Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133352e302f32342d3234203d3e2034333832.roa
File:                     3230322e39332e3133352e302f32342d3234203d3e2034333832.roa (raw, json)
Hash identifier:          1/BA/ROsOr+QclwQFixrCmmCLP5ySAu9YGThGwbW3/c=
Subject key identifier:   0F:CC:5A:DB:90:7B:10:7F:D2:34:34:32:25:63:79:61:76:10:BC:29
Certificate issuer:       /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Certificate serial:       15F9A0906E48DCF112F4FEBAC3B0AAAFF37BA78A
Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133352e302f32342d3234203d3e2034333832.roa
Signing time:             Wed 20 Sep 2023 13:00:15 +0000
ROA not before:           Wed 20 Sep 2023 12:55:15 +0000
ROA not after:            Wed 18 Sep 2024 13:00:15 +0000
asID:                     4382
IP address blocks:        202.93.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl
                          rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 20:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f9:a0:90:6e:48:dc:f1:12:f4:fe:ba:c3:b0:aa:af:f3:7b:a7:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
        Validity
            Not Before: Sep 20 12:55:15 2023 GMT
            Not After : Sep 18 13:00:15 2024 GMT
        Subject: CN=0FCC5ADB907B107FD2343432256379617610BC29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5a:a2:01:b0:e5:d3:1f:66:8f:a1:1a:a1:8d:
                    dc:45:f2:b4:bd:3b:a4:85:59:06:cd:0b:53:9b:da:
                    5b:ca:06:79:9b:ba:64:84:e9:75:5d:d7:d3:6a:dc:
                    98:80:64:5d:4d:5b:a6:00:52:35:ce:4d:4b:56:0b:
                    f2:cf:58:2b:bc:4d:72:e6:6e:2d:ed:62:a7:e2:18:
                    64:23:13:2f:9f:9e:12:24:d2:d0:e7:b8:3a:04:85:
                    3b:4a:ff:70:50:9b:7e:dc:bb:d3:4c:28:af:32:25:
                    d7:ea:8a:87:f0:34:c6:09:69:71:50:4a:21:51:22:
                    4c:36:a8:5e:ec:24:95:f3:55:0a:79:8e:e2:53:c1:
                    28:f8:e8:e3:d2:00:2b:b9:e8:b5:c8:6d:7a:26:0a:
                    c5:3b:81:4a:49:b1:20:65:79:c4:95:8a:14:2e:5c:
                    a3:64:04:df:e5:15:96:47:44:8c:5c:42:e1:c7:5c:
                    ee:80:84:63:ad:23:42:83:ad:f8:24:0c:87:93:03:
                    42:6e:a7:4e:65:bf:a9:0e:93:45:fe:3e:2f:c1:48:
                    af:b6:5b:0e:c5:59:19:ca:16:90:26:4f:2b:e2:ca:
                    85:5f:cf:66:4c:c4:7c:19:c2:bf:64:74:c0:55:de:
                    f5:c6:96:15:b7:36:33:e7:a4:fa:65:5c:d8:b3:92:
                    8f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:CC:5A:DB:90:7B:10:7F:D2:34:34:32:25:63:79:61:76:10:BC:29
            X509v3 Authority Key Identifier:
                keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3230322e39332e3133352e302f32342d3234203d3e2034333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.93.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:47:1a:ec:ff:2a:80:02:e4:95:ca:88:4a:27:d2:ac:93:10:
         eb:24:0b:e4:cd:af:e9:52:78:61:38:4a:eb:2b:c9:69:50:bb:
         02:8c:2c:6e:66:39:b5:23:d7:55:79:82:15:e9:65:11:47:41:
         3f:43:21:34:1f:11:7b:80:3f:a5:04:e7:e6:87:cf:6b:e7:2a:
         50:66:a1:65:22:92:b1:22:ef:c3:ee:07:d1:5e:8d:af:90:a5:
         e5:17:b0:2e:23:4b:8d:2f:b7:43:29:9b:a0:2c:bc:ad:55:f7:
         4f:47:ad:d5:84:4a:e6:a9:ef:a0:22:b5:c9:65:1f:69:40:a7:
         fb:1f:9f:b6:57:f2:10:49:bc:db:20:db:fe:81:64:84:ba:70:
         bb:4d:fe:7a:f2:f6:01:d1:e8:65:85:91:67:6c:98:bc:2c:e0:
         dd:77:a4:9e:0f:af:de:a6:88:80:dd:b4:06:02:85:c3:2a:ea:
         a9:7e:94:1a:e1:4a:12:9c:3d:d2:fd:dc:5b:05:97:90:9f:cc:
         6c:cf:dc:2c:ac:d3:50:5c:06:89:7e:4d:70:a5:04:91:ab:4f:
         fb:f3:99:a8:c7:c0:c5:35:c4:e8:9e:88:c7:6b:f2:41:6f:e4:
         a7:d5:ff:33:d8:f7:31:19:63:c9:98:0a:ed:39:ea:1c:e6:23:
         83:36:4a:69
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUFfmgkG5I3PES9P66w7Cqr/N7p4owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMx
RUZEQTkzQzAeFw0yMzA5MjAxMjU1MTVaFw0yNDA5MTgxMzAwMTVaMDMxMTAvBgNV
BAMTKDBGQ0M1QURCOTA3QjEwN0ZEMjM0MzQzMjI1NjM3OTYxNzYxMEJDMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMWqIBsOXTH2aPoRqhjdxF8rS9
O6SFWQbNC1Ob2lvKBnmbumSE6XVd19Nq3JiAZF1NW6YAUjXOTUtWC/LPWCu8TXLm
bi3tYqfiGGQjEy+fnhIk0tDnuDoEhTtK/3BQm37cu9NMKK8yJdfqiofwNMYJaXFQ
SiFRIkw2qF7sJJXzVQp5juJTwSj46OPSACu56LXIbXomCsU7gUpJsSBlecSVihQu
XKNkBN/lFZZHRIxcQuHHXO6AhGOtI0KDrfgkDIeTA0Jup05lv6kOk0X+Pi/BSK+2
Ww7FWRnKFpAmTyviyoVfz2ZMxHwZwr9kdMBV3vXGlhW3NjPnpPplXNizko8TAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUD8xa25B7EH/SNDQyJWN5YXYQvCkwHwYDVR0j
BBgwFoAUAS0vWZN/2+ZQlbnrSXHZ0x79qTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ODZiMzg4OS02OTY2LTQ1ZWYtOTA3My1hZDE0MDExYWMzYjIvMC8wMTJEMkY1OTkz
N0ZEQkU2NTA5NUI5RUI0OTcxRDlEMzFFRkRBOTNDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMxRUZE
QTkzQy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4NmIzODg5LTY5NjYtNDVlZi05
MDczLWFkMTQwMTFhYzNiMi8wLzMyMzAzMjJlMzkzMzJlMzEzMzM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzMzM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKXYcwDQYJKoZIhvcN
AQELBQADggEBAJdHGuz/KoAC5JXKiEon0qyTEOskC+TNr+lSeGE4SusryWlQuwKM
LG5mObUj11V5ghXpZRFHQT9DITQfEXuAP6UE5+aHz2vnKlBmoWUikrEi78PuB9Fe
ja+QpeUXsC4jS40vt0Mpm6AsvK1V909HrdWESuap76AitcllH2lAp/sfn7ZX8hBJ
vNsg2/6BZIS6cLtN/nry9gHR6GWFkWdsmLws4N13pJ4Pr96miIDdtAYChcMq6ql+
lBrhShKcPdL93FsFl5CfzGzP3Cys01BcBol+TXClBJGrT/vzmajHwMU1xOieiMdr
8kFv5KfV/zPY9zEZY8mYCu056hzmI4M2Smk=
-----END CERTIFICATE-----
Generated at Thu Apr 25 16:38:54 2024 by rpki-client on console-ams.rpki-client.org