Route Origin Authorization

$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/323430333a666263303a363030303a3a2f34382d3438203d3e20323132353132.roa
File:                     323430333a666263303a363030303a3a2f34382d3438203d3e20323132353132.roa (raw, json)
Hash identifier:          SPVnXgzc6DdCcPNaKseycoy7ZTTw0qv3w3c7rqopVw0=
Subject key identifier:   DF:76:5B:5D:4A:A7:9F:71:5F:52:14:4C:A5:4E:45:A1:C2:27:86:29
Certificate issuer:       /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Certificate serial:       20BE5070AA1C722A89FBC6B000140F2FCB55EFF2
Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject info access:      rsync://rpki.owl.net/rrdp/owl/0/323430333a666263303a363030303a3a2f34382d3438203d3e20323132353132.roa
Signing time:             Wed 23 Apr 2025 12:05:38 +0000
ROA not before:           Wed 23 Apr 2025 12:00:38 +0000
ROA not after:            Wed 22 Apr 2026 12:05:38 +0000
asID:                     212512
IP address blocks:        2403:fbc0:6000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
                          rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 04:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:be:50:70:aa:1c:72:2a:89:fb:c6:b0:00:14:0f:2f:cb:55:ef:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
        Validity
            Not Before: Apr 23 12:00:38 2025 GMT
            Not After : Apr 22 12:05:38 2026 GMT
        Subject: CN=DF765B5D4AA79F715F52144CA54E45A1C2278629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5e:e0:fc:08:08:78:5f:62:cb:2c:ec:b2:6d:
                    3b:e1:bf:c9:9d:6a:af:5a:e5:0c:a9:74:e9:e3:e0:
                    d6:3d:12:42:b5:1f:e9:7d:b2:70:ac:dc:5e:34:dd:
                    90:fa:37:a4:cb:bb:8e:b6:ff:33:2f:9f:66:22:7f:
                    e9:bb:0a:44:f8:36:af:a8:29:3a:b5:88:8c:9a:6f:
                    89:f1:00:af:f7:17:8b:59:2a:b0:f5:48:8f:75:ff:
                    d2:e6:ef:3c:23:39:3d:9d:5e:73:41:98:64:68:12:
                    91:e1:41:9c:da:5a:5a:f4:06:f4:20:e3:e0:16:0e:
                    56:57:03:fb:ca:a8:27:e7:38:df:49:25:9b:6e:49:
                    e1:7b:9c:e4:96:51:48:73:88:17:b4:5b:31:d1:33:
                    da:7e:60:a1:cd:8c:30:b9:4a:e9:94:c4:12:5e:dd:
                    90:08:3b:1b:69:00:5a:a7:e1:62:25:ce:9c:0d:29:
                    39:2f:c2:6f:8a:a9:20:9a:c5:7f:9f:fe:29:45:60:
                    f1:85:c1:72:84:2e:f1:dd:b5:35:1a:17:db:7a:ee:
                    b3:13:9d:30:72:19:f3:9b:53:88:8d:43:7f:76:49:
                    ed:dc:50:01:aa:a8:84:a0:c7:e0:f7:8f:6e:31:55:
                    44:ea:20:38:5b:cd:6f:b7:79:b4:b0:e0:6e:05:84:
                    be:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:76:5B:5D:4A:A7:9F:71:5F:52:14:4C:A5:4E:45:A1:C2:27:86:29
            X509v3 Authority Key Identifier:
                keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/323430333a666263303a363030303a3a2f34382d3438203d3e20323132353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fbc0:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:0c:89:b2:7f:4b:be:b3:9c:f4:e6:33:27:63:05:7a:bd:6c:
         5b:68:08:17:a7:ab:4d:87:08:fe:78:f3:a2:88:fb:84:9a:f8:
         92:b3:b3:ec:b3:2f:a3:4e:59:05:be:ad:7c:fa:0b:db:76:b4:
         75:27:e5:72:6a:af:30:f1:59:19:f8:4d:10:2f:a7:6e:72:bf:
         e6:67:af:92:66:80:67:1b:15:86:08:8e:71:5e:14:cb:8b:cd:
         3e:d3:46:e1:8b:99:4c:d0:0e:95:d7:c2:72:82:35:f2:8e:e8:
         76:14:f3:d7:8d:62:0b:75:48:b7:11:ff:1d:79:e9:46:48:07:
         b0:b3:35:60:92:e9:21:62:4f:f1:8f:96:41:a7:1b:16:9a:7a:
         9c:0a:6a:ef:11:a7:2d:9d:c3:60:fa:ac:fe:cd:a2:cf:07:96:
         f7:42:c6:78:a1:77:f9:69:0a:eb:d4:e1:76:c9:e7:6e:29:f3:
         f0:b1:3d:fb:96:6f:c5:6c:4c:1f:74:e1:9f:d4:29:89:df:9e:
         7a:5d:a7:b4:c3:e2:f8:3d:c6:35:dd:b7:5b:fa:33:56:46:c0:
         26:29:47:2b:4c:d1:83:1b:0c:d1:f8:f6:1f:32:70:fd:54:7a:
         be:bd:83:bc:30:23:f1:a1:ef:b5:3f:c0:1b:61:68:a6:9c:f2:
         3e:49:eb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:48 2025 by rpki-client on console.sobornost.net