Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Simple/2/3130332e3232342e39322e302f32342d3234203d3e203332353935.roa
File:                     3130332e3232342e39322e302f32342d3234203d3e203332353935.roa (raw, json)
Hash identifier:          nypk/ixJOTU8ADWTMPq4+8d3pjfOmmIAowX6Mk4OiJA=
Subject key identifier:   72:5B:AD:4F:1E:F1:26:F5:6A:B5:BE:07:03:69:FF:F3:07:99:F4:4F
Certificate issuer:       /CN=A91E8DF50000/serialNumber=70610026C7F2A04E163D4FE5531D7BC46E7547C9
Certificate serial:       5810A20B728C493BC50BEBFC67BE01EC321FCFD1
Authority key identifier: 70:61:00:26:C7:F2:A0:4E:16:3D:4F:E5:53:1D:7B:C4:6E:75:47:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGEAJsfyoE4WPU_lUx17xG51R8k.cer
Subject info access:      rsync://rpki.co/repo/Simple/2/3130332e3232342e39322e302f32342d3234203d3e203332353935.roa
Signing time:             Tue 16 Jul 2024 13:26:11 +0000
ROA not before:           Tue 16 Jul 2024 13:21:11 +0000
ROA not after:            Tue 15 Jul 2025 13:26:11 +0000
asID:                     32595
IP address blocks:        103.224.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.co/repo/Simple/2/70610026C7F2A04E163D4FE5531D7BC46E7547C9.crl
                          rsync://rpki.co/repo/Simple/2/70610026C7F2A04E163D4FE5531D7BC46E7547C9.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGEAJsfyoE4WPU_lUx17xG51R8k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 08:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:10:a2:0b:72:8c:49:3b:c5:0b:eb:fc:67:be:01:ec:32:1f:cf:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8DF50000/serialNumber=70610026C7F2A04E163D4FE5531D7BC46E7547C9
        Validity
            Not Before: Jul 16 13:21:11 2024 GMT
            Not After : Jul 15 13:26:11 2025 GMT
        Subject: CN=725BAD4F1EF126F56AB5BE070369FFF30799F44F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:33:45:4f:66:d1:89:ce:54:a9:a8:a6:3b:b6:
                    ea:f8:9e:fd:34:d8:58:5e:53:57:f7:78:6e:45:17:
                    c3:2c:35:0b:d3:2f:5d:6b:23:b0:bc:f6:5f:a4:10:
                    05:f7:1a:4b:f6:15:24:96:17:87:b5:cc:f8:ec:51:
                    15:02:51:ff:fa:ba:d0:c5:59:5f:dc:f2:ef:4d:d0:
                    12:3f:00:5b:0f:c0:26:63:6f:46:2f:2f:03:b9:75:
                    94:3a:41:f5:a1:0c:6e:c5:3f:80:cb:e6:db:e1:73:
                    73:b9:5d:01:a7:7b:7d:96:90:6e:cb:9c:ea:a8:e4:
                    03:31:11:f7:ef:30:97:b1:47:da:66:e0:60:08:9b:
                    f9:56:bd:19:2a:c8:a4:6f:eb:ce:05:21:06:68:74:
                    cb:ed:7f:98:3a:2f:30:cf:8b:5e:c4:76:9d:b4:29:
                    f0:d4:fe:08:45:26:c4:ab:a9:60:a3:00:e3:e4:c2:
                    2c:1b:50:90:9f:bc:de:de:40:24:17:7b:3d:b5:65:
                    13:52:5f:50:69:17:c3:ea:60:99:99:03:01:a2:ac:
                    d4:cf:9a:26:00:22:b4:a5:d3:02:19:37:e7:e8:07:
                    e4:f5:54:d8:1b:29:0e:31:7d:8a:45:0d:b9:97:b4:
                    2c:f5:f2:11:71:87:ec:06:ae:3f:d3:d5:3a:cc:4f:
                    58:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5B:AD:4F:1E:F1:26:F5:6A:B5:BE:07:03:69:FF:F3:07:99:F4:4F
            X509v3 Authority Key Identifier:
                keyid:70:61:00:26:C7:F2:A0:4E:16:3D:4F:E5:53:1D:7B:C4:6E:75:47:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Simple/2/70610026C7F2A04E163D4FE5531D7BC46E7547C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cGEAJsfyoE4WPU_lUx17xG51R8k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Simple/2/3130332e3232342e39322e302f32342d3234203d3e203332353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:45:1e:5d:9d:6f:63:93:32:06:74:35:2e:02:d5:48:eb:3a:
         02:94:e5:87:fd:06:3a:d6:1b:cb:f8:f1:59:5a:6f:75:ab:74:
         02:4d:7f:6c:95:09:97:44:7d:0e:6a:13:64:f9:f1:92:5e:f4:
         92:b9:c8:86:ad:f4:93:2b:ad:03:ae:a8:48:36:72:90:0b:25:
         0a:a8:41:19:98:4b:d2:5b:04:d6:67:a5:57:b5:8f:33:10:d9:
         3d:80:d8:f2:6e:d6:82:f5:89:2b:dc:33:46:db:d4:7b:b8:eb:
         75:1e:9e:19:d5:28:35:a9:50:1f:4b:1a:6b:ca:ee:b9:66:6d:
         31:2f:8b:23:0e:d8:eb:38:74:90:00:0f:77:0d:37:11:14:21:
         5d:fd:40:4d:89:ef:32:7e:44:ff:35:2a:6a:c2:2b:f1:f8:c1:
         ef:ee:e7:7e:8e:4f:65:ba:4b:e1:6c:32:8a:fb:db:f5:e3:ea:
         94:7b:79:74:f1:36:a2:f9:6c:21:a6:7e:1b:8e:09:56:61:e6:
         ec:34:1d:a5:dc:c8:65:da:0a:76:1d:e9:0c:0f:92:9e:58:9e:
         4e:5e:f3:a6:42:8d:9a:ca:7b:df:09:f0:9d:81:da:96:03:c7:
         16:df:10:0c:b4:c8:88:50:dc:d2:41:d6:a9:0b:a9:ad:3e:65:
         be:26:a1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:07:26 2024 by rpki-client on console-fra.rpki-client.org