Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Simple/2/3130332e3232342e39322e302f32342d3234203d3e20323135333130.roa
File:                     3130332e3232342e39322e302f32342d3234203d3e20323135333130.roa (raw, json)
Hash identifier:          mK2/fl2wRWDPa+gVC6vrCk7+XxrJDEqbrKoDVJ/U7L4=
Subject key identifier:   E0:6A:2F:20:3C:7D:34:18:FF:D1:3C:48:B0:81:AC:A4:97:F7:7E:82
Certificate issuer:       /CN=A91E8DF50000/serialNumber=70610026C7F2A04E163D4FE5531D7BC46E7547C9
Certificate serial:       1ADBEAF77ACBC859A9D11FD815232B07DC1CE39D
Authority key identifier: 70:61:00:26:C7:F2:A0:4E:16:3D:4F:E5:53:1D:7B:C4:6E:75:47:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGEAJsfyoE4WPU_lUx17xG51R8k.cer
Subject info access:      rsync://rpki.co/repo/Simple/2/3130332e3232342e39322e302f32342d3234203d3e20323135333130.roa
Signing time:             Sat 23 Mar 2024 15:24:07 +0000
ROA not before:           Sat 23 Mar 2024 15:19:07 +0000
ROA not after:            Sat 22 Mar 2025 15:24:07 +0000
asID:                     215310
IP address blocks:        103.224.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.co/repo/Simple/2/70610026C7F2A04E163D4FE5531D7BC46E7547C9.crl
                          rsync://rpki.co/repo/Simple/2/70610026C7F2A04E163D4FE5531D7BC46E7547C9.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGEAJsfyoE4WPU_lUx17xG51R8k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 23:15:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:db:ea:f7:7a:cb:c8:59:a9:d1:1f:d8:15:23:2b:07:dc:1c:e3:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8DF50000/serialNumber=70610026C7F2A04E163D4FE5531D7BC46E7547C9
        Validity
            Not Before: Mar 23 15:19:07 2024 GMT
            Not After : Mar 22 15:24:07 2025 GMT
        Subject: CN=E06A2F203C7D3418FFD13C48B081ACA497F77E82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b5:a6:4d:e2:79:45:8f:e7:3a:1b:36:11:23:
                    3e:92:81:a1:e4:aa:39:8c:12:0a:35:3d:5a:0c:7a:
                    d2:18:25:d3:3b:e3:f7:bd:90:a5:3b:9e:06:ce:34:
                    dd:d0:88:14:66:69:17:91:15:84:40:7d:cc:67:e2:
                    f2:7e:c0:09:54:15:ca:37:e4:44:ed:78:93:0f:5c:
                    7b:ae:00:1d:dc:99:84:5a:37:36:74:e6:fe:6d:62:
                    e2:5b:f0:12:78:76:fe:37:b5:d8:5d:19:b8:a6:ac:
                    9a:30:03:8e:f6:e4:ef:a0:c9:5c:92:49:4c:6c:3d:
                    10:48:14:19:e8:52:d2:ef:0f:93:cb:0a:ad:1f:fa:
                    6d:78:24:53:a3:be:94:76:65:3b:7c:90:b3:b2:4c:
                    6f:8b:7a:66:54:37:1a:5a:a2:2b:c4:48:39:20:5e:
                    6b:89:ad:a7:85:4a:59:68:e9:bb:41:1d:ca:c4:9d:
                    6c:84:3d:34:f3:fa:90:87:68:0f:fb:34:6a:87:59:
                    75:11:59:81:23:f5:3b:20:de:65:d6:0f:58:f8:f3:
                    a0:83:ba:f3:ea:f9:a4:67:91:ab:c7:7e:21:a0:bf:
                    b4:45:fc:d6:42:1c:3c:53:72:ac:88:d2:aa:2a:2e:
                    80:fe:91:d1:db:81:b4:b2:f2:c4:0a:16:b4:d3:9f:
                    f5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6A:2F:20:3C:7D:34:18:FF:D1:3C:48:B0:81:AC:A4:97:F7:7E:82
            X509v3 Authority Key Identifier:
                keyid:70:61:00:26:C7:F2:A0:4E:16:3D:4F:E5:53:1D:7B:C4:6E:75:47:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Simple/2/70610026C7F2A04E163D4FE5531D7BC46E7547C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGEAJsfyoE4WPU_lUx17xG51R8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Simple/2/3130332e3232342e39322e302f32342d3234203d3e20323135333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:e1:69:55:2c:25:17:b2:55:97:80:ec:fa:e1:17:6c:d6:46:
         b3:e8:5d:34:18:01:0f:71:79:e9:9f:d6:92:2d:cb:1b:65:b6:
         87:22:5b:26:55:73:2f:cc:f5:da:69:08:a7:ab:4d:2b:5f:53:
         bc:2c:c2:30:ab:22:08:35:a9:25:8d:2a:e5:14:59:b2:0b:62:
         27:65:77:ab:9a:da:55:bf:7c:ba:e2:3d:df:57:b3:d3:17:d5:
         d1:e1:66:9a:eb:08:cd:3b:ea:29:75:d7:53:b6:28:d1:51:21:
         a5:4e:f5:15:f5:f7:56:5f:bb:62:52:e4:d1:06:da:ec:a0:82:
         75:57:1c:fc:15:c2:d1:c6:a4:8b:1f:0d:b9:57:3c:7d:fa:1e:
         e5:d4:ac:62:04:51:b4:ba:97:d7:b4:ec:a8:2c:67:d7:28:58:
         0f:98:10:54:14:25:63:37:10:09:a9:fd:e1:89:b1:e6:09:b5:
         93:01:ed:5e:95:2a:07:ea:a8:fd:9f:d8:25:af:15:71:2f:95:
         72:16:05:c6:b5:2c:b9:73:79:0a:a3:0f:93:c8:eb:b1:7f:eb:
         89:fd:e8:50:ff:1f:bf:3b:bc:99:eb:12:40:67:1a:6e:16:16:
         69:37:15:63:85:99:a0:d3:5f:30:df:98:7c:ee:e9:0c:5b:ff:
         77:55:ff:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 22:16:20 2024 by rpki-client on console-fra.rpki-client.org