Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203134363138.roa
File:                     323632303a3133343a363030633a3a2f34382d3438203d3e203134363138.roa (raw, json)
Hash identifier:          GtEWwDMgQeju6CvkFbcRn9dtsdYzlknw+cPwJjr8oXs=
Subject key identifier:   5C:93:F7:DA:44:B5:FE:35:A3:91:6C:A7:AA:FF:F6:89:B1:2F:CC:09
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       4F4AE97AF47472B658BD69DAEB9A8B8F59AC95A7
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203134363138.roa
Signing time:             Thu 19 Jun 2025 09:58:43 +0000
ROA not before:           Thu 19 Jun 2025 09:53:43 +0000
ROA not after:            Thu 18 Jun 2026 09:58:43 +0000
asID:                     14618
IP address blocks:        2620:134:600c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 14:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:4a:e9:7a:f4:74:72:b6:58:bd:69:da:eb:9a:8b:8f:59:ac:95:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun 19 09:53:43 2025 GMT
            Not After : Jun 18 09:58:43 2026 GMT
        Subject: CN=5C93F7DA44B5FE35A3916CA7AAFFF689B12FCC09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f6:ed:c8:8c:4b:3d:14:9a:60:c3:22:dd:8f:
                    03:83:3a:63:f5:1d:0f:9a:82:ef:95:7e:09:01:87:
                    25:7e:02:8c:18:35:bc:63:23:94:33:2f:e0:55:18:
                    92:1d:d0:b6:aa:55:de:61:15:a1:87:6d:ac:f0:43:
                    e8:90:9c:d1:2d:60:a1:1e:20:82:89:1a:7c:ec:65:
                    57:d6:87:54:8b:e3:72:50:e5:a1:00:12:75:3d:23:
                    b7:32:ce:25:7c:7c:6c:e5:fc:15:8d:eb:41:f3:9e:
                    ab:b9:7d:b8:59:3d:a6:b3:af:17:80:5b:1e:b5:65:
                    44:57:ae:c0:32:c9:c7:3c:d9:e9:93:15:aa:01:c6:
                    da:5f:0f:8b:32:57:50:1f:86:06:8a:27:db:3e:a3:
                    c3:72:0c:2f:c1:37:ce:b0:66:d2:1e:26:ff:64:9e:
                    ac:7a:07:9c:22:39:e0:25:86:2f:9a:b4:49:1d:8c:
                    df:b2:a9:c0:5c:97:ca:0c:d4:1c:87:89:f5:03:fe:
                    e6:56:d7:c0:54:12:ef:4a:2e:0a:b2:a3:4f:a1:52:
                    54:6c:c9:2e:45:02:32:60:a3:de:9a:b4:6d:ba:51:
                    f5:4b:7f:e9:b5:3e:23:ec:75:63:9e:c4:57:8e:f8:
                    bc:00:e7:de:77:6f:b3:80:38:15:80:92:be:83:56:
                    68:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:93:F7:DA:44:B5:FE:35:A3:91:6C:A7:AA:FF:F6:89:B1:2F:CC:09
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:600c::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:6f:20:46:60:68:f1:93:cc:8c:02:69:44:02:5b:77:e7:27:
         89:96:be:96:fc:f6:a3:d0:0f:0b:59:09:88:02:bf:df:60:78:
         43:b8:b0:8f:b3:7f:c1:d3:f0:ea:21:1f:90:25:43:89:53:21:
         61:81:4e:98:6d:ee:ba:43:54:a7:dc:39:e4:ae:82:38:66:c7:
         8a:0b:cd:c7:22:d8:3c:a8:0d:69:e9:5f:3f:dc:01:8e:41:e9:
         ad:43:c3:ab:db:a9:00:e9:82:ea:3e:ea:4e:21:39:13:eb:b2:
         9d:cf:ab:5f:02:86:68:ef:90:3c:c5:9c:28:a5:cc:7d:5a:a0:
         c9:40:dd:62:e3:f8:e9:a4:df:5b:6a:f8:d3:89:c4:1d:3b:54:
         9c:5f:12:f9:a2:91:10:14:30:9b:28:4c:64:64:dc:c5:a6:e6:
         86:4d:4f:66:66:22:05:fa:07:6f:6f:02:64:9a:9d:7c:27:e3:
         24:bf:86:a7:0c:6d:99:5d:80:8e:3d:db:53:5e:39:0d:4f:25:
         f4:c1:3d:1e:84:39:dc:91:b0:69:0c:35:09:7a:1c:7f:16:a2:
         08:4a:42:48:5f:54:9c:42:13:49:5d:c9:28:16:95:a0:35:cf:
         f9:57:01:2a:25:c5:fe:1c:c6:34:62:94:5b:c1:50:66:8c:86:
         11:4a:0a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 07:32:04 2025 by rpki-client