Route Origin Authorization

$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa
File:                     3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa (raw, json)
Hash identifier:          AO++rM3N1jO7O7HYsegCBlM8+c2spUzQgRM1Fitv+rQ=
Subject key identifier:   DE:27:5B:24:06:9E:CA:E8:89:8C:AB:93:4D:B1:64:7B:17:32:D1:06
Certificate issuer:       /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Certificate serial:       5B5EB00FE38DDEC26CFFBD7FAA11B3C582493715
Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject info access:      rsync://rpki.owl.net/rrdp/owl/0/3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa
Signing time:             Thu 14 Aug 2025 17:43:56 +0000
ROA not before:           Thu 14 Aug 2025 17:38:56 +0000
ROA not after:            Thu 13 Aug 2026 17:43:56 +0000
asID:                     43357
IP address blocks:        103.125.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
                          rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Aug 2025 01:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:5e:b0:0f:e3:8d:de:c2:6c:ff:bd:7f:aa:11:b3:c5:82:49:37:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
        Validity
            Not Before: Aug 14 17:38:56 2025 GMT
            Not After : Aug 13 17:43:56 2026 GMT
        Subject: CN=DE275B24069ECAE8898CAB934DB1647B1732D106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2f:0d:84:aa:67:cb:16:21:68:79:c4:95:e5:
                    67:95:ad:1e:f6:20:95:64:83:32:93:c1:b2:3a:16:
                    29:e5:dc:9c:4d:e1:7a:19:54:46:fb:e3:1a:8c:45:
                    3a:f6:2b:d1:38:59:31:2a:1e:83:df:7d:84:4c:5d:
                    d2:d0:dc:15:04:be:32:11:85:c4:b8:f6:16:ed:9a:
                    fc:86:c2:ef:55:30:58:75:01:92:97:2a:f8:d8:5d:
                    20:1b:42:a2:3b:31:c0:c7:41:6e:34:e0:41:4c:d2:
                    b3:0e:c1:c0:ae:8b:de:e4:14:f3:e1:4e:2c:f6:a9:
                    0d:1b:cb:ec:03:73:44:e5:02:72:34:c7:bf:20:e0:
                    8a:a6:ec:d3:87:e8:5a:50:07:cb:de:94:dd:74:84:
                    c6:3e:e1:c8:e9:75:32:a5:6f:46:e2:54:6d:8c:f2:
                    57:73:42:49:c6:08:5a:68:e6:b3:71:82:56:a3:0c:
                    3b:02:3f:e0:a0:41:4e:87:ab:68:2f:8f:cb:58:b5:
                    6f:35:02:8c:fe:5d:3d:cd:34:72:bb:90:85:13:e2:
                    cf:a3:16:ec:57:fa:7e:8c:67:a2:8a:c5:dc:d7:96:
                    fc:b5:93:69:1c:e8:4f:cd:14:1d:b4:fa:c2:8f:cc:
                    28:c6:e1:3b:21:d6:02:f7:5a:fd:e0:64:fa:bb:16:
                    44:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:27:5B:24:06:9E:CA:E8:89:8C:AB:93:4D:B1:64:7B:17:32:D1:06
            X509v3 Authority Key Identifier:
                keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:1d:d6:b8:ea:da:f6:16:7e:95:a9:30:10:aa:80:7f:3b:cf:
         47:da:6e:5d:84:f6:e5:43:76:2a:20:c3:90:c4:44:84:a1:c6:
         81:7d:d3:ac:52:76:a1:99:0a:ce:1b:cf:af:a7:f8:e7:46:ec:
         6c:a1:c6:0c:4a:c6:6f:07:82:8b:07:4b:5d:88:e3:d1:94:9a:
         37:6b:95:b9:1e:82:a8:68:9e:ca:09:53:c4:3a:a2:a1:d7:59:
         35:1b:30:25:5e:86:82:a1:00:a8:97:a1:e5:cc:86:9e:dc:18:
         09:bb:7c:44:b5:af:3b:ab:12:00:b0:97:f9:db:bd:1f:2b:5b:
         91:04:2e:26:84:4b:90:b1:4d:d9:48:43:c4:78:5d:73:3f:0d:
         0f:a1:84:c9:43:d9:50:8d:43:e5:68:ba:32:0d:e2:d6:11:bc:
         02:29:39:a8:8c:34:76:41:75:51:a2:3a:e5:28:e6:92:81:2c:
         10:75:90:ae:9f:9c:f8:5a:93:ce:24:02:2e:ec:e7:01:e6:70:
         59:5f:ac:78:36:f0:99:bf:6e:92:ff:ad:2b:48:e8:1a:e5:49:
         49:e6:47:ba:36:8c:04:0d:66:71:33:b4:d4:11:ec:bb:11:6f:
         0e:5c:00:4a:bc:51:a5:5a:ca:2e:c6:6a:b5:93:92:c3:1f:94:
         db:a8:ed:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:04:42 2025 by rpki-client