Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030303a3a2f34382d3438203d3e203330303331.roa
File:                     323632303a3133343a363030303a3a2f34382d3438203d3e203330303331.roa (raw, json)
Hash identifier:          IbChPt8BBWRzrv//4SstO8Gw/Ex3mEagyjIz+D4HJcA=
Subject key identifier:   24:DE:45:FA:F8:9E:0D:AB:DF:D2:42:2C:0D:49:FB:CF:27:32:04:54
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       663E264BF9E60AA2910E3E825DC21209965BC0A5
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030303a3a2f34382d3438203d3e203330303331.roa
Signing time:             Fri 05 Jun 2026 12:30:48 +0000
ROA not before:           Fri 05 Jun 2026 12:25:48 +0000
ROA not after:            Fri 04 Jun 2027 12:30:48 +0000
asID:                     30031
IP address blocks:        2620:134:6000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 09:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:3e:26:4b:f9:e6:0a:a2:91:0e:3e:82:5d:c2:12:09:96:5b:c0:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun  5 12:25:48 2026 GMT
            Not After : Jun  4 12:30:48 2027 GMT
        Subject: CN=24DE45FAF89E0DABDFD2422C0D49FBCF27320454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f3:2a:e2:a3:ed:91:84:45:ab:34:91:ea:09:
                    fd:2e:be:67:50:86:f5:2f:ec:91:ad:d1:96:0a:a0:
                    51:51:9c:ac:8d:d1:1e:78:b5:10:6d:3e:64:9d:d4:
                    a4:03:d0:b4:e3:60:00:5a:fd:be:76:0c:03:74:fd:
                    67:07:e6:86:d4:4f:d5:48:58:f0:8a:82:10:aa:15:
                    cb:80:f9:42:79:71:0f:56:17:29:fd:3a:93:38:45:
                    e4:e8:d8:91:2c:9f:89:16:5f:9f:26:ea:d2:49:7e:
                    c4:a7:47:3d:b7:2e:ad:b1:dc:72:d4:f8:6d:e5:2b:
                    53:84:0c:0e:8d:02:14:e7:68:ba:e9:ba:30:46:5d:
                    a6:8c:94:97:24:5c:0e:12:64:2c:c0:77:f3:b8:2f:
                    1b:7a:dd:47:70:fe:ee:75:a9:51:a5:f2:b8:79:c1:
                    e7:28:9d:fc:6f:3d:8d:93:96:57:50:cd:d2:55:19:
                    f2:81:a3:11:89:39:1b:1f:cd:8b:29:4a:be:ec:5b:
                    1c:29:4c:33:24:26:eb:d5:75:d7:9a:f9:6a:61:d9:
                    30:c2:68:cf:37:84:fd:2b:fa:0a:39:e4:85:a6:90:
                    79:88:c9:5e:26:8d:6c:0b:94:81:a3:6a:31:02:b0:
                    cf:0d:b1:db:d1:48:8c:eb:60:34:ca:42:b6:2e:05:
                    7e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DE:45:FA:F8:9E:0D:AB:DF:D2:42:2C:0D:49:FB:CF:27:32:04:54
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030303a3a2f34382d3438203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:61:e0:a3:09:44:f0:68:fb:a9:b8:4b:13:ef:56:c8:90:39:
         63:ae:e3:c0:15:ac:0d:6b:f7:67:06:71:af:37:a3:67:1d:9a:
         66:ef:37:7c:76:4a:82:3d:81:12:ca:b4:b4:cc:bb:15:bc:75:
         db:db:f6:95:6a:6b:14:9e:26:51:69:bc:16:e6:11:da:9d:87:
         b9:10:db:69:8d:e2:b7:a0:81:d4:9a:39:20:58:16:f8:a7:39:
         ac:b3:25:41:59:3f:73:f4:14:5f:bb:d8:da:5e:36:2f:96:27:
         e7:a9:8b:5c:63:d5:c4:a2:0f:4f:7c:f2:00:4e:aa:cf:26:e4:
         30:aa:2f:15:d0:5c:71:61:9e:c3:9e:4b:66:7e:2f:64:bc:68:
         e6:f4:8c:2e:80:c1:e9:57:b1:b9:ef:e6:3b:13:e0:94:89:36:
         d8:4c:33:0c:7d:18:54:c5:95:b3:70:37:6f:ac:c1:c4:10:0d:
         08:af:a4:4d:0d:91:be:96:7e:f7:aa:17:38:9f:16:d0:1f:10:
         26:c9:c5:0f:f9:01:5b:ec:48:8e:70:d6:2f:91:48:04:08:98:
         c2:e6:bf:02:67:80:53:36:c7:25:31:ec:1d:91:89:ec:12:95:
         45:97:3c:b6:18:9b:f7:80:97:8c:88:d6:2b:67:91:8f:4c:4b:
         34:c2:f8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:00:42 2026 by rpki-client