Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/0/323430373a623963303a666230303a3a2f34342d3438203d3e20393639.roa
File:                     323430373a623963303a666230303a3a2f34342d3438203d3e20393639.roa (raw, json)
Hash identifier:          9o9sYCBvv89cZi/setzqWtCpYi4p2zeAk4HPlkj79To=
Subject key identifier:   5D:E6:6C:20:2D:CB:59:0D:61:53:6D:81:CB:3F:83:CA:CC:DF:34:6C
Certificate issuer:       /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Certificate serial:       46AFECAE09145032138C60FAA11841D7C4754036
Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/0/323430373a623963303a666230303a3a2f34342d3438203d3e20393639.roa
Signing time:             Sun 03 Nov 2024 22:30:27 +0000
ROA not before:           Sun 03 Nov 2024 22:25:27 +0000
ROA not after:            Sun 02 Nov 2025 22:30:27 +0000
asID:                     969
IP address blocks:        2407:b9c0:fb00::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
                          rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 Nov 2024 18:44:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:af:ec:ae:09:14:50:32:13:8c:60:fa:a1:18:41:d7:c4:75:40:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
        Validity
            Not Before: Nov  3 22:25:27 2024 GMT
            Not After : Nov  2 22:30:27 2025 GMT
        Subject: CN=5DE66C202DCB590D61536D81CB3F83CACCDF346C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4a:02:07:4b:8c:a5:df:fc:91:34:ad:4c:55:
                    58:bc:45:08:f0:7a:40:81:29:6b:28:a2:8e:44:e3:
                    8a:09:de:13:95:dd:f3:bc:fb:06:0a:40:95:b4:bd:
                    b3:f7:f5:b5:b5:fe:62:01:cc:c5:59:b3:be:fc:e8:
                    cc:d5:9f:1b:2c:92:2b:66:10:0c:e4:04:37:03:bd:
                    81:05:3b:7f:a8:e8:9b:ca:b7:bc:d4:1c:b7:eb:e3:
                    8d:4b:4d:e1:57:b7:e4:e5:e1:e6:66:61:fc:84:c9:
                    4d:33:d0:52:d5:9c:d8:e4:3b:50:ac:0b:30:55:5b:
                    d0:a8:bd:60:5d:d7:90:0b:c2:9c:66:69:92:dc:e0:
                    f5:1a:cf:ff:2f:f1:1d:34:cd:b7:51:c4:dc:49:6b:
                    07:16:41:e2:5c:4e:24:e8:51:d7:0b:6d:54:4d:4d:
                    06:51:a1:3c:f5:3c:b6:af:1e:9d:89:b6:a6:24:ef:
                    cd:f4:17:72:17:6f:4c:20:e4:b5:a2:34:2d:30:af:
                    4a:da:f1:82:7d:84:04:f9:45:87:94:27:93:54:07:
                    e5:db:af:bb:44:21:f6:6b:72:65:f0:4f:01:7c:e8:
                    7f:f8:70:20:e1:62:7d:73:3e:a0:f7:91:3e:d8:10:
                    37:96:17:ec:a3:e3:ba:07:cf:ba:8f:de:56:8b:a9:
                    b0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E6:6C:20:2D:CB:59:0D:61:53:6D:81:CB:3F:83:CA:CC:DF:34:6C
            X509v3 Authority Key Identifier:
                keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/323430373a623963303a666230303a3a2f34342d3438203d3e20393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:b9c0:fb00::/44

    Signature Algorithm: sha256WithRSAEncryption
         77:a5:ad:b3:03:b9:96:d9:91:45:c2:4b:31:34:dd:36:f3:00:
         c8:43:80:26:c0:d2:41:cc:39:2b:43:51:ed:ac:40:60:d2:ab:
         a0:2e:ce:33:11:a4:c2:fd:c1:c1:f2:ec:d7:71:6f:a1:57:ba:
         9d:98:7c:bb:93:f9:ed:3f:e4:2b:c1:cb:70:88:76:f6:e6:2f:
         5e:8d:1b:10:da:65:f5:94:7e:ff:66:0b:55:7f:c0:f0:85:02:
         c5:5d:0b:a5:6a:f4:7d:d7:45:8a:9d:b3:77:85:d5:34:ca:99:
         f2:65:c4:d7:66:a1:fe:90:1c:90:b4:cf:f4:8e:84:87:26:67:
         ff:61:c5:18:da:a6:f8:17:12:aa:b0:b8:1b:42:fb:e4:c9:84:
         01:ba:78:e4:60:c4:49:3d:25:0e:82:47:a7:48:71:8a:58:33:
         05:a6:7b:c5:3a:b2:6c:ff:3a:4c:1e:be:c9:fb:e4:6b:b5:24:
         d1:78:11:e8:df:be:04:16:6d:5e:23:74:a7:28:5c:1a:e6:6b:
         4d:8b:28:50:70:ea:8f:9c:eb:7e:a4:db:4c:20:b2:45:11:87:
         e8:9b:24:dc:4d:af:2f:f5:e3:3e:6c:6d:5c:af:6f:5f:37:73:
         4f:de:3a:b1:5b:a9:07:84:b8:14:3d:9c:8e:b5:1b:01:6d:dc:
         97:2b:67:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:50:41 2024 by rpki-client on console-fra.rpki-client.org