Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/0/3130332e3137302e3233322e302f32332d3234203d3e20313432363136.roa
File:                     3130332e3137302e3233322e302f32332d3234203d3e20313432363136.roa (raw, json)
Hash identifier:          WgvghLquwSM8GMnRWyCYyvl4hwIInZni8wlFY7q7pK8=
Subject key identifier:   4A:B0:77:EE:30:4D:D0:9B:95:90:19:20:0D:6B:5F:BD:08:C6:6E:1B
Certificate issuer:       /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Certificate serial:       6434C7B8F2F1B4D480BDD83EF949FC87B0B6D81E
Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/0/3130332e3137302e3233322e302f32332d3234203d3e20313432363136.roa
Signing time:             Sun 03 Dec 2023 21:38:28 +0000
ROA not before:           Sun 03 Dec 2023 21:33:28 +0000
ROA not after:            Sun 01 Dec 2024 21:38:28 +0000
asID:                     142616
IP address blocks:        103.170.232.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
                          rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 07:19:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:34:c7:b8:f2:f1:b4:d4:80:bd:d8:3e:f9:49:fc:87:b0:b6:d8:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
        Validity
            Not Before: Dec  3 21:33:28 2023 GMT
            Not After : Dec  1 21:38:28 2024 GMT
        Subject: CN=4AB077EE304DD09B959019200D6B5FBD08C66E1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d5:73:36:ea:94:2a:5b:0c:8b:38:21:60:c7:
                    d9:c0:d9:31:4d:91:46:e6:ec:11:bd:ac:49:2e:6d:
                    d3:9a:64:7f:2f:59:42:f2:00:59:de:aa:fc:1b:50:
                    6a:66:a8:02:8c:e1:6b:3b:70:e3:69:71:29:f0:7a:
                    bb:80:92:46:e6:43:54:29:f6:0f:a6:ea:93:32:97:
                    65:4e:b0:a9:8f:66:d7:0c:1d:33:07:e5:a5:22:74:
                    db:ad:1e:a2:4f:de:3f:7a:b6:f7:64:49:aa:58:67:
                    8a:b4:31:91:6b:ad:c8:1a:6c:d7:19:01:ba:db:e7:
                    87:ab:3d:a2:69:3c:57:06:60:0d:ee:86:86:fc:ed:
                    b8:1b:d7:03:25:16:17:2e:3d:53:5d:c6:56:19:80:
                    06:4a:f1:70:e5:ef:59:88:4c:81:18:ab:4a:70:2a:
                    af:e0:2d:16:71:28:c8:72:dd:c7:70:d6:1f:8f:08:
                    88:82:c8:e2:c0:40:8b:6e:ed:22:cd:e5:f8:ce:44:
                    cc:48:39:7b:e0:16:30:b8:1d:8c:13:de:8e:f9:ee:
                    18:ce:30:bf:77:a2:e0:2a:33:a2:b3:6b:7a:0f:47:
                    8e:f9:36:7d:2a:5b:9b:e8:7f:40:89:10:b1:a2:f8:
                    04:d7:89:c1:c8:4a:fe:18:4f:45:42:f4:9e:2a:77:
                    e2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B0:77:EE:30:4D:D0:9B:95:90:19:20:0D:6B:5F:BD:08:C6:6E:1B
            X509v3 Authority Key Identifier:
                keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/3130332e3137302e3233322e302f32332d3234203d3e20313432363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:64:0d:9d:23:9d:19:d0:28:11:d9:68:52:6a:21:fb:d6:68:
         19:5a:f2:33:98:af:3d:92:7a:c4:ac:32:69:38:36:0f:18:1a:
         a2:fd:e5:c5:6f:d0:1e:09:e7:2a:83:d1:5c:b2:34:16:d5:09:
         36:44:05:6f:fe:cd:e0:af:66:ca:6f:14:8c:73:5a:42:83:b8:
         bc:ed:f1:e7:96:13:f1:8f:d1:90:0c:10:90:0d:37:d1:37:25:
         16:57:9a:1d:db:f7:56:d5:c2:17:69:bf:78:35:c9:ae:af:d5:
         84:47:97:47:68:df:e8:87:f3:d5:73:d6:00:57:76:fb:2b:1d:
         60:a0:52:68:c8:77:54:89:90:a5:46:18:a0:5f:1c:bb:7b:30:
         24:1c:e1:d1:3a:07:6e:3c:76:17:82:0e:45:53:e5:59:0b:72:
         b8:bd:05:11:d3:58:43:a8:d1:c9:0f:8a:2d:42:27:b9:76:84:
         65:d0:19:39:97:6c:32:94:85:92:65:c6:f0:a4:40:0c:99:3d:
         1d:0e:ad:8f:c0:32:4c:8d:af:b3:69:48:de:ed:70:c7:90:a6:
         f0:c9:2b:09:34:80:af:4e:7f:a4:cb:39:24:ba:32:87:29:22:
         47:b4:9d:f2:4d:76:60:8c:3b:70:50:fd:fc:4e:1c:cf:df:e9:
         b9:4a:60:aa
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUZDTHuPLxtNSAvdg++Un8h7C22B4wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMjFDMzMwMDAwMTEwLwYDVQQFEyg5Q0YwNUU3MDI0
RDRBNDg3RTBCNzlFMkY1NzUyNUJGMzQ1REI1M0VDMB4XDTIzMTIwMzIxMzMyOFoX
DTI0MTIwMTIxMzgyOFowMzExMC8GA1UEAxMoNEFCMDc3RUUzMDRERDA5Qjk1OTAx
OTIwMEQ2QjVGQkQwOEM2NkUxQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMbVczbqlCpbDIs4IWDH2cDZMU2RRubsEb2sSS5t05pkfy9ZQvIAWd6q/BtQ
amaoAozhaztw42lxKfB6u4CSRuZDVCn2D6bqkzKXZU6wqY9m1wwdMwflpSJ0260e
ok/eP3q292RJqlhnirQxkWutyBps1xkButvnh6s9omk8VwZgDe6GhvztuBvXAyUW
Fy49U13GVhmABkrxcOXvWYhMgRirSnAqr+AtFnEoyHLdx3DWH48IiILI4sBAi27t
Is3l+M5EzEg5e+AWMLgdjBPejvnuGM4wv3ei4CozorNreg9Hjvk2fSpbm+h/QIkQ
saL4BNeJwchK/hhPRUL0nip34psCAwEAAaOCAfIwggHuMB0GA1UdDgQWBBRKsHfu
ME3Qm5WQGSANa1+9CMZuGzAfBgNVHSMEGDAWgBSc8F5wJNSkh+C3ni9XUlvzRdtT
7DAOBgNVHQ8BAf8EBAMCB4AwYQYDVR0fBFowWDBWoFSgUoZQcnN5bmM6Ly9yc3lu
Yy5ycC5raS9yZXBvL21pc2FrYWlvLzAvOUNGMDVFNzAyNEQ0QTQ4N0UwQjc5RTJG
NTc1MjVCRjM0NURCNTNFQy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAC
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2
MTFFMkJCNDY4RjdDNzJGRDFGRjIvblBCZWNDVFVwSWZndDU0dlYxSmI4MFhiVS13
LmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnN5bmMu
cnAua2kvcmVwby9taXNha2Fpby8wLzMxMzAzMzJlMzEzNzMwMmUzMjMzMzIyZTMw
MmYzMjMzMmQzMjM0MjAzZDNlMjAzMTM0MzIzNjMxMzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqugw
DQYJKoZIhvcNAQELBQADggEBAGBkDZ0jnRnQKBHZaFJqIfvWaBla8jOYrz2SesSs
Mmk4Ng8YGqL95cVv0B4J5yqD0VyyNBbVCTZEBW/+zeCvZspvFIxzWkKDuLzt8eeW
E/GP0ZAMEJANN9E3JRZXmh3b91bVwhdpv3g1ya6v1YRHl0do3+iH89Vz1gBXdvsr
HWCgUmjId1SJkKVGGKBfHLt7MCQc4dE6B248dheCDkVT5VkLcri9BRHTWEOo0ckP
ii1CJ7l2hGXQGTmXbDKUhZJlxvCkQAyZPR0OrY/AMkyNr7NpSN7tcMeQpvDJKwk0
gK9Of6TLOSS6MocpIke0nfJNdmCMO3BQ/fxOHM/f6blKYKo=
-----END CERTIFICATE-----
Generated at Tue May 21 10:00:37 2024 by rpki-client on console-fra.rpki-client.org