Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/0/3130332e3137302e3233322e302f32332d3234203d3e203537363935.roa
File:                     3130332e3137302e3233322e302f32332d3234203d3e203537363935.roa (raw, json)
Hash identifier:          SPGV8cz23OXVtY1/WBtsxbxXhYFhmyQwGc0AQ879Tzo=
Subject key identifier:   4F:61:95:59:F1:7C:D5:5F:68:9C:5E:F0:F4:E0:53:0D:D9:CF:2E:5E
Certificate issuer:       /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Certificate serial:       0F98D64A3BE04E7D70C53F0721A38A89168978A1
Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/0/3130332e3137302e3233322e302f32332d3234203d3e203537363935.roa
Signing time:             Sun 05 Oct 2025 22:31:18 +0000
ROA not before:           Sun 05 Oct 2025 22:26:18 +0000
ROA not after:            Sun 04 Oct 2026 22:31:18 +0000
asID:                     57695
IP address blocks:        103.170.232.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
                          rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 00:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:98:d6:4a:3b:e0:4e:7d:70:c5:3f:07:21:a3:8a:89:16:89:78:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121C330000, serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
        Validity
            Not Before: Oct  5 22:26:18 2025 GMT
            Not After : Oct  4 22:31:18 2026 GMT
        Subject: CN=4F619559F17CD55F689C5EF0F4E0530DD9CF2E5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e5:bc:3a:9f:95:2b:26:d2:49:d6:41:50:10:
                    90:b2:be:be:02:ca:29:2c:61:5e:1b:8e:07:19:54:
                    05:43:a1:ba:52:18:f9:86:1f:eb:61:30:a7:25:76:
                    4d:f1:c6:33:8d:e9:a6:01:9c:41:08:24:3c:5b:4c:
                    63:e2:25:76:a6:df:0b:fe:44:9e:e1:61:00:16:a2:
                    0a:b6:45:55:21:8b:f0:13:45:b4:75:1f:ef:b3:a3:
                    61:eb:82:c8:de:4c:5c:a0:7d:74:21:ee:c5:0f:46:
                    62:b5:77:34:15:fd:c1:1e:c8:62:84:8a:81:af:81:
                    0c:15:ed:3a:a6:a2:4f:98:86:05:df:29:6c:2e:e9:
                    d0:5f:3c:c9:78:05:38:cd:67:67:0b:12:31:62:5b:
                    bf:1e:b8:c1:71:7b:e9:b5:14:50:20:07:c4:ab:9e:
                    6f:f1:ba:58:25:31:00:b0:70:3b:ae:93:f7:83:73:
                    5f:9e:ce:32:31:6f:a0:57:e5:ad:a8:9c:8d:02:ac:
                    6e:ce:88:54:51:20:b5:fa:32:da:b5:cb:12:5c:14:
                    bf:14:38:e5:1f:a3:f2:53:97:1e:97:e8:2f:10:3e:
                    5b:9b:b7:64:32:66:6f:07:02:d7:c8:bf:54:b1:88:
                    3d:e3:b1:22:23:44:d8:4f:57:c5:18:d8:5d:a0:38:
                    fc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:61:95:59:F1:7C:D5:5F:68:9C:5E:F0:F4:E0:53:0D:D9:CF:2E:5E
            X509v3 Authority Key Identifier:
                keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/3130332e3137302e3233322e302f32332d3234203d3e203537363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:51:1e:36:6a:aa:6d:ef:d0:5b:16:72:d0:52:1a:5a:aa:80:
         38:56:c7:2a:12:91:67:ba:0a:53:0b:0f:69:48:c5:b4:89:61:
         e7:62:fa:37:86:36:af:6c:0e:e0:a3:af:b5:23:cb:f2:cd:69:
         05:66:20:5d:76:f7:80:64:10:9c:d2:f0:25:ed:bf:c4:69:db:
         77:36:b4:64:a1:db:f2:3b:a9:59:fb:14:55:29:80:1c:43:a3:
         bb:5d:33:65:39:2e:f7:31:70:71:1c:eb:f3:03:40:19:bd:76:
         fe:37:fa:22:ca:a5:10:ef:22:49:d1:ed:ac:0e:73:58:42:67:
         de:ff:99:7e:3e:f8:0b:72:84:b5:31:bd:50:5f:82:5e:b5:45:
         73:de:e6:7a:28:7a:ae:09:70:22:16:89:0b:03:67:96:86:fe:
         ad:25:8d:4e:c9:b5:de:a4:9f:39:76:56:1f:33:5a:de:0e:c0:
         a5:d4:38:27:b1:80:58:06:ba:2d:8c:1d:ff:13:a4:f2:65:40:
         d7:b5:16:b4:fa:5e:5c:63:3d:b1:e9:c3:1d:d8:1a:67:4b:d1:
         7f:b1:aa:e1:1d:1c:4d:41:87:e4:fa:49:0d:c4:1f:8a:14:f3:
         11:a0:ec:bb:43:92:ef:32:ef:18:37:bb:ec:33:8b:e0:17:24:
         1d:74:d4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:34:38 2025 by rpki-client