Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/0/3130332e3137302e3233322e302f32332d3234203d3e20393137.roa
File:                     3130332e3137302e3233322e302f32332d3234203d3e20393137.roa (raw, json)
Hash identifier:          03J/danHrRrUf5+1VD3u6MMOJbhoX9hiSFBAhf9ApE0=
Subject key identifier:   63:41:EF:E4:E1:E1:EB:DC:99:17:8E:74:0B:B1:45:32:A7:EB:EC:3D
Certificate issuer:       /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Certificate serial:       2F60229B75E7C196E1A0E637C0E6E8E7AC728985
Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/0/3130332e3137302e3233322e302f32332d3234203d3e20393137.roa
Signing time:             Sun 03 Nov 2024 22:30:26 +0000
ROA not before:           Sun 03 Nov 2024 22:25:26 +0000
ROA not after:            Sun 02 Nov 2025 22:30:26 +0000
asID:                     917
IP address blocks:        103.170.232.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
                          rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 08:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:60:22:9b:75:e7:c1:96:e1:a0:e6:37:c0:e6:e8:e7:ac:72:89:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
        Validity
            Not Before: Nov  3 22:25:26 2024 GMT
            Not After : Nov  2 22:30:26 2025 GMT
        Subject: CN=6341EFE4E1E1EBDC99178E740BB14532A7EBEC3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:81:23:6c:7e:c7:fc:c5:fe:7d:6f:3e:20:74:
                    25:7d:53:3a:94:42:e5:dd:08:df:ba:44:25:7d:44:
                    ae:f1:df:22:e4:94:56:ea:71:cf:2a:7b:1c:a7:6f:
                    84:52:86:d9:ad:2f:53:c1:05:14:1f:64:1a:66:9b:
                    3d:2f:9d:71:43:bb:ba:ca:86:fd:d6:9f:8d:74:3d:
                    cb:1e:af:98:89:76:11:14:69:12:3d:a3:a6:7f:80:
                    26:65:a5:f2:c1:7d:12:75:0f:32:fa:01:47:2d:81:
                    ad:2e:c2:ce:2e:43:f8:79:7e:c2:e6:7c:97:dd:28:
                    a6:b5:95:62:0a:e2:ab:ed:16:6f:4d:03:f2:af:48:
                    75:c2:30:07:f4:8f:26:93:ea:d7:5d:8a:48:2a:fc:
                    5f:28:56:c7:58:cf:76:01:c8:7d:dd:a2:5d:47:77:
                    c9:0f:b9:93:06:66:34:93:8a:a5:8a:bd:5b:57:f5:
                    b4:4f:e6:1f:fb:27:23:96:77:9c:2f:e0:ac:72:1f:
                    59:49:ce:00:0f:7c:43:15:f1:e2:3d:3b:18:48:33:
                    82:70:55:5b:c6:95:4c:13:ae:18:96:13:f2:20:a1:
                    98:75:30:94:64:9a:fd:c7:b7:29:83:35:92:36:0e:
                    82:06:4d:33:26:8e:50:5d:ec:42:11:d6:91:d3:ee:
                    01:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:41:EF:E4:E1:E1:EB:DC:99:17:8E:74:0B:B1:45:32:A7:EB:EC:3D
            X509v3 Authority Key Identifier:
                keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/3130332e3137302e3233322e302f32332d3234203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:a0:ae:85:93:5f:ba:5b:05:8f:f0:44:67:65:31:7a:bc:fd:
         26:08:61:ae:91:a8:60:df:8a:18:b6:44:54:aa:b6:ae:17:d7:
         20:9e:e4:93:34:92:40:1d:03:37:55:9c:c6:0d:9a:8d:04:a4:
         47:ba:c1:39:a0:e9:47:a6:8a:b4:c6:3f:0c:d1:99:b6:26:81:
         03:23:66:9e:2d:93:b1:43:16:80:15:22:88:95:d7:56:87:8c:
         1a:50:dd:00:70:ee:16:db:6e:34:6f:7b:8e:42:42:df:af:b3:
         77:80:36:92:c9:63:17:49:08:52:8c:52:2a:47:5b:7e:fc:3c:
         36:2e:9d:f5:34:a5:82:cd:26:a1:ad:cf:84:c0:4c:0a:0f:12:
         e8:5f:85:f9:1c:3a:5d:d1:45:c1:04:64:54:c5:92:0f:b4:2e:
         e3:42:4f:0b:a4:fb:dd:4e:b3:ea:0b:e0:e4:d1:3b:5d:69:b5:
         48:c6:e1:da:ca:23:69:d1:34:62:14:3b:56:8a:27:13:1c:e4:
         07:41:e8:89:25:cf:18:6c:d8:3e:d6:2c:95:42:da:bc:11:47:
         0e:5f:67:ea:29:df:00:7a:7c:cb:85:c2:17:d2:e1:69:23:18:
         3e:e1:b8:a9:42:10:2f:85:ac:67:6d:94:0f:01:65:0b:62:4f:
         fa:08:f5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:23:51 2024 by rpki-client on console-fra.rpki-client.org