Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030313a3a2f34382d3438203d3e203330303331.roa
File:                     323632303a3133343a363030313a3a2f34382d3438203d3e203330303331.roa (raw, json)
Hash identifier:          lW0ILNdpKeunI8yPJj34nXYxxM914qH5nIxpkXCqraw=
Subject key identifier:   2B:16:64:25:D3:43:49:5A:65:52:65:12:D1:55:24:24:CF:F2:6B:96
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       1771956AED46B638C9B0E8973AFD051DEE164197
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030313a3a2f34382d3438203d3e203330303331.roa
Signing time:             Fri 05 Jun 2026 12:30:49 +0000
ROA not before:           Fri 05 Jun 2026 12:25:49 +0000
ROA not after:            Fri 04 Jun 2027 12:30:49 +0000
asID:                     30031
IP address blocks:        2620:134:6001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 09:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:71:95:6a:ed:46:b6:38:c9:b0:e8:97:3a:fd:05:1d:ee:16:41:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun  5 12:25:49 2026 GMT
            Not After : Jun  4 12:30:49 2027 GMT
        Subject: CN=2B166425D343495A65526512D1552424CFF26B96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:83:b6:d7:10:66:1f:ac:b4:26:98:e3:59:3e:
                    d0:03:37:76:44:89:f3:40:39:4a:78:bb:c3:14:56:
                    51:d7:f1:dc:24:5c:2a:6c:3d:3c:d2:c1:34:50:8c:
                    5f:c1:17:ca:cc:f7:53:da:f6:3a:6a:b0:25:ed:ee:
                    c8:f6:69:82:88:6e:b2:67:ed:9d:29:3d:d9:a9:2a:
                    17:fa:c8:4e:b0:cf:6c:50:0e:fb:47:04:1f:e2:31:
                    bf:f7:40:dc:ba:a0:70:72:94:f1:9b:34:a6:a6:a2:
                    94:3f:09:b4:31:02:fc:54:3c:28:5c:fc:b6:45:2d:
                    ed:d3:65:21:7b:19:5d:42:2d:38:a1:8b:82:d7:49:
                    f3:2e:ff:2d:fd:d2:ae:20:a2:e8:99:3d:b3:17:fe:
                    12:ef:e1:5a:60:4c:38:2d:0a:9d:1d:3e:23:6a:8e:
                    28:fc:34:0f:a7:1f:4d:ee:1e:ea:7f:41:3f:da:07:
                    54:51:9c:1f:58:8a:c0:7a:62:45:ef:bc:3d:c7:56:
                    ca:74:f8:19:11:db:b4:f9:3f:0e:d6:ce:32:30:b0:
                    af:ce:13:8c:da:d5:d0:c5:94:56:32:a6:7f:ff:e2:
                    5e:8b:2b:a1:58:05:61:d3:c4:51:88:3d:da:b6:0e:
                    19:8c:19:22:c9:83:48:65:aa:cb:ee:6e:c1:09:30:
                    bc:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:16:64:25:D3:43:49:5A:65:52:65:12:D1:55:24:24:CF:F2:6B:96
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030313a3a2f34382d3438203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6001::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:00:fd:6c:fd:5d:bf:01:c0:2f:09:98:0e:57:2a:e8:ee:a8:
         91:e8:b9:cf:42:ee:d6:3f:f8:af:41:15:04:c3:7f:3b:94:16:
         85:9b:8c:9e:51:61:89:f4:67:2b:7a:21:54:97:e0:4d:76:ef:
         2b:24:c1:e9:b3:4e:30:b2:83:ab:a3:13:c4:3d:e3:5e:a7:11:
         ce:35:62:a7:b7:d4:a3:c0:49:4e:35:c4:ce:06:0c:ad:9d:dc:
         e6:5f:7b:80:2c:80:35:39:9e:e4:7a:45:c2:72:62:8a:48:52:
         73:49:05:d5:19:15:ca:0d:b9:e1:11:d6:47:8e:30:1a:b9:d3:
         4c:0b:b7:a9:92:ac:e3:e2:57:f1:c3:02:33:a3:4f:38:2b:9d:
         ee:76:c7:80:5a:4d:85:76:e1:54:98:d1:2c:6b:f9:aa:27:e9:
         bc:27:72:68:4a:ec:68:fa:a3:de:28:29:54:89:41:ca:22:8f:
         0a:4f:bc:8e:b8:bf:74:e0:a5:e9:6b:03:60:d1:b5:a5:8b:bc:
         ad:0d:78:8e:8f:a0:03:01:42:c9:05:85:b8:a8:27:c9:aa:d6:
         99:86:c4:9e:61:f4:87:df:9f:a6:8c:f0:2b:42:5a:cb:a0:a9:
         0b:47:41:58:05:c0:26:93:72:df:70:fa:30:b7:5b:7c:9d:60:
         3a:8e:ee:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:26:34 2026 by rpki-client