Route Origin Authorization

$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/3130332e3132352e3233322e302f32322d3234203d3e203233393539.roa
File:                     3130332e3132352e3233322e302f32322d3234203d3e203233393539.roa (raw, json)
Hash identifier:          39vslnGpRUqWixVX58xNulztMVEk9ux6GJsMXqfcyAo=
Subject key identifier:   C2:FA:E4:4C:05:4D:8A:09:C6:83:83:BD:8F:67:97:40:CC:AA:CC:BC
Certificate issuer:       /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Certificate serial:       7EC730EF840657863008EF676FBC49F473F3CEEE
Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject info access:      rsync://rpki.owl.net/rrdp/owl/0/3130332e3132352e3233322e302f32322d3234203d3e203233393539.roa
Signing time:             Thu 12 Oct 2023 15:59:56 +0000
ROA not before:           Thu 12 Oct 2023 15:54:56 +0000
ROA not after:            Thu 10 Oct 2024 15:59:56 +0000
asID:                     23959
IP address blocks:        103.125.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
                          rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 May 2024 22:17:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c7:30:ef:84:06:57:86:30:08:ef:67:6f:bc:49:f4:73:f3:ce:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
        Validity
            Not Before: Oct 12 15:54:56 2023 GMT
            Not After : Oct 10 15:59:56 2024 GMT
        Subject: CN=C2FAE44C054D8A09C68383BD8F679740CCAACCBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:71:03:e5:7d:fd:68:70:cc:33:ce:66:d5:49:
                    7b:b6:6e:ae:a6:9f:d3:88:76:af:d7:05:f4:7f:a2:
                    79:b8:d2:2b:11:ec:39:d4:59:53:ee:4c:2d:6c:0e:
                    bc:11:87:4c:21:2f:b6:55:c3:b4:64:00:19:6d:cc:
                    1d:eb:a4:ce:43:ee:94:87:1d:55:dc:95:a3:3f:4e:
                    95:36:7b:3a:a8:ad:df:6c:e2:56:1c:38:95:b6:b1:
                    37:5f:fe:17:6c:95:3a:8e:40:8e:45:9d:4f:ed:05:
                    80:ca:ea:0f:4e:60:48:34:f9:46:56:a0:97:bd:63:
                    67:c1:4f:3f:b1:5b:c8:e2:1e:c7:ef:24:f1:dc:34:
                    a8:de:45:f6:f4:84:a7:05:49:ae:ec:c8:65:55:ee:
                    03:71:0d:0f:a3:44:02:e2:92:6d:8a:85:f7:21:81:
                    7b:bf:80:12:a7:d7:eb:3f:91:eb:8a:97:12:61:1a:
                    b1:e1:2b:19:b6:19:87:5a:8d:01:89:9c:39:9b:34:
                    69:98:ee:ff:c5:21:08:0b:37:1d:17:2d:fb:01:3a:
                    bc:11:78:73:73:d9:53:fb:f6:e2:5c:46:63:a9:c6:
                    c2:76:09:a7:0d:62:a4:bd:79:ea:3d:42:c2:7c:f1:
                    13:59:3e:6c:5a:93:11:91:65:ec:20:9c:59:dd:57:
                    75:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FA:E4:4C:05:4D:8A:09:C6:83:83:BD:8F:67:97:40:CC:AA:CC:BC
            X509v3 Authority Key Identifier:
                keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/3130332e3132352e3233322e302f32322d3234203d3e203233393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         08:4d:5b:8b:cc:44:d9:ee:26:be:64:be:95:16:f3:f2:58:ce:
         04:1d:96:1e:4c:a6:15:d1:73:20:37:6b:b2:90:7a:36:cf:35:
         a2:b1:73:2f:26:19:e7:43:c9:d7:4f:5b:c9:b9:a7:46:09:6c:
         ae:c1:8c:e7:da:2f:86:4f:e2:b8:e3:fc:b2:04:fc:e9:9e:7f:
         3f:a6:60:dd:ac:ea:08:1a:70:27:19:b1:29:5d:e3:f7:d9:e0:
         f6:07:9a:24:0f:c1:1e:d5:ee:1e:8c:98:34:c5:81:3d:24:46:
         8a:39:ce:dc:91:1e:47:64:45:44:3d:b6:bc:d4:e2:e6:db:39:
         6a:4b:9e:4e:fc:84:7f:95:dc:87:6e:f3:b6:99:90:90:cb:08:
         ea:17:c2:90:0a:6c:23:be:65:cd:06:b1:33:c8:1c:35:95:68:
         1e:9a:70:df:cf:8d:63:6c:9e:79:e8:a4:cd:0f:e1:b3:62:f2:
         0b:e3:55:c9:61:0e:eb:e9:0e:90:bf:d4:15:ed:a9:37:a3:1b:
         8a:1f:22:28:2d:c5:fd:c1:d2:aa:aa:25:3f:dd:c1:1b:32:20:
         ca:c0:65:a9:fe:34:bc:b4:ce:d5:a2:d9:65:89:9d:b9:eb:e6:
         68:00:fc:33:de:f1:a0:02:18:e9:87:23:9d:c7:a2:31:77:4e:
         7d:3a:f1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 20:05:50 2024 by rpki-client on console-ams.rpki-client.org