Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030343a3a2f34382d3438203d3e20333937373236.roa
File:                     323632303a3133343a363030343a3a2f34382d3438203d3e20333937373236.roa (raw, json)
Hash identifier:          QeAcE8AGyZt8hyaSnkHRLNxuHWGjn4aPEO2thHpRoxE=
Subject key identifier:   CC:C5:11:4B:77:D4:18:41:54:9D:12:60:5A:04:85:50:24:BB:2E:0A
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       57FCDBC4A393F659775333AAAB47B03E64074006
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030343a3a2f34382d3438203d3e20333937373236.roa
Signing time:             Fri 05 Jun 2026 12:30:51 +0000
ROA not before:           Fri 05 Jun 2026 12:25:51 +0000
ROA not after:            Fri 04 Jun 2027 12:30:51 +0000
asID:                     397726
IP address blocks:        2620:134:6004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 03:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:fc:db:c4:a3:93:f6:59:77:53:33:aa:ab:47:b0:3e:64:07:40:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun  5 12:25:51 2026 GMT
            Not After : Jun  4 12:30:51 2027 GMT
        Subject: CN=CCC5114B77D41841549D12605A04855024BB2E0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0e:b3:a8:36:9c:ee:1b:dc:8f:9b:d5:82:f5:
                    80:70:d1:e8:4f:5d:4e:c6:4c:96:56:4c:67:27:31:
                    4b:b1:ae:c2:9f:6b:d7:e2:9e:05:68:52:11:46:ea:
                    1c:30:92:b8:ab:ff:97:dc:19:3e:d7:01:67:19:ed:
                    e1:14:fb:a4:6a:63:be:d9:b2:21:07:bc:e4:f6:b4:
                    53:18:b7:c1:6d:3a:9f:ae:75:c0:84:3c:fd:b8:d1:
                    33:59:4b:92:b3:e3:a7:49:98:63:3e:70:ff:75:0e:
                    81:5e:44:d1:ce:56:1e:e2:c2:1a:f7:8a:54:43:06:
                    97:03:b0:e5:44:13:09:f7:1e:f2:fd:23:ed:87:b4:
                    de:b9:55:55:a5:0c:47:49:16:aa:75:55:99:69:1b:
                    99:4f:37:17:02:6e:e1:2f:7c:2a:db:d0:47:9a:8e:
                    cc:90:ad:ad:eb:d9:1d:a4:22:a3:ba:b0:fd:ae:99:
                    71:6e:1c:62:65:29:a4:1e:f5:26:df:8c:89:a5:3c:
                    d3:15:2f:26:b4:56:19:98:59:60:e6:1e:33:ef:d3:
                    c6:e6:a3:7d:8e:04:16:bc:cc:35:49:42:bc:c8:79:
                    16:4a:ca:f3:6e:e6:07:7b:dd:7c:aa:b3:c0:6c:84:
                    75:f0:59:0a:4b:79:32:3f:8e:5a:a1:95:e7:b4:c7:
                    47:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C5:11:4B:77:D4:18:41:54:9D:12:60:5A:04:85:50:24:BB:2E:0A
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030343a3a2f34382d3438203d3e20333937373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6004::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:65:5c:7b:0d:80:56:1e:6c:12:7c:b1:68:d4:07:a2:e2:84:
         3c:5a:44:59:c5:f5:a6:41:fa:a8:e6:10:1f:6d:c5:e8:12:af:
         6b:6f:62:c9:18:5f:21:f6:3c:78:6b:12:7c:87:5f:88:b8:14:
         2a:96:8a:d0:a4:14:cc:80:a9:bb:23:d2:ce:e2:87:4e:89:05:
         4c:9e:13:d3:89:a4:7e:15:67:77:47:98:d5:61:81:f5:36:4e:
         4e:76:40:d2:08:82:4f:b5:d4:fb:75:8a:2e:07:69:fe:ee:e3:
         94:5c:4f:5d:76:51:16:35:65:14:f7:e7:8f:42:dd:01:8b:3b:
         14:91:4c:f9:8c:f7:cd:6f:38:7b:55:16:65:3f:b8:0a:62:5b:
         49:da:d3:bf:08:d4:98:3e:10:b8:b1:23:54:f2:4e:68:ce:eb:
         88:be:67:af:ac:54:24:11:cf:eb:17:17:05:bb:d5:b3:5f:5c:
         bb:c2:3c:98:e2:f7:dc:e0:fb:6b:e5:f7:2c:ac:e3:1b:a8:26:
         06:15:0a:1b:53:8a:55:ac:ca:51:89:9d:3c:3a:d2:d0:11:4d:
         af:fd:d1:d8:c1:a3:78:57:87:45:a6:4a:56:4d:d3:34:17:d9:
         c0:68:53:6d:8c:37:8f:c8:ec:e8:fa:e3:41:09:cc:25:66:07:
         ca:9a:d4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:45:42 2026 by rpki-client