Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203136353039.roa
File:                     323632303a3133343a363030633a3a2f34382d3438203d3e203136353039.roa (raw, json)
Hash identifier:          JWgUQCF8NRtT9to3MFCzHuKRKugddB4AJHSNIanjIgA=
Subject key identifier:   77:F8:71:EB:11:53:0C:2B:6C:D2:12:45:13:B0:B3:51:21:1B:9A:E8
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       05950E33FD41E13FF1657C8FCD11FB4A13891683
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203136353039.roa
Signing time:             Thu 21 May 2026 10:15:46 +0000
ROA not before:           Thu 21 May 2026 10:10:46 +0000
ROA not after:            Thu 20 May 2027 10:15:46 +0000
asID:                     16509
IP address blocks:        2620:134:600c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 03:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:95:0e:33:fd:41:e1:3f:f1:65:7c:8f:cd:11:fb:4a:13:89:16:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: May 21 10:10:46 2026 GMT
            Not After : May 20 10:15:46 2027 GMT
        Subject: CN=77F871EB11530C2B6CD2124513B0B351211B9AE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5b:c2:72:91:54:20:7d:79:fb:4c:0b:b3:16:
                    58:9b:57:af:da:36:cd:00:2a:2c:06:2b:04:18:95:
                    86:af:43:23:b6:1f:5f:bd:fc:b2:1b:d3:29:02:76:
                    01:8c:56:2b:ab:a2:db:f1:89:c3:bf:59:d3:7a:95:
                    0f:48:ae:a8:c2:b4:49:2e:d6:ee:eb:46:6e:e5:1f:
                    bd:b2:a2:ac:6d:70:1d:84:8a:d8:b0:c0:b3:41:d7:
                    bc:f9:e6:fb:e3:82:af:ae:10:5d:4c:7c:89:01:27:
                    95:70:41:7a:72:1a:62:90:c6:45:6e:7a:21:91:ed:
                    ec:29:62:c3:d8:76:8d:eb:44:1d:b0:5d:23:b9:56:
                    14:64:0e:1f:78:4b:37:a6:d2:97:c7:a0:cb:87:93:
                    df:4c:3c:82:6f:18:27:8f:a3:13:07:e2:d0:30:04:
                    10:5c:b0:5b:7c:ba:ec:0a:53:57:07:d6:2f:85:62:
                    01:15:85:66:2f:dc:d4:a4:f8:6a:0c:bc:3c:d1:8d:
                    a8:75:ec:1d:19:a1:22:7c:53:06:ff:46:86:e6:50:
                    57:0f:fb:42:99:be:69:05:0b:f8:42:20:46:23:0f:
                    fb:42:08:3f:21:25:19:b2:f3:be:fc:f1:71:f2:47:
                    47:8a:0c:1b:cf:9a:5f:42:be:2b:d7:94:f4:01:e8:
                    f9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F8:71:EB:11:53:0C:2B:6C:D2:12:45:13:B0:B3:51:21:1B:9A:E8
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:600c::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:a1:0a:64:dd:6a:83:21:93:f7:6a:15:df:39:48:4d:10:31:
         04:3f:d4:6b:40:0c:a1:f8:cd:59:f5:2f:e0:18:e0:97:49:d9:
         e6:1e:71:45:9b:14:2e:e6:97:3b:40:da:76:d4:a1:0e:3b:87:
         74:72:ee:13:5d:b8:c9:fc:49:e7:3f:5d:b3:58:ff:79:d2:cd:
         72:db:51:20:e9:df:d6:23:f1:37:b8:51:b2:dc:5e:e1:f8:6d:
         b1:98:fc:0b:23:06:94:7a:c0:c1:38:ad:c7:a7:81:64:27:63:
         c1:56:65:72:2f:be:0f:34:87:cf:6d:48:37:3c:6d:12:20:a2:
         ba:29:48:68:13:6f:78:10:36:47:dd:3f:8a:0a:e0:6b:a6:dd:
         76:9f:0b:9d:25:2f:ec:f7:e2:06:ee:10:de:fe:7c:05:26:c5:
         ae:60:18:9c:ed:53:9f:c5:61:b9:62:ec:f3:90:9b:48:0f:b8:
         a1:86:9e:03:1a:a6:90:34:46:b1:c7:28:57:0c:d8:4d:9e:96:
         37:f8:07:ff:08:15:3d:48:f4:62:49:f0:93:f5:ac:cd:a5:01:
         8a:12:fa:f1:bd:1e:86:d6:63:fc:6f:9b:f7:d9:09:c3:c2:c0:
         ba:51:11:2b:bd:81:30:44:59:00:6d:98:e3:13:32:36:8f:59:
         d9:32:c1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:00:45 2026 by rpki-client