Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203134363138.roa
File:                     323632303a3133343a363030623a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          DkA031z06DKoWtgFy4I5ejT9BclbI64PcrpAp4u1VGY=
Subject key identifier:   E1:FC:33:78:FE:8B:BB:ED:12:BB:14:32:4E:7D:FF:29:4A:3B:42:8F
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       49093FFC3FE6C1A6EE491EDB02FB73251A3D91FE
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203134363138.roa
Signing time:             Thu 19 Jun 2025 09:58:43 +0000
ROA not before:           Thu 19 Jun 2025 09:53:43 +0000
ROA not after:            Thu 18 Jun 2026 09:58:43 +0000
asID:                     14618
IP address blocks:        2620:134:600b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 09:22:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:09:3f:fc:3f:e6:c1:a6:ee:49:1e:db:02:fb:73:25:1a:3d:91:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun 19 09:53:43 2025 GMT
            Not After : Jun 18 09:58:43 2026 GMT
        Subject: CN=E1FC3378FE8BBBED12BB14324E7DFF294A3B428F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:cc:33:8c:f8:7e:29:cd:b4:5e:5f:b5:d7:
                    7e:68:92:b4:91:f9:ca:e5:25:0e:b5:52:9e:3d:7d:
                    86:38:4b:83:83:6c:eb:be:f1:19:a3:60:c5:cc:50:
                    d7:0b:c2:25:cc:39:6d:9b:ae:70:a7:37:4f:d6:a4:
                    05:49:fb:81:ec:c9:af:ce:97:49:76:91:26:0b:1e:
                    5d:ac:b7:86:dd:af:b4:5c:cb:0c:53:48:9c:2a:93:
                    f5:bb:c8:c0:34:19:23:36:05:79:df:9b:a4:1c:9a:
                    ca:09:75:80:db:5d:03:22:b2:c1:92:56:48:b2:c3:
                    30:07:dc:d5:c5:8e:c1:86:3f:df:71:f6:3f:37:81:
                    28:ee:11:b7:78:72:dc:da:61:8e:3e:9c:ce:0d:aa:
                    cc:08:3f:96:db:a0:d8:47:06:a6:66:06:56:96:c2:
                    4a:ae:e6:cb:14:97:5d:db:d6:8e:a2:d1:53:25:83:
                    f9:06:6e:a4:36:46:82:9e:97:3b:df:0e:fb:39:0f:
                    29:c3:e2:9d:90:e5:db:fa:f1:ec:c6:57:16:08:d6:
                    66:b0:78:1f:b9:6e:a9:00:be:41:7a:ef:ca:c2:ce:
                    ac:0c:fa:80:c9:28:c9:7b:8b:80:f8:97:08:68:70:
                    ce:03:66:d1:f2:94:b3:40:a0:24:e8:eb:2b:14:a5:
                    52:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FC:33:78:FE:8B:BB:ED:12:BB:14:32:4E:7D:FF:29:4A:3B:42:8F
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030623a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:600b::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:4f:56:a4:50:53:b8:92:08:ff:25:bf:45:0f:8e:80:6e:01:
         53:48:38:6e:48:70:89:55:54:e2:76:75:b4:e1:7b:e7:27:67:
         6d:9f:cb:76:4a:08:8d:5c:d1:ee:38:4d:6d:8e:cd:1f:31:fe:
         e9:b0:a1:2c:f1:ec:73:ee:c6:b0:60:9b:cd:82:80:5d:ce:4b:
         11:e0:20:9c:ca:68:be:f3:fe:e0:f3:7f:62:f8:97:1d:cc:0c:
         f0:c7:ca:79:e1:d1:5b:8e:2b:95:1c:d0:7e:3e:8f:90:97:a4:
         b9:57:e4:55:a5:e0:df:e8:c7:9d:4d:ba:ee:56:e0:2e:f8:5a:
         c5:4d:69:16:b5:0f:20:20:66:62:1f:25:c1:74:ee:84:aa:36:
         67:9d:43:66:12:27:8a:f1:ae:d7:e3:1a:c9:ba:8a:66:ff:81:
         1b:8e:b8:33:30:cd:73:1c:ed:4a:a9:51:b1:1e:16:49:15:72:
         55:ef:d1:d8:0b:20:05:bf:6a:32:0b:6d:dd:b3:a9:42:c2:d3:
         ac:3e:1f:2e:23:d3:7a:b8:a2:72:de:e3:b5:38:ea:e8:08:c0:
         77:95:b6:15:9e:82:79:8e:6c:eb:cf:1e:5e:7f:15:09:9d:11:
         ef:db:8d:4d:23:62:67:a7:7c:e5:50:58:e9:84:41:d6:dd:28:
         73:13:6d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 15:39:04 2025 by rpki-client