Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/0/323430373a623963303a663030303a3a2f33362d3438203d3e203233393631.roa
File:                     323430373a623963303a663030303a3a2f33362d3438203d3e203233393631.roa (raw, json)
Hash identifier:          Ndg1bmsRuBSL7CF5QQzZOGIFLYIHMSUM05PGM6gpt7I=
Subject key identifier:   BD:FD:13:FD:C3:08:27:A2:D6:DC:CF:88:C4:18:77:CD:B8:D6:03:8B
Certificate issuer:       /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Certificate serial:       343FFF9C17D696E1E2FBD440F78402A2596972F2
Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/0/323430373a623963303a663030303a3a2f33362d3438203d3e203233393631.roa
Signing time:             Sun 05 Oct 2025 22:31:18 +0000
ROA not before:           Sun 05 Oct 2025 22:26:18 +0000
ROA not after:            Sun 04 Oct 2026 22:31:18 +0000
asID:                     23961
IP address blocks:        2407:b9c0:f000::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
                          rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 Oct 2025 00:56:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:3f:ff:9c:17:d6:96:e1:e2:fb:d4:40:f7:84:02:a2:59:69:72:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121C330000, serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
        Validity
            Not Before: Oct  5 22:26:18 2025 GMT
            Not After : Oct  4 22:31:18 2026 GMT
        Subject: CN=BDFD13FDC30827A2D6DCCF88C41877CDB8D6038B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8e:09:01:77:36:ee:59:45:a7:4b:c9:74:23:
                    ca:0b:c5:84:80:a1:c7:3d:9a:8e:3f:b1:6a:d2:79:
                    8a:88:62:e0:7f:15:51:18:a5:cb:d3:a3:c6:7d:12:
                    e7:b3:8a:83:37:49:92:1d:0b:6e:ea:a9:08:ec:24:
                    91:a1:bf:fb:a6:50:ed:7b:f5:0a:01:94:74:8a:b5:
                    75:6d:42:d3:6d:79:e2:35:2f:50:e6:29:72:d1:1c:
                    d0:54:ba:45:28:77:f5:16:88:20:5b:a1:83:53:32:
                    71:8f:e9:d1:aa:b2:bd:a2:fd:e3:57:d2:28:a9:8b:
                    d1:2b:96:b6:16:16:29:7b:b4:61:95:d7:ec:2d:2c:
                    ad:32:ca:32:b2:01:95:14:67:49:a3:1d:7a:08:3b:
                    1a:66:53:cc:5f:d9:73:a5:0a:47:e5:8a:99:ea:5e:
                    51:a5:4e:0e:e2:ab:fe:28:c2:0a:ab:3e:6c:ed:20:
                    28:d4:19:68:60:14:c3:44:88:50:c4:61:56:d8:4a:
                    c8:45:b9:d0:65:57:9e:c1:df:01:cb:93:0a:b7:8e:
                    49:c3:19:97:fb:8b:ae:4d:27:2b:34:33:b8:b6:a6:
                    50:d2:a5:0f:6e:00:dc:29:48:62:57:c8:4c:66:1f:
                    3f:4e:80:8a:71:01:33:37:0a:fc:2e:53:45:00:16:
                    b5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FD:13:FD:C3:08:27:A2:D6:DC:CF:88:C4:18:77:CD:B8:D6:03:8B
            X509v3 Authority Key Identifier:
                keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/323430373a623963303a663030303a3a2f33362d3438203d3e203233393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:b9c0:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3c:2d:f6:4b:a2:61:b4:84:b5:69:af:b6:ee:10:55:80:95:38:
         45:de:94:c7:28:cd:31:41:6a:9c:33:a0:d6:9e:21:d9:a0:b4:
         ff:89:5f:38:0e:96:cc:8f:c9:d2:0f:28:fb:5d:e3:26:39:a0:
         31:59:d6:83:50:26:c9:60:f9:a0:a5:69:ee:0c:c5:03:07:52:
         7a:03:46:f7:f6:e5:fb:9a:59:36:cd:ed:57:43:46:0a:f7:53:
         cb:45:32:d7:09:bf:52:6e:0d:a2:46:76:f6:3e:c1:b0:c3:58:
         a1:61:31:89:64:9a:3d:a7:12:ca:0a:82:0b:60:29:fc:bd:be:
         b2:3c:1c:f1:11:fe:fd:8f:8d:af:f3:16:54:65:bc:93:e5:fc:
         1c:3c:e9:ba:f7:88:d5:c0:3a:1c:5d:9f:d1:66:bb:67:fa:79:
         83:d6:80:88:29:61:0b:64:3f:a8:e5:ff:1d:12:c5:aa:bc:57:
         66:74:cd:8f:1b:f6:83:6f:ab:ab:d0:be:c7:aa:94:2d:b0:62:
         ee:a8:c2:ed:72:b0:19:94:25:16:8d:47:a0:a6:24:69:6e:c1:
         a6:58:d1:e1:e9:c2:90:bf:e0:83:79:c7:b7:76:68:0d:48:4b:
         d2:83:09:fe:37:73:60:27:94:8c:da:ef:b7:ef:b2:e1:c8:0d:
         ff:f8:18:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:33:33 2025 by rpki-client