Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203333353338.roa
File:                     323632303a3133343a363030633a3a2f34382d3438203d3e203333353338.roa (raw, json)
Hash identifier:          7Wq4Nw5pJn9fYBIiyOTg4UbDRnnbzBOStkWW78XUutI=
Subject key identifier:   37:45:08:75:F8:5A:D7:14:57:3A:38:94:EF:62:B9:BB:4C:44:A2:5A
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       1156877671773444B42A438B6FA6311E86BA9259
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203333353338.roa
Signing time:             Thu 21 May 2026 10:15:46 +0000
ROA not before:           Thu 21 May 2026 10:10:46 +0000
ROA not after:            Thu 20 May 2027 10:15:46 +0000
asID:                     33538
IP address blocks:        2620:134:600c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Jun 2026 03:46:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:56:87:76:71:77:34:44:b4:2a:43:8b:6f:a6:31:1e:86:ba:92:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: May 21 10:10:46 2026 GMT
            Not After : May 20 10:15:46 2027 GMT
        Subject: CN=37450875F85AD714573A3894EF62B9BB4C44A25A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d1:c2:ec:db:4b:77:c3:e4:07:d2:1f:4c:09:
                    35:94:dd:db:22:77:d0:bd:8e:52:a5:15:ff:e7:c3:
                    81:0c:1f:b2:68:74:e4:1e:b8:5b:2f:27:c9:3a:be:
                    95:01:d9:f4:a8:42:1d:f3:bf:03:ca:ae:6a:0c:ac:
                    78:1e:57:8c:d4:58:42:a6:e8:44:c4:50:c8:e4:03:
                    5c:88:d7:43:66:40:ab:b0:1f:11:f0:b2:d4:f5:3e:
                    6a:82:c5:8d:81:b8:ad:09:da:d5:8d:98:6f:97:d9:
                    84:15:f1:0d:5f:8a:53:68:66:d6:19:7d:c8:ac:bc:
                    17:24:44:9f:fb:c8:44:d3:11:2c:38:cb:3a:09:86:
                    83:0a:e5:d9:29:b5:34:fd:8d:6f:45:0f:c9:7c:76:
                    33:7f:d2:79:56:fe:19:ce:be:0d:bf:8f:3c:3e:a9:
                    d8:a9:c3:2d:31:a3:3b:c0:ce:76:e7:5f:6f:6a:f5:
                    4d:7b:eb:e0:00:b3:f5:8b:50:c8:72:ff:d2:a3:63:
                    a7:a3:7e:bc:7c:55:29:0f:5c:d6:bb:b4:4f:5a:21:
                    52:e5:3c:b2:c1:9c:9c:e9:17:f4:e3:26:fd:5a:63:
                    4a:af:76:e8:9d:f2:32:27:89:99:d0:3e:2a:11:12:
                    3f:df:08:e4:7a:5f:f2:40:81:c1:71:b4:6f:4d:a3:
                    59:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:45:08:75:F8:5A:D7:14:57:3A:38:94:EF:62:B9:BB:4C:44:A2:5A
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203333353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:600c::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:41:2d:c1:a0:e2:8c:ba:c8:7e:51:e5:32:19:6b:5e:1c:4d:
         e0:b1:a9:81:5a:0d:87:c0:16:2e:fd:78:45:9d:f2:03:8a:e5:
         84:ac:ab:3b:00:de:ee:a7:15:2a:1b:89:95:21:4d:d2:84:e4:
         a5:bd:84:22:c4:97:60:91:72:60:2e:37:2c:39:7a:0c:47:9f:
         3d:56:92:f7:9a:7b:c7:54:26:c0:d9:ff:e4:1d:b7:63:d2:24:
         cb:a6:15:4d:e6:6c:5f:ca:15:64:5e:26:f9:3d:47:03:88:b0:
         ef:72:75:d5:70:bd:29:a6:f6:1c:e9:31:bd:46:46:d8:2a:6f:
         2b:87:e4:ef:92:61:67:40:fe:3b:90:62:0f:fd:68:02:77:ae:
         a7:e1:e2:40:0f:c1:72:22:76:19:a7:84:33:91:aa:7e:e2:12:
         46:e7:98:42:ca:27:e7:ce:86:58:75:cb:7a:80:88:ad:80:53:
         08:26:2b:59:5b:56:16:1c:27:02:0b:42:3e:ce:77:63:60:cb:
         6f:68:42:70:b2:0c:f5:9c:17:57:52:1d:fd:d4:95:ac:b0:d3:
         50:a6:b8:a7:a9:a8:2f:91:3e:67:73:ec:f7:80:05:f6:87:ba:
         72:76:0e:9d:5f:2d:27:6b:32:39:62:88:db:9e:2c:c4:e0:7a:
         2f:97:ee:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:01:08 2026 by rpki-client