Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203330303331.roa
File:                     323632303a3133343a363030623a3a2f34382d3438203d3e203330303331.roa (raw, json)
Hash identifier:          Uu5+6k6wI4vCbU3bhAuMIadyllPChuogTkIAf5InsgM=
Subject key identifier:   75:AD:E8:7D:E6:27:36:F1:90:5E:93:54:5A:61:E8:4E:DF:D9:D3:EE
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       4E3E18F879E319F1484D1C1E9E8AB1D89C1D5878
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203330303331.roa
Signing time:             Thu 21 May 2026 10:15:46 +0000
ROA not before:           Thu 21 May 2026 10:10:46 +0000
ROA not after:            Thu 20 May 2027 10:15:46 +0000
asID:                     30031
IP address blocks:        2620:134:600b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 09:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:3e:18:f8:79:e3:19:f1:48:4d:1c:1e:9e:8a:b1:d8:9c:1d:58:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: May 21 10:10:46 2026 GMT
            Not After : May 20 10:15:46 2027 GMT
        Subject: CN=75ADE87DE62736F1905E93545A61E84EDFD9D3EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9c:43:21:66:69:3f:19:a6:47:1f:93:c1:9d:
                    ad:22:ef:b0:1a:24:fd:cc:01:61:69:bd:22:d2:c5:
                    37:06:ad:64:d4:9b:35:dd:20:c5:40:cf:e8:b3:bd:
                    cc:76:8c:91:d6:84:c3:6c:2f:0a:cd:ab:95:e7:df:
                    bc:7f:7f:ef:61:06:fd:76:55:18:c8:e7:14:fb:2a:
                    4e:69:45:3b:af:7a:14:14:ad:16:b1:3a:ba:ba:40:
                    b7:ca:c0:21:64:41:99:a4:17:5d:c2:b7:38:4a:e0:
                    69:87:a6:69:d6:56:19:10:93:bf:d9:cb:a3:41:2d:
                    db:13:a8:84:97:4b:b5:74:c3:39:ca:3c:1d:35:a3:
                    1a:8a:97:f6:62:ff:06:46:89:cb:de:8f:03:0c:30:
                    e0:4f:0d:98:62:fc:36:30:23:84:33:44:59:55:90:
                    da:f3:90:d5:0b:69:4d:11:11:9f:5a:8b:66:97:4b:
                    3d:e2:2a:4b:f2:90:aa:d9:97:b3:87:97:5a:0e:98:
                    bc:f7:c5:3d:56:ae:de:00:64:3e:34:30:aa:9d:09:
                    08:5a:7d:18:f1:7c:e8:93:ec:ee:e8:e1:44:ff:6d:
                    39:f0:40:fd:74:af:9e:a0:f6:ac:fa:57:39:f9:db:
                    7d:ae:2f:68:ab:e4:e1:f1:35:ad:db:85:b8:f2:d6:
                    1c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AD:E8:7D:E6:27:36:F1:90:5E:93:54:5A:61:E8:4E:DF:D9:D3:EE
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203330303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:600b::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:40:92:03:97:ff:57:d3:0e:d0:16:d5:24:6d:fb:a7:c2:0f:
         57:2d:25:9c:70:56:f1:d5:ad:9d:d3:39:2d:dd:88:07:4d:43:
         4b:96:de:b0:0c:dc:a8:8f:c0:29:02:d7:db:ad:be:36:53:d0:
         49:ce:63:da:4d:8e:f1:b3:be:55:2c:f2:81:a7:44:13:ff:6d:
         75:a8:0d:a4:f2:ca:b1:d9:fa:c3:ff:7b:63:11:d0:83:90:bb:
         3d:84:d3:18:19:a5:ab:28:b4:d2:80:b7:97:a1:68:a5:60:52:
         07:be:11:fa:0f:62:0f:79:28:53:e0:22:81:92:2b:11:5f:d9:
         0e:d1:a3:d5:4b:6d:f9:e7:8e:22:bd:cb:5c:81:0a:48:da:71:
         bf:6e:ef:2a:6b:05:00:e0:fa:17:7d:6f:da:e7:92:9c:31:ae:
         16:dc:6b:0f:f1:b7:b9:95:70:5d:a9:bd:84:2f:d1:79:ff:9c:
         08:38:e0:8c:5d:18:51:5e:75:fe:5d:7a:29:80:b9:a4:b6:f6:
         50:16:75:35:95:48:e1:53:2e:cc:43:a8:c5:3e:c8:21:92:51:
         fb:b5:98:5a:5a:70:c6:0d:f0:c8:2f:a0:70:71:d9:9f:84:0c:
         23:92:db:b5:d0:4c:94:63:79:21:34:68:a7:c2:08:1d:6d:e6:
         86:d0:16:1e
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgIUTj4Y+HnjGfFITRwenoqx2JwdWHgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJjNDY4MmE4Njll
NGM2OWFhZjEzMmE5YjEzN2YwHhcNMjYwNTIxMTAxMDQ2WhcNMjcwNTIwMTAxNTQ2
WjAzMTEwLwYDVQQDEyg3NUFERTg3REU2MjczNkYxOTA1RTkzNTQ1QTYxRTg0RURG
RDlEM0VFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pxDIWZpPxmm
Rx+TwZ2tIu+wGiT9zAFhab0i0sU3Bq1k1Js13SDFQM/os73MdoyR1oTDbC8KzauV
59+8f3/vYQb9dlUYyOcU+ypOaUU7r3oUFK0WsTq6ukC3ysAhZEGZpBddwrc4SuBp
h6Zp1lYZEJO/2cujQS3bE6iEl0u1dMM5yjwdNaMaipf2Yv8GRonL3o8DDDDgTw2Y
Yvw2MCOEM0RZVZDa85DVC2lNERGfWotml0s94ipL8pCq2Zezh5daDpi898U9Vq7e
AGQ+NDCqnQkIWn0Y8Xzok+zu6OFE/2058ED9dK+eoPas+lc5+dt9ri9oq+Th8TWt
24W48tYcowIDAQABo4ICkzCCAo8wHQYDVR0OBBYEFHWt6H3mJzbxkF6TVFph6E7f
2dPuMB8GA1UdIwQYMBaAFPZ+Ar7E3mHi61lTtdwzXlb/zc5wMA4GA1UdDwEB/wQE
AwIHgDByBgNVHR8EazBpMGegZaBjhmFyc3luYzovL3Jwa2kuc3ViLmFwbmljLm5l
dC9yZXBvc2l0b3J5L0E5MTkyQTk4MDAwMC80L0Y2N0UwMkJFQzRERTYxRTJFQjU5
NTNCNURDMzM1RTU2RkZDRENFNzAuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYI
KwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy
MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wODk4MjEwZC03MDAy
LTQzYjYtYjA1Yi1jMjc1NTBhMjliMzkvN2M0ZGJjYWJiOWEwNmRlODE2NWI0MGJj
NDY4MmE4NjllNGM2OWFhZjEzMmE5YjEzN2YuY2VyMIGUBggrBgEFBQcBCwSBhzCB
hDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8vcnBraS5zdWIuYXBuaWMubmV0L3JlcG9z
aXRvcnkvQTkxOTJBOTgwMDAwLzQvMzIzNjMyMzAzYTMxMzMzNDNhMzYzMDMwNjIz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzMwMzAzMzMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAB
NGALMA0GCSqGSIb3DQEBCwUAA4IBAQBqQJIDl/9X0w7QFtUkbfunwg9XLSWccFbx
1a2d0zkt3YgHTUNLlt6wDNyoj8ApAtfbrb42U9BJzmPaTY7xs75VLPKBp0QT/211
qA2k8sqx2frD/3tjEdCDkLs9hNMYGaWrKLTSgLeXoWilYFIHvhH6D2IPeShT4CKB
kisRX9kO0aPVS235544ivctcgQpI2nG/bu8qawUA4PoXfW/a55KcMa4W3GsP8be5
lXBdqb2EL9F5/5wIOOCMXRhRXnX+XXopgLmktvZQFnU1lUjhUy7MQ6jFPsghklH7
tZhaWnDGDfDIL6BwcdmfhAwjktu10EyUY3khNGinwggdbeaG0BYe
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:00:07 2026 by rpki-client