Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Pong/1/326131323a646434373a353230303a3a2f34342d3434203d3e20323030313630.roa
File:                     326131323a646434373a353230303a3a2f34342d3434203d3e20323030313630.roa (raw, json)
Hash identifier:          b2lqJ3hbbCWKIEVkUStFxLiKQjRZ5D9ZcHI5TosrBtA=
Subject key identifier:   AD:E6:3B:A0:0F:F5:82:BB:50:31:8C:48:DE:24:FA:4A:2C:FE:6F:E1
Certificate issuer:       /CN=51E8BF04F872204D7BAF9626F16CDB039E3A2443
Certificate serial:       28EB63A140048ECCA768F40D1C0F8179E18C4FC7
Authority key identifier: 51:E8:BF:04:F8:72:20:4D:7B:AF:96:26:F1:6C:DB:03:9E:3A:24:43
Authority info access:    rsync://rpki.co/repo/AS945/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.cer
Subject info access:      rsync://rpki.co/repo/Pong/1/326131323a646434373a353230303a3a2f34342d3434203d3e20323030313630.roa
Signing time:             Thu 14 Mar 2024 10:14:08 +0000
ROA not before:           Thu 14 Mar 2024 10:09:08 +0000
ROA not after:            Thu 13 Mar 2025 10:14:08 +0000
asID:                     200160
IP address blocks:        2a12:dd47:5200::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki.co/repo/Pong/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.crl
                          rsync://rpki.co/repo/Pong/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.mft
                          rsync://rpki.co/repo/AS945/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.cer
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl
                          rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft
                          rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Apr 2024 02:04:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:eb:63:a1:40:04:8e:cc:a7:68:f4:0d:1c:0f:81:79:e1:8c:4f:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51E8BF04F872204D7BAF9626F16CDB039E3A2443
        Validity
            Not Before: Mar 14 10:09:08 2024 GMT
            Not After : Mar 13 10:14:08 2025 GMT
        Subject: CN=ADE63BA00FF582BB50318C48DE24FA4A2CFE6FE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:71:06:e4:d6:36:53:eb:0e:35:27:d5:52:65:
                    82:00:d6:a8:b9:54:03:c2:d7:c6:60:ed:f4:bc:bc:
                    68:ba:f6:6d:b5:45:a8:e1:42:4c:25:af:c7:cb:72:
                    f5:74:c9:ab:af:44:9e:6e:4a:de:d6:c4:4c:fc:9e:
                    7d:2e:6b:ad:60:2f:87:2c:03:da:23:92:90:9b:ab:
                    d1:db:8a:3f:b3:44:a6:a7:1d:13:10:7f:d3:dc:63:
                    03:df:b2:20:bb:9e:7d:f6:72:6a:05:74:57:11:13:
                    eb:2d:d5:d2:27:ee:dc:4e:1a:8a:41:0c:7f:df:71:
                    34:84:44:59:4d:cc:5b:ff:ad:18:1b:85:eb:dc:19:
                    7a:c5:5e:1c:7f:02:09:79:5f:14:43:53:f9:df:3f:
                    90:a3:a8:75:72:79:6b:3a:dd:e7:95:3c:2c:65:95:
                    36:f9:54:95:06:f5:21:9e:f5:cc:d3:19:39:7d:3d:
                    a9:d9:c4:d0:de:65:20:b7:ff:ad:53:a0:a8:77:64:
                    9d:27:e0:1c:a8:53:03:65:ec:2d:4e:34:f3:74:61:
                    12:5a:60:3a:94:cd:96:4c:44:a7:7b:31:d2:33:67:
                    a1:cb:d4:89:72:45:83:cd:0d:d2:77:50:c0:71:a2:
                    c2:85:de:62:4d:76:f4:4c:8d:d9:02:04:d3:e0:81:
                    57:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E6:3B:A0:0F:F5:82:BB:50:31:8C:48:DE:24:FA:4A:2C:FE:6F:E1
            X509v3 Authority Key Identifier:
                keyid:51:E8:BF:04:F8:72:20:4D:7B:AF:96:26:F1:6C:DB:03:9E:3A:24:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Pong/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/AS945/1/51E8BF04F872204D7BAF9626F16CDB039E3A2443.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Pong/1/326131323a646434373a353230303a3a2f34342d3434203d3e20323030313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:5200::/44

    Signature Algorithm: sha256WithRSAEncryption
         4e:10:35:c1:4c:d3:e5:f8:d8:6b:0a:21:2d:e1:d7:3b:a4:a7:
         06:80:8c:3e:54:9e:6b:fb:71:84:7b:8f:a6:ad:7f:89:ca:51:
         b7:f9:ee:77:3d:b3:77:c8:a5:47:42:5e:96:c2:95:46:f0:27:
         dd:cb:1e:f6:b1:00:fa:40:4e:6e:0d:22:f7:71:cf:27:d8:e8:
         e1:3d:5e:fe:f7:01:95:65:cf:7d:45:f5:f6:09:29:5d:83:3c:
         16:34:f2:7c:f1:5e:1b:1c:03:26:56:44:8c:20:2d:13:03:43:
         c0:7f:6d:ad:ac:2e:48:35:4a:a2:54:47:a4:a5:12:1c:28:b0:
         35:90:77:f6:f4:14:4a:73:7b:f1:81:51:6a:94:d8:23:7f:40:
         4e:ac:04:d5:d2:59:75:03:61:00:16:3f:be:7c:d1:86:e4:ff:
         5f:f2:32:16:d1:a8:ac:75:82:7e:bd:b7:f5:f8:2e:bb:e0:4b:
         5d:8a:66:40:fa:65:1a:94:1e:1f:88:5b:94:c5:68:cc:27:b4:
         8f:96:10:7d:0d:71:95:86:1f:14:09:37:30:50:4e:d2:fc:63:
         38:ec:37:bc:c0:52:3e:78:8f:dd:8b:cb:a1:f8:fd:ef:17:bc:
         95:a4:de:a4:21:ed:50:63:0d:12:b7:e0:ca:0b:3d:39:bc:36:
         af:ee:de:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 09:18:47 2024 by rpki-client on console-ams.rpki-client.org