Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/0/3130332e3137302e3233322e302f32332d3234203d3e203537363935.roa
File:                     3130332e3137302e3233322e302f32332d3234203d3e203537363935.roa (raw, json)
Hash identifier:          AVcGIT4Dwb4Sns+O31mpRirTXePBSRm87YTun9F83R0=
Subject key identifier:   A0:4C:8F:76:9E:F2:60:29:3C:60:AD:4B:47:E9:AC:3E:A5:AD:81:7D
Certificate issuer:       /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Certificate serial:       0B3A1C18E5179AF91C3C76B30B403C681575D843
Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/0/3130332e3137302e3233322e302f32332d3234203d3e203537363935.roa
Signing time:             Sun 03 Dec 2023 21:38:28 +0000
ROA not before:           Sun 03 Dec 2023 21:33:28 +0000
ROA not after:            Sun 01 Dec 2024 21:38:28 +0000
asID:                     57695
IP address blocks:        103.170.232.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
                          rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 07:19:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:3a:1c:18:e5:17:9a:f9:1c:3c:76:b3:0b:40:3c:68:15:75:d8:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
        Validity
            Not Before: Dec  3 21:33:28 2023 GMT
            Not After : Dec  1 21:38:28 2024 GMT
        Subject: CN=A04C8F769EF260293C60AD4B47E9AC3EA5AD817D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:36:1e:41:73:a5:fc:84:81:59:8f:8e:77:0c:
                    de:2f:88:aa:1d:a1:a7:21:93:44:27:fe:84:56:65:
                    1b:72:22:be:4e:70:7b:5d:a8:72:4d:76:2f:f9:7d:
                    fb:ca:84:e6:3f:db:f1:64:a8:b3:27:ed:53:3b:8d:
                    1d:03:43:35:4f:30:30:d0:a3:86:21:2e:3c:8f:d4:
                    3b:07:32:06:89:12:dd:7d:f1:9c:aa:81:42:f6:f0:
                    e7:91:d8:49:a2:7e:f5:21:92:d3:ab:b2:3c:47:09:
                    c1:58:71:32:eb:f2:2d:0f:50:71:33:6b:19:02:7a:
                    5f:96:a0:c9:2f:85:49:79:be:75:15:70:45:2b:38:
                    c0:31:3e:64:e3:f1:a6:e7:4b:9b:d5:09:8c:77:69:
                    5e:61:ae:ca:58:fa:89:41:24:f1:d7:a3:6b:90:ba:
                    49:b9:e3:c3:6f:55:4b:49:14:e1:c2:30:94:1b:38:
                    4c:63:b4:4b:3e:e4:29:cb:4f:1f:09:17:f9:4e:11:
                    42:38:eb:6f:eb:4c:5e:59:62:02:df:1d:0c:a5:7a:
                    41:c9:ca:a8:55:b2:fb:bd:e1:a9:f9:ff:6d:49:ea:
                    bb:83:e8:ef:9d:ab:3d:1f:ba:fb:4e:b6:4b:2d:07:
                    9c:2f:ce:ac:ec:57:77:70:22:66:62:23:3f:01:d4:
                    50:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4C:8F:76:9E:F2:60:29:3C:60:AD:4B:47:E9:AC:3E:A5:AD:81:7D
            X509v3 Authority Key Identifier:
                keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/3130332e3137302e3233322e302f32332d3234203d3e203537363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:c9:dc:b4:a7:17:03:56:cc:59:c4:61:fc:e4:ed:88:17:f2:
         fa:17:02:d5:61:b9:0a:d8:2a:21:e4:2b:04:67:65:16:65:0d:
         ca:a0:9c:e2:f5:e5:34:14:f8:9a:00:40:f9:23:54:68:1d:bf:
         6f:fb:c7:f4:7f:98:ea:81:c9:d7:be:bc:b8:82:c3:3e:99:b4:
         6d:64:7c:e3:1f:a5:81:3d:58:4b:c7:7b:8c:12:13:2d:41:e1:
         ee:08:15:11:92:16:77:dd:52:9d:55:a5:0a:ae:c2:f5:d6:8a:
         5d:00:e1:3a:4a:31:13:83:45:23:09:3d:d3:86:2f:2c:6a:9a:
         a4:4a:5a:0d:d2:d2:cf:ee:6d:75:66:86:94:f6:c2:93:60:a8:
         42:c0:e2:b4:8c:85:28:af:33:43:a9:74:14:d4:24:39:7a:dc:
         f4:b3:5f:a6:9e:0d:b6:21:66:d1:70:2a:87:0b:ab:55:b2:d2:
         fd:be:9e:c9:a0:52:fa:03:38:95:63:c8:3c:a3:fa:2d:1a:f5:
         ae:0f:4b:a4:e9:72:b6:ed:93:b6:7a:f0:bb:e3:ea:99:a1:d4:
         e9:4f:a4:32:1c:00:6d:1b:61:ed:a2:50:6b:48:30:c4:3a:ab:
         1d:9b:11:41:e0:c9:e8:b0:e3:60:f2:85:f1:9e:39:4b:7c:07:
         dc:cb:55:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIUCzocGOUXmvkcPHazC0A8aBV12EMwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxMjFDMzMwMDAwMTEwLwYDVQQFEyg5Q0YwNUU3MDI0
RDRBNDg3RTBCNzlFMkY1NzUyNUJGMzQ1REI1M0VDMB4XDTIzMTIwMzIxMzMyOFoX
DTI0MTIwMTIxMzgyOFowMzExMC8GA1UEAxMoQTA0QzhGNzY5RUYyNjAyOTNDNjBB
RDRCNDdFOUFDM0VBNUFEODE3RDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMA2HkFzpfyEgVmPjncM3i+Iqh2hpyGTRCf+hFZlG3Iivk5we12ock12L/l9
+8qE5j/b8WSosyftUzuNHQNDNU8wMNCjhiEuPI/UOwcyBokS3X3xnKqBQvbw55HY
SaJ+9SGS06uyPEcJwVhxMuvyLQ9QcTNrGQJ6X5agyS+FSXm+dRVwRSs4wDE+ZOPx
pudLm9UJjHdpXmGuylj6iUEk8deja5C6Sbnjw29VS0kU4cIwlBs4TGO0Sz7kKctP
HwkX+U4RQjjrb+tMXlliAt8dDKV6QcnKqFWy+73hqfn/bUnqu4Po752rPR+6+062
Sy0HnC/OrOxXd3AiZmIjPwHUUP8CAwEAAaOCAfAwggHsMB0GA1UdDgQWBBSgTI92
nvJgKTxgrUtH6aw+pa2BfTAfBgNVHSMEGDAWgBSc8F5wJNSkh+C3ni9XUlvzRdtT
7DAOBgNVHQ8BAf8EBAMCB4AwYQYDVR0fBFowWDBWoFSgUoZQcnN5bmM6Ly9yc3lu
Yy5ycC5raS9yZXBvL21pc2FrYWlvLzAvOUNGMDVFNzAyNEQ0QTQ4N0UwQjc5RTJG
NTc1MjVCRjM0NURCNTNFQy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAC
hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2
MTFFMkJCNDY4RjdDNzJGRDFGRjIvblBCZWNDVFVwSWZndDU0dlYxSmI4MFhiVS13
LmNlcjB8BggrBgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJzeW5jOi8vcnN5bmMu
cnAua2kvcmVwby9taXNha2Fpby8wLzMxMzAzMzJlMzEzNzMwMmUzMjMzMzIyZTMw
MmYzMjMzMmQzMjM0MjAzZDNlMjAzNTM3MzYzOTM1LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6roMA0G
CSqGSIb3DQEBCwUAA4IBAQAVydy0pxcDVsxZxGH85O2IF/L6FwLVYbkK2Coh5CsE
Z2UWZQ3KoJzi9eU0FPiaAED5I1RoHb9v+8f0f5jqgcnXvry4gsM+mbRtZHzjH6WB
PVhLx3uMEhMtQeHuCBURkhZ33VKdVaUKrsL11opdAOE6SjETg0UjCT3Thi8sapqk
SloN0tLP7m11ZoaU9sKTYKhCwOK0jIUorzNDqXQU1CQ5etz0s1+mng22IWbRcCqH
C6tVstL9vp7JoFL6AziVY8g8o/otGvWuD0uk6XK27ZO2evC74+qZodTpT6QyHABt
G2HtolBrSDDEOqsdmxFB4MnosONg8oXxnjlLfAfcy1Wl
-----END CERTIFICATE-----
Generated at Tue May 21 10:00:37 2024 by rpki-client on console-fra.rpki-client.org