Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31332e302f32342d3234203d3e203338313530.roa
File:                     3230322e39312e31332e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier:          4vF6Q8c5aJy0aw6FQBGbQaSVIZC34x38zgk6936Tsiw=
Subject key identifier:   0B:3D:DF:41:F5:64:69:B5:4D:39:BA:A5:AA:8D:CB:1C:C0:91:4D:0E
Certificate issuer:       /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Certificate serial:       73E81F19E9AA720A21A2662416FC12B2E9EAA72A
Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31332e302f32342d3234203d3e203338313530.roa
Signing time:             Mon 31 Jul 2023 00:05:06 +0000
ROA not before:           Mon 31 Jul 2023 00:00:06 +0000
ROA not after:            Mon 29 Jul 2024 00:05:06 +0000
asID:                     38150
IP address blocks:        202.91.13.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
                          rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 20:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e8:1f:19:e9:aa:72:0a:21:a2:66:24:16:fc:12:b2:e9:ea:a7:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
        Validity
            Not Before: Jul 31 00:00:06 2023 GMT
            Not After : Jul 29 00:05:06 2024 GMT
        Subject: CN=0B3DDF41F56469B54D39BAA5AA8DCB1CC0914D0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a9:52:54:a2:3e:b3:76:c5:fe:74:cd:34:c3:
                    00:b2:b1:9c:7a:e6:42:42:31:62:d1:29:a7:d5:8a:
                    13:50:aa:f8:2d:f0:de:2e:08:cc:b9:fc:3c:c3:f3:
                    7b:0b:3b:22:e5:ad:4c:a3:3f:56:05:4d:bb:25:19:
                    48:6c:91:9a:e7:38:70:43:92:37:55:05:11:d0:d8:
                    46:63:63:7b:75:18:89:9e:a3:fc:2b:49:cf:47:4a:
                    95:8a:3f:db:a7:c3:5f:d3:96:4b:cf:25:bb:f7:1d:
                    ae:64:32:df:a7:23:90:04:25:d9:ad:51:b7:7b:0c:
                    c5:04:1e:c1:3e:e0:22:57:d6:70:c9:87:9e:c1:fe:
                    59:d7:18:f1:ee:61:19:f3:b0:ef:d5:bf:7d:d5:b3:
                    f9:e4:f3:51:df:fc:08:72:b3:4c:c9:4e:d9:05:78:
                    13:f6:46:c7:15:ac:01:51:51:fe:3f:c2:41:14:ce:
                    19:8e:c4:35:34:f3:b7:31:1a:bf:27:13:7e:39:b4:
                    dc:60:e5:5b:ce:48:59:da:fa:87:10:d9:22:65:38:
                    71:c5:8e:21:b8:f6:a0:60:d9:8f:ea:f4:b5:85:dd:
                    11:05:69:a0:dc:e8:34:01:af:cc:c2:96:02:a3:ee:
                    6b:e2:3d:3e:4e:c8:ee:2e:cc:6f:0a:13:27:12:f4:
                    d7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3D:DF:41:F5:64:69:B5:4D:39:BA:A5:AA:8D:CB:1C:C0:91:4D:0E
            X509v3 Authority Key Identifier:
                keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31332e302f32342d3234203d3e203338313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.91.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:7e:3c:c9:67:36:6c:33:a1:34:0e:39:83:4d:51:60:f5:1e:
         34:46:c4:82:1d:2a:80:e2:24:ea:41:68:ec:4b:d4:dc:67:c0:
         ba:d0:cd:ae:6c:05:da:c3:5a:4d:70:56:51:f2:ed:34:cd:0a:
         84:c5:55:f4:6a:e9:5f:d5:42:7c:2e:b4:f5:3f:55:fa:3b:bd:
         9c:f3:d5:a6:e5:1e:88:e0:ca:aa:fa:88:9e:be:dc:ab:ff:fc:
         49:ae:e2:90:12:4e:e7:3c:30:4b:94:3a:a3:03:87:2d:39:9c:
         31:05:d4:8d:12:cc:c3:4c:9e:ef:b6:5e:f7:01:44:a9:8a:2d:
         fc:8c:37:1e:9a:49:d6:35:f9:61:10:f8:d9:9b:9e:92:ef:ff:
         24:da:9d:b6:ff:bc:d7:e4:28:50:c7:c2:f8:5e:d3:44:42:94:
         b3:b8:9a:4d:dc:99:f5:93:d5:ac:01:e4:9e:cc:2d:58:3d:c2:
         32:80:f0:23:34:7e:0c:9c:39:cc:11:4f:9f:81:6b:3d:78:08:
         68:f7:b8:79:41:c6:1a:f8:4c:7c:e2:92:59:51:f1:cd:65:e4:
         2e:b6:dd:f7:02:a3:6a:dd:5a:7a:f9:0f:6d:d8:6e:89:07:92:
         ce:7e:62:a4:ed:83:ba:c4:e6:e9:83:9d:45:67:85:76:93:b6:
         3f:05:6d:f5
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUc+gfGemqcgohomYkFvwSsunqpyowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURG
NjhDREJCOTAeFw0yMzA3MzEwMDAwMDZaFw0yNDA3MjkwMDA1MDZaMDMxMTAvBgNV
BAMTKDBCM0RERjQxRjU2NDY5QjU0RDM5QkFBNUFBOERDQjFDQzA5MTREMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyqVJUoj6zdsX+dM00wwCysZx6
5kJCMWLRKafVihNQqvgt8N4uCMy5/DzD83sLOyLlrUyjP1YFTbslGUhskZrnOHBD
kjdVBRHQ2EZjY3t1GImeo/wrSc9HSpWKP9unw1/TlkvPJbv3Ha5kMt+nI5AEJdmt
Ubd7DMUEHsE+4CJX1nDJh57B/lnXGPHuYRnzsO/Vv33Vs/nk81Hf/Ahys0zJTtkF
eBP2RscVrAFRUf4/wkEUzhmOxDU087cxGr8nE345tNxg5VvOSFna+ocQ2SJlOHHF
jiG49qBg2Y/q9LWF3REFaaDc6DQBr8zClgKj7mviPT5OyO4uzG8KEycS9NefAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUCz3fQfVkabVNObqlqo3LHMCRTQ4wHwYDVR0j
BBgwFoAULKR0h/cngXMzMKOMlf+KXfaM27kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
N2U2NWI2Ny05MDVjLTQwM2MtOGM3OS0yMzE1NjU5NjY4YWEvMC8yQ0E0NzQ4N0Y3
Mjc4MTczMzMzMEEzOEM5NUZGOEE1REY2OENEQkI5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkNBNDc0ODdGNzI3ODE3MzMzMzBBMzhDOTVGRjhBNURGNjhD
REJCOS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3ZTY1YjY3LTkwNWMtNDAzYy04
Yzc5LTIzMTU2NTk2NjhhYS8wLzMyMzAzMjJlMzkzMTJlMzEzMzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzgzMTM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKWw0wDQYJKoZIhvcN
AQELBQADggEBAEN+PMlnNmwzoTQOOYNNUWD1HjRGxIIdKoDiJOpBaOxL1NxnwLrQ
za5sBdrDWk1wVlHy7TTNCoTFVfRq6V/VQnwutPU/Vfo7vZzz1ablHojgyqr6iJ6+
3Kv//Emu4pASTuc8MEuUOqMDhy05nDEF1I0SzMNMnu+2XvcBRKmKLfyMNx6aSdY1
+WEQ+NmbnpLv/yTanbb/vNfkKFDHwvhe00RClLO4mk3cmfWT1awB5J7MLVg9wjKA
8CM0fgycOcwRT5+Baz14CGj3uHlBxhr4THzikllR8c1l5C623fcCo2rdWnr5D23Y
bokHks5+YqTtg7rE5umDnUVnhXaTtj8FbfU=
-----END CERTIFICATE-----
Generated at Thu Apr 25 14:20:32 2024 by rpki-client on console-fra.rpki-client.org