Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/0/323430373a623963303a666230303a3a2f34342d3438203d3e20393639.roa
File:                     323430373a623963303a666230303a3a2f34342d3438203d3e20393639.roa (raw, json)
Hash identifier:          /pj1VM6Znu/7nlB3wkjBi56nYL6AGkE3TblrqG+Pdtk=
Subject key identifier:   E7:CF:A9:70:F5:19:14:F7:6A:CE:2D:2E:3A:26:8D:9B:36:EA:F4:11
Certificate issuer:       /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Certificate serial:       09FFD49A7A2B515DC0BED0681B74251CCCB0085D
Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/0/323430373a623963303a666230303a3a2f34342d3438203d3e20393639.roa
Signing time:             Sun 03 Dec 2023 21:38:28 +0000
ROA not before:           Sun 03 Dec 2023 21:33:28 +0000
ROA not after:            Sun 01 Dec 2024 21:38:28 +0000
asID:                     969
IP address blocks:        2407:b9c0:fb00::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
                          rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 May 2024 07:19:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:ff:d4:9a:7a:2b:51:5d:c0:be:d0:68:1b:74:25:1c:cc:b0:08:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
        Validity
            Not Before: Dec  3 21:33:28 2023 GMT
            Not After : Dec  1 21:38:28 2024 GMT
        Subject: CN=E7CFA970F51914F76ACE2D2E3A268D9B36EAF411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ef:10:23:19:ef:4a:02:3c:79:8b:e9:90:6f:
                    3c:8a:fb:72:12:3d:41:24:49:1d:5a:56:9a:7b:d7:
                    03:ee:fb:5f:94:2d:85:be:ba:81:2a:d0:a2:ae:65:
                    d2:39:2f:8d:23:5d:ce:4d:6f:e5:92:9d:1d:3b:e7:
                    93:01:bc:d3:d7:64:2f:77:97:63:82:1f:79:d8:5b:
                    52:2f:49:54:f7:a8:a8:88:4e:32:a5:a6:03:86:df:
                    84:4c:ef:13:2f:bc:c6:48:13:6f:89:19:a0:63:62:
                    fb:4d:d8:66:b5:81:bb:20:b5:bd:de:dc:c2:05:cd:
                    34:c2:50:6e:04:c2:8f:10:e7:1b:00:13:62:54:47:
                    ed:17:ae:bd:a2:51:13:0b:a9:e6:cf:7e:8e:99:a8:
                    ab:30:36:e2:00:25:42:b3:39:83:5e:e1:b2:d2:5e:
                    60:8c:0e:8a:c5:ed:0d:de:50:46:97:16:63:78:42:
                    fe:0e:cc:0a:a7:d6:18:ed:7d:dd:89:ed:24:c2:02:
                    e6:94:bf:a8:f4:99:43:8d:62:fc:b1:03:f5:cc:fc:
                    ba:98:97:d2:98:f6:5e:9d:19:89:ef:d7:36:92:94:
                    31:8c:16:7f:67:6c:53:27:f4:f0:8b:0c:a2:a1:0d:
                    6f:c4:40:76:ce:cd:83:50:db:6b:ff:20:c1:d2:f8:
                    e3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CF:A9:70:F5:19:14:F7:6A:CE:2D:2E:3A:26:8D:9B:36:EA:F4:11
            X509v3 Authority Key Identifier:
                keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/323430373a623963303a666230303a3a2f34342d3438203d3e20393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:b9c0:fb00::/44

    Signature Algorithm: sha256WithRSAEncryption
         8f:38:8f:bd:20:86:9b:19:8e:aa:07:89:10:6d:1c:b5:3f:61:
         77:6d:b3:fa:43:4d:ce:44:a3:61:6d:8e:69:e5:02:5b:de:c4:
         a5:58:4d:f4:b9:6f:24:e3:18:e8:d2:0d:25:5d:85:fc:59:36:
         eb:73:7f:72:2a:b2:07:da:4d:91:f3:f0:5b:71:1d:cf:e6:64:
         e8:9a:26:c1:9d:cf:a2:b2:f7:c8:21:b8:88:de:6b:c7:ab:8d:
         a9:f9:b8:7f:c2:87:d7:41:4a:2a:44:3d:a2:f5:fe:34:9b:60:
         3b:9a:7e:89:e5:d6:df:ee:c1:53:8f:09:c2:b8:1a:d4:27:06:
         39:6e:88:fe:ab:2b:9e:95:4e:95:09:ef:fb:16:dc:26:de:1c:
         59:9c:63:bc:86:4e:a2:74:b7:84:1e:4f:74:2b:2b:37:98:b2:
         f7:c7:93:12:10:50:96:63:2e:a8:02:1c:43:68:63:d1:e5:c9:
         5b:8d:c5:e7:74:1f:fc:cb:60:af:37:c3:6e:c6:ff:96:49:d6:
         73:75:65:d9:16:b3:1e:1d:7a:80:82:fe:2a:4a:66:c9:2a:b4:
         96:d0:55:99:5a:1b:d6:b0:08:e5:e4:0c:9d:1a:a1:dd:2d:64:
         8f:eb:f3:4a:7c:d0:0f:d0:4d:c6:fb:7e:c3:be:d0:d3:2e:26:
         f6:f0:5e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 12:17:58 2024 by rpki-client on console-ams.rpki-client.org