Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31352e302f32342d3234203d3e203338313530.roa
File:                     3230322e39312e31352e302f32342d3234203d3e203338313530.roa (raw, json)
Hash identifier:          RuWtxo3BuKqmF9TrTu8Lvn5FloDPVTt7y5Cq7E4FGpc=
Subject key identifier:   8E:07:10:26:DD:3D:89:38:79:73:2C:B1:B3:68:6C:E5:18:F2:14:1E
Certificate issuer:       /CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
Certificate serial:       5B4E65D69A7761FE136EBE05616F7DB13FDEBE6C
Authority key identifier: 2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31352e302f32342d3234203d3e203338313530.roa
Signing time:             Mon 31 Jul 2023 00:05:06 +0000
ROA not before:           Mon 31 Jul 2023 00:00:06 +0000
ROA not after:            Mon 29 Jul 2024 00:05:06 +0000
asID:                     38150
IP address blocks:        202.91.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl
                          rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 20:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:4e:65:d6:9a:77:61:fe:13:6e:be:05:61:6f:7d:b1:3f:de:be:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA47487F72781733330A38C95FF8A5DF68CDBB9
        Validity
            Not Before: Jul 31 00:00:06 2023 GMT
            Not After : Jul 29 00:05:06 2024 GMT
        Subject: CN=8E071026DD3D893879732CB1B3686CE518F2141E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bf:ee:9e:a4:43:cc:61:ba:cb:3a:16:c3:78:
                    18:38:e0:93:0c:44:fa:ba:7b:97:d8:86:a4:f4:bb:
                    c4:47:b7:cd:1f:ca:6b:f2:ff:3e:0b:60:2f:ee:9d:
                    f9:ca:88:65:64:63:90:33:03:69:f4:14:a8:3a:54:
                    2f:0d:c6:df:86:a9:e3:ca:64:e8:6f:23:b6:ef:ca:
                    ad:c4:c8:f3:7e:6d:11:c1:e7:57:c8:2e:5e:75:7c:
                    9d:c2:02:9a:fb:b9:4c:12:2d:6a:02:30:b7:1f:55:
                    88:ed:5b:31:1c:ca:cf:0a:6f:fa:6f:08:6a:36:99:
                    bc:6a:47:96:dc:80:58:13:5c:55:3b:67:17:2a:04:
                    85:26:bd:86:0e:08:c8:d2:88:8a:30:d7:a1:a9:ce:
                    02:f2:ab:61:ae:78:d8:92:b2:47:ca:4f:d6:44:e2:
                    c5:d7:88:68:98:31:ba:aa:9a:e3:f0:41:c7:fc:17:
                    3f:d4:66:fe:4e:ef:0b:1b:2b:38:d2:34:ee:1a:59:
                    70:5f:5e:61:78:3a:e5:5c:ec:78:e2:e7:d7:2e:d6:
                    86:49:e0:78:8b:65:ef:e4:75:7f:be:f6:06:5d:09:
                    74:8c:8f:bc:3a:72:02:fb:78:83:91:8f:a1:95:7b:
                    3d:0a:29:3b:6c:62:b9:e3:eb:0a:34:8f:09:40:f3:
                    7b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:07:10:26:DD:3D:89:38:79:73:2C:B1:B3:68:6C:E5:18:F2:14:1E
            X509v3 Authority Key Identifier:
                keyid:2C:A4:74:87:F7:27:81:73:33:30:A3:8C:95:FF:8A:5D:F6:8C:DB:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/2CA47487F72781733330A38C95FF8A5DF68CDBB9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CA47487F72781733330A38C95FF8A5DF68CDBB9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17e65b67-905c-403c-8c79-2315659668aa/0/3230322e39312e31352e302f32342d3234203d3e203338313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.91.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:87:ca:d1:1a:39:e8:9e:2d:81:a0:2d:5f:11:8e:c6:74:d9:
         f4:0d:98:a1:8c:5f:99:02:38:99:77:f1:76:3e:bf:ca:13:ae:
         75:5a:23:78:7a:23:54:0c:2a:10:ee:52:62:22:32:d5:51:12:
         6e:b7:fb:b1:e9:10:d1:4a:ce:eb:31:b1:96:7f:a8:66:f7:34:
         e2:42:88:b0:0c:b9:37:e2:e7:c3:4f:ab:37:c4:b4:23:35:2f:
         67:28:27:35:75:ef:d6:c4:f5:10:29:51:2e:35:e5:9c:bf:4d:
         a7:a7:47:87:61:c6:8f:a0:72:15:6f:ed:af:02:b8:4f:6c:19:
         dd:ee:76:6b:09:64:35:ca:ff:66:86:35:9d:21:c8:81:65:ff:
         cb:1f:14:a7:98:a8:fa:16:34:8a:45:14:59:42:14:b6:4c:5e:
         28:aa:2f:3c:40:ba:49:e6:cf:06:ec:30:cb:7a:2a:83:73:da:
         fc:91:7a:0f:3b:ea:68:ba:96:5a:aa:ab:6c:ca:09:3b:37:61:
         f0:12:56:19:8e:ff:c3:b4:31:5d:e9:0b:1b:01:e8:80:9f:9a:
         39:2f:a7:e0:70:57:f8:65:13:d8:93:64:d7:47:d5:4e:4e:77:
         75:c4:5e:fd:61:a3:25:1d:11:17:f2:63:3f:3a:7f:92:d1:6e:
         30:8f:9f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 14:06:02 2024 by rpki-client on console-ams.rpki-client.org