Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/0/3130332e3137302e3233322e302f32332d3234203d3e20313432363136.roa
File:                     3130332e3137302e3233322e302f32332d3234203d3e20313432363136.roa (raw, json)
Hash identifier:          xh8Sz+UX718ObRCWgtCtKu1Ea/C7rUKcDeEuMvnakOU=
Subject key identifier:   6C:57:70:6E:95:31:52:9C:39:B2:70:F9:43:CF:81:2A:12:6D:E2:42
Certificate issuer:       /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Certificate serial:       6354F3153A50DE59AB7C0FBCBB9CCE27A0FFB5AB
Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/0/3130332e3137302e3233322e302f32332d3234203d3e20313432363136.roa
Signing time:             Sun 03 Nov 2024 22:30:27 +0000
ROA not before:           Sun 03 Nov 2024 22:25:27 +0000
ROA not after:            Sun 02 Nov 2025 22:30:27 +0000
asID:                     142616
IP address blocks:        103.170.232.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
                          rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 08:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:54:f3:15:3a:50:de:59:ab:7c:0f:bc:bb:9c:ce:27:a0:ff:b5:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
        Validity
            Not Before: Nov  3 22:25:27 2024 GMT
            Not After : Nov  2 22:30:27 2025 GMT
        Subject: CN=6C57706E9531529C39B270F943CF812A126DE242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:83:6a:c3:de:a8:a4:58:00:26:ef:e6:31:8a:
                    85:d6:cc:6a:7f:75:83:2f:94:b1:08:61:c2:1b:8e:
                    bb:42:c6:db:ea:a2:93:d7:b8:2a:24:33:61:fe:d1:
                    d8:41:63:b6:94:be:d8:ec:53:32:00:79:7b:ed:38:
                    c7:36:03:b9:a7:b1:03:67:b8:2c:40:9e:c6:64:73:
                    a4:ab:76:e3:48:83:6d:8c:f8:a3:49:bf:86:6a:1d:
                    67:48:79:af:4c:0a:61:3b:be:f7:66:52:c4:e1:8a:
                    9e:aa:42:27:cc:f2:86:f8:72:e7:7e:91:30:d1:28:
                    50:dc:48:bf:db:fb:a8:4f:cb:cd:41:df:ac:69:55:
                    94:22:56:78:0b:0b:69:0f:99:bf:f8:50:3c:c5:fd:
                    0b:01:78:e8:75:d1:e9:03:03:1a:4a:b3:b7:b3:f9:
                    39:1d:98:7e:bc:c4:07:b8:6c:59:94:3a:b4:32:79:
                    37:f8:54:49:fe:7d:69:48:fd:d1:db:ce:5b:45:6f:
                    0c:b1:c7:81:51:ab:83:22:d7:15:02:bb:e3:49:99:
                    57:ca:eb:0f:91:59:ff:a6:8c:d6:9b:38:f0:7d:30:
                    64:f2:4e:cd:d7:b7:7a:85:7b:07:7e:59:ad:b7:2f:
                    9f:e1:0b:a4:c1:0e:16:e3:2f:65:66:d5:86:fe:86:
                    96:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:57:70:6E:95:31:52:9C:39:B2:70:F9:43:CF:81:2A:12:6D:E2:42
            X509v3 Authority Key Identifier:
                keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/3130332e3137302e3233322e302f32332d3234203d3e20313432363136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:61:82:e8:e3:14:6e:f1:2e:c9:41:8f:2d:a6:32:dc:bf:ea:
         78:83:22:9b:2c:be:98:d9:95:73:56:8f:f5:b4:cb:27:82:8e:
         24:02:00:2d:be:82:79:bd:aa:d2:17:fd:7f:23:f4:a8:e9:f9:
         91:61:49:84:74:85:f2:e7:58:5b:28:05:6b:2b:7b:fe:7a:8d:
         f9:24:7e:33:25:be:47:d5:29:65:74:7c:1f:50:0b:68:a0:72:
         22:9d:71:07:bd:79:25:48:ca:db:df:46:b0:a8:8f:65:db:a6:
         a1:ba:03:ef:0b:e1:f5:01:de:24:0a:60:23:e4:11:80:b9:9b:
         b9:e8:55:d4:c9:0c:57:46:47:50:31:01:2a:8e:3c:12:50:4a:
         3a:0d:ee:21:87:ba:c3:ff:5c:e3:9e:35:00:75:6f:17:01:b0:
         44:e0:ed:89:47:64:69:93:64:45:08:27:94:a2:60:c2:40:b7:
         93:da:e3:43:8d:a9:a9:ff:02:52:a9:c7:58:07:75:cc:b5:6c:
         80:dc:d6:a2:d4:e0:41:82:bf:d9:4e:30:e4:aa:0d:cd:6e:1b:
         23:23:d3:f4:18:3a:75:75:fa:5e:b1:eb:18:52:db:b6:7f:41:
         d8:c3:10:3a:76:87:b3:e9:32:0f:9b:e7:c8:de:87:28:2e:ec:
         c2:b4:8a:83
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUY1TzFTpQ3lmrfA+8u5zOJ6D/taswDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMjFDMzMwMDAwMTEwLwYDVQQFEyg5Q0YwNUU3MDI0
RDRBNDg3RTBCNzlFMkY1NzUyNUJGMzQ1REI1M0VDMB4XDTI0MTEwMzIyMjUyN1oX
DTI1MTEwMjIyMzAyN1owMzExMC8GA1UEAxMoNkM1NzcwNkU5NTMxNTI5QzM5QjI3
MEY5NDNDRjgxMkExMjZERTI0MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAI+DasPeqKRYACbv5jGKhdbMan91gy+UsQhhwhuOu0LG2+qik9e4KiQzYf7R
2EFjtpS+2OxTMgB5e+04xzYDuaexA2e4LECexmRzpKt240iDbYz4o0m/hmodZ0h5
r0wKYTu+92ZSxOGKnqpCJ8zyhvhy536RMNEoUNxIv9v7qE/LzUHfrGlVlCJWeAsL
aQ+Zv/hQPMX9CwF46HXR6QMDGkqzt7P5OR2YfrzEB7hsWZQ6tDJ5N/hUSf59aUj9
0dvOW0VvDLHHgVGrgyLXFQK740mZV8rrD5FZ/6aM1ps48H0wZPJOzde3eoV7B35Z
rbcvn+ELpMEOFuMvZWbVhv6Glg8CAwEAAaOCAfIwggHuMB0GA1UdDgQWBBRsV3Bu
lTFSnDmycPlDz4EqEm3iQjAfBgNVHSMEGDAWgBSc8F5wJNSkh+C3ni9XUlvzRdtT
7DAOBgNVHQ8BAf8EBAMCB4AwYQYDVR0fBFowWDBWoFSgUoZQcnN5bmM6Ly9yc3lu
Yy5ycC5raS9yZXBvL21pc2FrYWlvLzAvOUNGMDVFNzAyNEQ0QTQ4N0UwQjc5RTJG
NTc1MjVCRjM0NURCNTNFQy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAC
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2
MTFFMkJCNDY4RjdDNzJGRDFGRjIvblBCZWNDVFVwSWZndDU0dlYxSmI4MFhiVS13
LmNlcjB+BggrBgEFBQcBCwRyMHAwbgYIKwYBBQUHMAuGYnJzeW5jOi8vcnN5bmMu
cnAua2kvcmVwby9taXNha2Fpby8wLzMxMzAzMzJlMzEzNzMwMmUzMjMzMzIyZTMw
MmYzMjMzMmQzMjM0MjAzZDNlMjAzMTM0MzIzNjMxMzYucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqugw
DQYJKoZIhvcNAQELBQADggEBAGRhgujjFG7xLslBjy2mMty/6niDIpssvpjZlXNW
j/W0yyeCjiQCAC2+gnm9qtIX/X8j9Kjp+ZFhSYR0hfLnWFsoBWsre/56jfkkfjMl
vkfVKWV0fB9QC2igciKdcQe9eSVIytvfRrCoj2XbpqG6A+8L4fUB3iQKYCPkEYC5
m7noVdTJDFdGR1AxASqOPBJQSjoN7iGHusP/XOOeNQB1bxcBsETg7YlHZGmTZEUI
J5SiYMJAt5Pa40ONqan/AlKpx1gHdcy1bIDc1qLU4EGCv9lOMOSqDc1uGyMj0/QY
OnV1+l6x6xhS27Z/QdjDEDp2h7PpMg+b58jehygu7MK0ioM=
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:18:04 2024 by rpki-client on console-ams.rpki-client.org