Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030383a3a2f34382d3438203d3e203330303331.roa
File:                     323632303a3133343a363030383a3a2f34382d3438203d3e203330303331.roa (raw, json)
Hash identifier:          jxNGcVk1CB3i6G59jVjVHF1Vpm3pmkuwLmrfGlGOPSs=
Subject key identifier:   67:36:AB:83:EC:E7:22:B2:5C:FC:5B:35:FF:97:28:69:2A:29:B9:1F
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       7738696D5ACE8677ED4A62D23329D5A23D59CE5D
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030383a3a2f34382d3438203d3e203330303331.roa
Signing time:             Fri 05 Jun 2026 12:30:51 +0000
ROA not before:           Fri 05 Jun 2026 12:25:51 +0000
ROA not after:            Fri 04 Jun 2027 12:30:51 +0000
asID:                     30031
IP address blocks:        2620:134:6008::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 09:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:38:69:6d:5a:ce:86:77:ed:4a:62:d2:33:29:d5:a2:3d:59:ce:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun  5 12:25:51 2026 GMT
            Not After : Jun  4 12:30:51 2027 GMT
        Subject: CN=6736AB83ECE722B25CFC5B35FF9728692A29B91F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ea:c3:07:ec:05:03:06:f6:17:84:88:c2:d7:
                    a9:2b:a6:2d:28:ff:0d:2e:39:95:bb:7a:71:0a:80:
                    f5:9b:4d:2c:75:a5:a3:23:91:d8:d2:2b:69:6b:47:
                    19:dc:33:03:68:66:38:57:4b:e3:36:2b:66:ef:d3:
                    31:7d:92:2c:43:e1:91:1d:70:8d:1f:77:61:e0:4d:
                    6c:1a:4b:f6:2a:2a:96:54:06:6d:2c:06:c9:0c:d3:
                    cc:d8:6a:36:16:ef:31:b1:0d:9b:d8:88:91:6b:5c:
                    28:55:44:b0:da:df:41:8a:5d:50:f3:76:b0:ce:dd:
                    02:40:f3:8e:85:cf:b8:29:ff:db:c9:c1:e5:3f:6d:
                    09:4b:9c:1f:27:25:d3:ba:60:63:50:b9:69:97:56:
                    be:11:74:76:0e:04:0f:8f:01:67:24:ad:5f:04:81:
                    f1:04:12:a8:e6:4c:fb:83:f4:dc:dd:14:26:43:47:
                    22:77:30:28:72:05:c6:81:b7:24:48:21:ec:32:cf:
                    60:a4:4e:28:04:dd:89:63:3d:da:22:44:f2:6c:3b:
                    39:43:53:ee:07:ae:f8:e7:86:0e:ae:88:e3:ad:16:
                    f7:93:42:74:98:d8:ff:a6:78:94:da:46:51:1e:e3:
                    b8:cc:0a:30:ba:79:54:30:27:73:e1:ef:b0:c0:56:
                    63:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:36:AB:83:EC:E7:22:B2:5C:FC:5B:35:FF:97:28:69:2A:29:B9:1F
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030383a3a2f34382d3438203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:6008::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:c1:77:7d:7e:3e:fe:56:ef:79:be:a4:ce:f0:b2:54:62:e2:
         d4:65:34:9e:ec:f6:12:33:aa:0a:6e:49:83:da:8b:dd:6f:62:
         5e:f6:aa:cf:51:1b:ce:77:03:5e:a7:c7:92:ec:a0:cb:c9:9c:
         e0:27:9b:14:d0:d8:b6:bb:38:f0:2a:20:20:0c:7a:84:b7:63:
         d4:48:4d:93:1f:92:0b:ab:51:9d:a0:7a:e4:77:98:bc:5a:9b:
         01:97:e2:77:6c:40:df:df:37:5a:0d:95:c3:2d:0e:ba:e4:b3:
         84:a0:54:f0:8e:c2:03:c6:73:c2:d7:b6:93:02:ee:af:18:dd:
         ee:e8:43:75:d4:58:e3:56:51:09:22:9a:9f:a7:45:85:59:e7:
         89:c9:d0:c3:07:e6:12:7d:8f:af:66:b3:d4:6d:28:42:0c:4e:
         80:e4:e4:09:83:fe:50:3b:e9:e4:35:d0:3f:d1:b2:6b:9e:4f:
         a1:1f:32:bf:9f:84:cd:4b:a9:3f:8d:c8:c0:07:87:bd:38:37:
         f9:5f:39:75:09:0c:c3:34:99:0b:3f:ef:13:80:17:02:27:e7:
         b1:e7:42:be:ac:a2:95:f6:02:b9:75:4a:49:21:ec:07:3a:6f:
         20:f9:fa:c9:e9:ef:b4:51:d3:ea:7b:e6:88:4c:66:f8:94:50:
         9e:ee:ca:bb
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIUdzhpbVrOhnftSmLSMynVoj1Zzl0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjYwNjA1MTIyNTUxWhcNMjcwNjA0MTIzMDUx
WjAzMTEwLwYDVQQDEyg2NzM2QUI4M0VDRTcyMkIyNUNGQzVCMzVGRjk3Mjg2OTJB
MjlCOTFGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyerDB+wFAwb2
F4SIwtepK6YtKP8NLjmVu3pxCoD1m00sdaWjI5HY0itpa0cZ3DMDaGY4V0vjNitm
79MxfZIsQ+GRHXCNH3dh4E1sGkv2KiqWVAZtLAbJDNPM2Go2Fu8xsQ2b2IiRa1wo
VUSw2t9Bil1Q83awzt0CQPOOhc+4Kf/bycHlP20JS5wfJyXTumBjULlpl1a+EXR2
DgQPjwFnJK1fBIHxBBKo5kz7g/Tc3RQmQ0cidzAocgXGgbckSCHsMs9gpE4oBN2J
Yz3aIkTybDs5Q1PuB67454YOrojjrRb3k0J0mNj/pniU2kZRHuO4zAowunlUMCdz
4e+wwFZjEQIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFGc2q4Ps5yKyXPxbNf+XKGkq
KbkfMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGUBggrBgEFBQcBCwSBhzCB
hDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQTkxOTJBOTgwMDAwLzQvMzIzNjMyMzAzYTMxMzMzNDNhMzYzMDMwMzgz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB
NGAIMA0GCSqGSIb3DQEBCwUAA4IBAQAawXd9fj7+Vu95vqTO8LJUYuLUZTSe7PYS
M6oKbkmD2ovdb2Je9qrPURvOdwNep8eS7KDLyZzgJ5sU0Ni2uzjwKiAgDHqEt2PU
SE2TH5ILq1GdoHrkd5i8WpsBl+J3bEDf3zdaDZXDLQ665LOEoFTwjsIDxnPC17aT
Au6vGN3u6EN11FjjVlEJIpqfp0WFWeeJydDDB+YSfY+vZrPUbShCDE6A5OQJg/5Q
O+nkNdA/0bJrnk+hHzK/n4TNS6k/jcjAB4e9ODf5Xzl1CQzDNJkLP+8TgBcCJ+ex
50K+rKKV9gK5dUpJIewHOm8g+frJ6e+0UdPqe+aITGb4lFCe7sq7
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:00:02 2026 by rpki-client