Route Origin Authorization

$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa
File:                     323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa (raw, json)
Hash identifier:          hJxx3nr/lfwP0kEgV9nZ8LhD9nuKvmRGXnwzZAzg9w0=
Subject key identifier:   55:66:89:25:9A:94:EC:D0:83:9C:F4:7C:FC:80:12:9B:32:D7:63:69
Certificate issuer:       /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Certificate serial:       30F52EDA648AA05FBC3A8980BF742B248C733821
Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject info access:      rsync://rpki.owl.net/rrdp/owl/0/323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa
Signing time:             Wed 23 Apr 2025 12:05:22 +0000
ROA not before:           Wed 23 Apr 2025 12:00:22 +0000
ROA not after:            Wed 22 Apr 2026 12:05:22 +0000
asID:                     212512
IP address blocks:        2403:fbc0:a000::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
                          rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 23:20:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f5:2e:da:64:8a:a0:5f:bc:3a:89:80:bf:74:2b:24:8c:73:38:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
        Validity
            Not Before: Apr 23 12:00:22 2025 GMT
            Not After : Apr 22 12:05:22 2026 GMT
        Subject: CN=556689259A94ECD0839CF47CFC80129B32D76369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:92:93:b8:a4:62:2c:fa:37:d1:e6:bd:c7:0c:
                    b5:c1:7c:7c:0e:d4:ce:a1:97:d2:0d:b9:e7:1a:85:
                    15:c1:d0:a8:29:a7:92:ce:4a:e9:4a:f3:5b:3c:eb:
                    0e:35:7a:2f:89:24:48:2f:85:0a:d1:da:aa:06:e5:
                    c9:96:f2:56:ec:23:8c:f8:3c:2d:04:27:72:98:a3:
                    17:4a:c0:6f:a4:7c:8e:68:3a:73:f4:ac:28:28:b3:
                    db:5d:23:46:2a:46:84:c6:b5:f1:fb:c4:12:bc:d2:
                    0c:34:c2:75:ce:f7:a2:95:93:c4:af:71:70:b3:f2:
                    03:81:65:36:7a:8f:cd:9a:ef:dc:3d:42:86:57:85:
                    9c:eb:e6:d7:8e:0c:5f:58:88:ec:f4:87:af:2a:68:
                    3d:e1:e7:29:a7:c6:8a:fb:5c:d5:89:a6:ac:fe:53:
                    f2:9e:f5:a3:c4:17:81:d2:e4:e2:9d:fb:c0:7a:4a:
                    0f:ef:35:13:c8:88:06:18:18:dc:44:08:44:b0:c8:
                    2e:c7:b0:0e:d3:43:4a:62:4c:e0:e5:42:43:25:ed:
                    07:78:cc:07:d6:3d:6c:2a:50:ae:b3:6a:4e:c5:85:
                    e6:3c:a6:32:66:f9:58:88:2e:5e:ab:45:98:2e:96:
                    5c:28:c4:74:92:a7:47:05:f4:f5:95:1f:8b:db:af:
                    50:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:66:89:25:9A:94:EC:D0:83:9C:F4:7C:FC:80:12:9B:32:D7:63:69
            X509v3 Authority Key Identifier:
                keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:fbc0:a000::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:2d:43:e6:ee:bf:aa:03:95:b2:0c:81:a2:bd:2c:7c:2a:97:
         54:31:f2:8f:2a:4e:5c:7d:2f:9a:e8:4d:76:a2:d2:8a:f6:30:
         c9:96:c6:8d:be:ac:81:a6:2a:ab:0f:68:b4:1a:fd:62:b2:c9:
         d4:d8:2b:4b:ad:53:e2:de:d1:c1:ca:d9:9a:47:bf:61:00:3e:
         55:ea:dc:8c:70:51:f5:85:c3:f8:c1:6f:9d:e7:62:b1:7f:97:
         34:00:e7:da:76:60:84:63:dd:e2:7d:9d:53:b1:52:08:26:5b:
         2d:d2:ce:7a:31:43:30:9f:29:68:e7:a3:30:16:30:6d:b2:e3:
         2b:ab:c4:94:84:0c:45:a1:f8:72:8d:ed:9a:3f:47:27:fa:d4:
         4b:11:01:0e:ce:a6:24:b6:40:fd:c7:27:87:43:b9:09:e2:db:
         57:da:b9:bf:e6:7e:b4:47:55:e1:e6:f2:3b:b4:8d:35:fc:be:
         16:fe:ca:19:27:d4:16:41:16:ad:13:a2:5b:b0:d5:72:ae:c9:
         15:d2:8b:ac:2a:df:8b:d5:a7:cf:8d:ea:b3:03:1b:12:42:1d:
         e0:5e:18:65:65:2b:1a:c4:4c:55:99:c2:ef:b5:dd:f3:12:97:
         00:92:94:dc:19:8e:7e:ad:bf:eb:1d:d8:9b:c9:60:bd:5f:b4:
         5c:09:43:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:12:47 2025 by rpki-client on console.sobornost.net