e6:79:5f:5e:4e:ae:b4:
                    ab:48:3b:3b:a0:65:68:25:a9:18:8f:83:b8:2f:5f:
                    68:9e:79:fe:3e:e2:d8:2f:32:aa:d9:af:2a:57:4e:
                    ba:cf:82:dd:b0:a5:d2:70:fc:e8:20:60:8c:2b:4f:
                    83:8d:50:23:c1:05:ac:4e:89:69:a5:93:12:4f:c1:
                    31:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E3:02:44:01:96:A9:66:08:8B:B0:B3:F8:EC:06:F5:E4:66:D6:29
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3232332e302f32342d3234203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:a0:ad:55:16:d9:81:56:16:3d:df:a8:43:b3:56:75:ce:51:
         54:10:c8:d3:a3:26:fe:71:a9:51:16:bd:34:a6:89:87:8a:b2:
         56:82:0a:30:74:de:bf:47:6e:1d:86:36:f1:13:e4:ce:8c:56:
         7d:90:4b:45:b0:76:bf:01:09:97:79:72:f7:92:bf:fd:b9:80:
         3c:7b:44:33:72:01:4f:82:2a:2b:cd:57:82:32:0f:b9:a1:37:
         35:4f:3d:5b:8a:fc:d6:c0:15:e9:49:ae:73:6d:fb:b1:b4:b1:
         bc:45:2d:7b:af:85:11:17:bc:95:b8:7c:40:54:89:d5:a8:f8:
         d4:46:d4:e9:6f:7f:b5:5e:ac:b6:d4:46:a7:02:83:32:27:4a:
         1c:46:1b:23:c8:af:a0:97:15:fe:23:ee:0b:95:b8:ed:a4:4e:
         1d:69:bd:39:fe:5d:a1:52:4a:1a:a9:ca:2f:7c:01:de:b1:ea:
         20:0c:a8:81:c8:04:88:69:50:37:d1:a4:c6:05:51:e2:52:49:
         71:87:b4:be:ed:84:6f:71:fb:5a:18:2e:43:c6:14:38:ba:1e:
         83:5e:19:e6:dc:a6:de:53:d8:03:dc:2c:79:64:90:2e:25:c4:
         0c:cc:35:96:16:99:5e:05:ba:b1:75:25:54:13:50:4e:be:e2:
         60:3d:46:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:45:42 2026 by rpki-client