Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e203136353039.roa
File:                     3231362e3134352e3231372e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          DIFhYB+rwdNqoj4IKoh0IuL1WWbcTSa5BAvOz45bxVc=
Subject key identifier:   16:56:AD:99:12:C7:7D:6E:BA:01:5D:F3:D9:DF:C6:F1:F6:18:AF:5F
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       041593963DBA56A174FFA68DCEDF0A7556852BBE
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e203136353039.roa
Signing time:             Wed 18 Jun 2025 13:58:21 +0000
ROA not before:           Wed 18 Jun 2025 13:53:21 +0000
ROA not after:            Wed 17 Jun 2026 13:58:21 +0000
asID:                     16509
IP address blocks:        216.145.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 03:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:15:93:96:3d:ba:56:a1:74:ff:a6:8d:ce:df:0a:75:56:85:2b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun 18 13:53:21 2025 GMT
            Not After : Jun 17 13:58:21 2026 GMT
        Subject: CN=1656AD9912C77D6EBA015DF3D9DFC6F1F618AF5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1d:c5:07:ea:40:b7:e8:45:85:b4:b0:a1:78:
                    af:5d:3d:45:57:e9:4b:d2:9f:d3:b7:73:21:c1:54:
                    b5:3f:a9:3b:1f:4f:92:13:6c:73:b9:27:10:c1:9e:
                    ff:3b:bd:ac:f2:a3:eb:99:f9:fc:0d:2f:10:e4:17:
                    5d:d0:7e:57:c9:c3:ec:af:58:e0:6e:30:38:7d:e1:
                    2d:e4:8a:9d:b4:25:5d:e9:cc:97:5c:79:7d:cb:61:
                    30:e7:10:6e:a9:a1:55:54:51:43:51:f2:a9:2f:bd:
                    3a:1b:1d:80:05:b8:d7:5e:67:14:8a:3b:fa:08:4b:
                    48:d5:82:c0:dc:c1:e7:6f:8f:9c:93:bd:49:0a:ec:
                    11:be:43:ba:3c:ab:a2:7b:ff:4e:50:fe:da:32:01:
                    42:c7:a5:af:9a:91:39:f7:e2:42:23:3f:c1:9b:01:
                    06:96:a9:cf:51:88:61:d4:7b:35:6e:18:60:f3:9c:
                    2c:2e:36:30:7d:b7:20:16:b3:ba:a7:26:0f:d0:0d:
                    09:ea:76:2b:86:3b:ad:48:71:a9:c2:f3:26:90:5b:
                    49:c8:5c:6f:f4:6e:a1:9b:25:52:b8:54:f4:9b:ed:
                    36:52:59:ff:e2:86:d8:29:3e:f9:86:a1:48:6a:bc:
                    96:85:71:e4:0e:9a:a5:1e:04:40:09:e6:8f:1e:77:
                    e6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:56:AD:99:12:C7:7D:6E:BA:01:5D:F3:D9:DF:C6:F1:F6:18:AF:5F
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/3231362e3134352e3231372e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.145.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:91:75:b8:2d:11:41:9f:8d:96:13:62:3b:20:8c:45:d3:04:
         d7:bd:10:05:fe:45:6f:74:11:19:3a:7b:6d:0c:08:7b:94:fd:
         22:da:09:99:78:02:69:53:3d:98:78:d3:2e:c1:9c:18:ec:0b:
         1e:c0:70:03:33:36:ee:ec:8d:8a:1b:35:39:a1:0b:44:e8:e1:
         f1:dc:8a:ef:f5:be:33:31:cf:82:9d:ab:8f:d6:09:a9:1c:58:
         9c:a3:15:5f:5f:58:91:e4:69:6d:d6:f9:81:73:f4:03:b3:b0:
         86:d6:95:02:2c:0a:da:e7:b8:c6:e4:cd:cd:2e:03:e9:c1:cf:
         1c:94:8f:09:b8:81:68:df:26:82:5e:d5:6a:6f:61:86:63:aa:
         30:43:55:36:e9:27:e2:3e:ea:81:ef:26:bf:38:cc:30:37:d5:
         e1:ae:37:44:a3:2e:0d:88:d8:e2:c5:7e:33:36:25:bb:96:49:
         07:40:5d:1b:a8:9c:52:58:da:ec:ef:18:41:a8:08:32:df:f9:
         9e:1c:86:3f:56:25:5f:4e:3f:42:5f:b8:f3:f4:b5:7b:65:65:
         ab:d7:ed:28:a1:41:99:5a:27:43:7f:90:b1:f5:a4:d4:1e:f3:
         a5:7e:8d:e6:ea:11:cd:be:c9:1e:9e:01:01:aa:75:fa:63:3f:
         06:16:c2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 02:20:17 2025 by rpki-client