Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203333353338.roa
File:                     323632303a3133343a363030633a3a2f34382d3438203d3e203333353338.roa (raw, json)
Hash identifier:          iNGD5HwF4GsejdV42P56Wt2HXUGIZGPSDkP+3R9Qhkw=
Subject key identifier:   08:DB:7D:54:40:AD:1E:4C:90:28:40:3A:21:9B:AC:89:FD:39:A8:B1
Certificate issuer:       /CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
Certificate serial:       31A1FAD6452112613592489AC114940BA620AAA8
Authority key identifier: F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203333353338.roa
Signing time:             Thu 19 Jun 2025 09:58:43 +0000
ROA not before:           Thu 19 Jun 2025 09:53:43 +0000
ROA not after:            Thu 18 Jun 2026 09:58:43 +0000
asID:                     33538
IP address blocks:        2620:134:600c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/0898210d-7002-43b6-b05b-c27550a29b39.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 14:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a1:fa:d6:45:21:12:61:35:92:48:9a:c1:14:94:0b:a6:20:aa:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f
        Validity
            Not Before: Jun 19 09:53:43 2025 GMT
            Not After : Jun 18 09:58:43 2026 GMT
        Subject: CN=08DB7D5440AD1E4C9028403A219BAC89FD39A8B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:1c:98:9d:f5:47:19:d6:2b:ac:95:eb:7e:dc:
                    90:84:e4:5f:ba:9e:08:21:b8:41:7e:5b:6c:eb:11:
                    18:0c:17:f8:cf:cb:aa:69:4e:15:69:a5:4c:e5:06:
                    ae:82:ed:82:96:f0:08:fa:8a:cd:e7:ed:f7:ef:83:
                    f3:6e:4b:09:29:0e:6d:66:09:ff:c0:02:84:e5:be:
                    ad:6c:18:18:b6:29:45:1f:a2:44:52:51:6c:93:db:
                    e0:56:ef:26:4d:1c:a5:6b:f8:f0:95:e5:9a:6f:cb:
                    bb:e8:d7:3a:84:7a:5b:8d:d7:f2:1a:57:2d:81:0e:
                    c3:0b:b5:79:6b:1c:f1:e1:ec:62:d4:f7:ea:f1:d2:
                    9b:f1:59:cf:93:5d:b3:0f:cf:8f:49:97:b9:17:84:
                    00:68:d0:d2:06:42:14:9c:3e:57:71:56:c4:39:e6:
                    14:16:97:17:60:54:fe:5e:40:dc:c4:74:54:ee:b1:
                    59:9a:32:91:5a:0a:cf:91:9a:b4:f2:f9:19:e8:a8:
                    8a:49:ec:06:27:cb:46:f3:f6:1b:de:3a:5f:0f:11:
                    16:97:48:00:f5:cd:de:c5:d0:6e:c9:82:4c:21:e1:
                    e4:fc:e8:3d:ca:3a:10:8d:81:e3:c8:f3:dd:0a:88:
                    76:1e:26:ff:af:ae:26:52:c8:c8:93:2c:86:8d:1d:
                    00:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DB:7D:54:40:AD:1E:4C:90:28:40:3A:21:9B:AC:89:FD:39:A8:B1
            X509v3 Authority Key Identifier:
                keyid:F6:7E:02:BE:C4:DE:61:E2:EB:59:53:B5:DC:33:5E:56:FF:CD:CE:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/F67E02BEC4DE61E2EB5953B5DC335E56FFCDCE70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0898210d-7002-43b6-b05b-c27550a29b39/7c4dbcabb9a06de8165b40bc4682a869e4c69aaf132a9b137f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/4/323632303a3133343a363030633a3a2f34382d3438203d3e203333353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:134:600c::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:9b:a1:18:5f:14:e3:af:83:ff:18:90:bb:b3:ab:ed:20:7a:
         09:e5:09:de:40:6f:44:fd:96:65:e4:db:df:d1:95:30:12:14:
         a9:ef:65:1c:b3:3b:69:bc:23:f4:ff:e3:ac:c8:a1:2a:4f:75:
         4f:6e:ca:e3:12:88:8a:3d:4d:c8:8a:14:76:06:42:01:74:53:
         13:74:c2:49:86:d6:2a:dd:5d:1b:57:c2:26:83:1e:99:97:fc:
         97:b8:40:a0:01:9a:80:62:fe:0a:41:da:cf:35:78:67:26:63:
         5f:74:cb:f1:a9:dc:44:71:6a:e0:96:ae:18:70:1b:05:0a:a7:
         c4:c8:e6:e7:a6:2c:b2:1f:d4:46:3b:4d:30:e1:58:cb:f1:4e:
         80:80:01:df:1a:d5:09:e5:e1:b5:76:ad:48:87:8f:ef:6f:42:
         4a:ad:62:29:24:e6:54:6d:20:65:e7:57:83:31:b9:71:f5:5f:
         86:ee:e7:f2:d4:5d:96:42:57:bb:36:d7:49:67:98:cb:f8:63:
         7d:e8:71:f9:ee:fc:1a:59:fe:45:05:32:74:4f:5f:a7:02:c2:
         6f:6c:f4:3f:7d:8c:12:19:21:43:ae:aa:c7:34:bf:89:fe:72:
         3e:32:fc:fa:a8:cc:fd:0b:9c:94:4b:f4:15:62:b2:f8:8b:3a:
         cd:35:3e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:03:19 2025 by rpki-client