Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139342e302f32342d3234203d3e203538333831.roa
File:                     3136332e35332e3139342e302f32342d3234203d3e203538333831.roa (raw, json)
Hash identifier:          kaCupLZjXdVEKbW1z+jzyckO87diB1WxJ5ke3f3MG/I=
Subject key identifier:   24:4C:9A:B8:12:12:E7:E9:4D:30:14:98:26:4F:0B:FA:7B:A4:2C:1E
Certificate issuer:       /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial:       4A302868D7F4A3E243BA4522F894DC3F2F5FF0B6
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139342e302f32342d3234203d3e203538333831.roa
Signing time:             Wed 31 May 2023 16:04:47 +0000
ROA not before:           Wed 31 May 2023 15:59:47 +0000
ROA not after:            Wed 29 May 2024 16:04:47 +0000
asID:                     58381
IP address blocks:        163.53.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
                          rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 21:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:30:28:68:d7:f4:a3:e2:43:ba:45:22:f8:94:dc:3f:2f:5f:f0:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
        Validity
            Not Before: May 31 15:59:47 2023 GMT
            Not After : May 29 16:04:47 2024 GMT
        Subject: CN=244C9AB81212E7E94D301498264F0BFA7BA42C1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:27:1b:62:23:7b:42:79:d4:4a:e4:6b:dc:05:
                    31:8a:9c:97:e8:c6:7f:2c:c9:e3:26:48:46:3b:6b:
                    a9:0a:ef:1f:63:c2:36:8c:0a:5d:be:ab:76:ed:90:
                    4f:79:6a:c3:ae:78:3a:30:6a:dc:33:19:1d:0d:24:
                    56:d3:3a:1e:6e:46:72:02:10:7a:91:31:7e:e0:06:
                    76:71:25:ea:4f:58:44:23:c4:80:b7:cf:79:7a:fc:
                    50:b5:1d:56:8f:8a:38:2f:5e:4d:57:2e:ef:e5:42:
                    89:e4:88:af:54:e6:33:e7:1b:dc:05:7a:60:79:c3:
                    48:de:77:48:81:b9:94:2b:4a:aa:e1:76:44:aa:78:
                    f7:8e:98:ef:26:4d:bd:12:0e:a6:5e:d6:c1:7c:ad:
                    b2:5b:ae:e2:d4:4f:53:8a:9c:eb:ae:f4:52:33:75:
                    44:68:03:ec:8f:cd:7b:50:e0:f6:ef:d5:1a:6f:ee:
                    bf:68:56:09:b2:4a:9a:35:9f:02:ac:a1:23:94:7c:
                    39:ed:5e:5c:dd:3a:d1:1d:88:34:fa:6e:d3:21:bf:
                    ba:82:35:3d:e2:5a:51:e4:1d:ad:82:7f:dc:2c:97:
                    23:92:3a:e7:b9:f0:d1:d4:34:ef:5a:b7:f8:87:c3:
                    b0:cc:b5:c0:6d:27:c5:be:12:22:f9:7f:e7:a4:29:
                    09:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:4C:9A:B8:12:12:E7:E9:4D:30:14:98:26:4F:0B:FA:7B:A4:2C:1E
            X509v3 Authority Key Identifier:
                keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139342e302f32342d3234203d3e203538333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.53.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:1a:f5:48:47:61:f1:91:96:95:b4:97:84:8e:0d:4f:e0:1f:
         8f:62:38:39:3c:78:9a:00:7a:e3:e6:15:22:e4:c2:7f:d1:ed:
         4b:29:ac:32:59:77:34:d3:bc:a3:8b:a1:2d:87:f9:e2:6a:c5:
         38:68:e1:0c:71:7d:a7:98:54:74:5d:d9:68:58:ed:c9:83:a7:
         c6:ab:e0:46:89:cc:4d:d6:ea:3c:4b:f3:a9:ec:fb:f9:c6:e2:
         4b:01:a8:5c:76:7e:07:e3:58:2e:be:a7:4f:d4:c1:6b:d8:55:
         08:56:f9:0a:47:48:fe:06:3d:0a:27:ad:14:0b:51:ae:40:09:
         5b:9d:9e:c9:4e:89:88:76:5b:4d:c4:2a:a0:61:be:c8:a3:40:
         76:58:4d:bb:49:7c:69:c0:dd:75:67:36:cf:92:fe:ed:b4:5f:
         8c:45:04:09:af:b4:ed:2f:a4:1e:27:07:66:22:d3:e7:11:c0:
         82:0e:e5:57:18:79:33:de:be:d4:86:33:c6:9a:b1:ba:5a:c9:
         f3:56:f8:44:aa:e3:05:0e:5f:83:2d:48:7e:6a:b0:8d:3b:ec:
         89:fe:80:a2:88:3e:c9:e2:4b:7c:9b:29:f3:83:b1:ef:1c:e7:
         ea:96:da:08:fc:4c:9a:9e:01:d4:e7:4a:0c:4f:68:8e:4b:9c:
         c7:28:f1:ca
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUSjAoaNf0o+JDukUi+JTcPy9f8LYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVBOTA3QzRFQzZEQTZEOTM0MjYxMzI4MENDQUYyNkU5
OERCRUI5ODAeFw0yMzA1MzExNTU5NDdaFw0yNDA1MjkxNjA0NDdaMDMxMTAvBgNV
BAMTKDI0NEM5QUI4MTIxMkU3RTk0RDMwMTQ5ODI2NEYwQkZBN0JBNDJDMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBJxtiI3tCedRK5GvcBTGKnJfo
xn8syeMmSEY7a6kK7x9jwjaMCl2+q3btkE95asOueDowatwzGR0NJFbTOh5uRnIC
EHqRMX7gBnZxJepPWEQjxIC3z3l6/FC1HVaPijgvXk1XLu/lQonkiK9U5jPnG9wF
emB5w0jed0iBuZQrSqrhdkSqePeOmO8mTb0SDqZe1sF8rbJbruLUT1OKnOuu9FIz
dURoA+yPzXtQ4Pbv1Rpv7r9oVgmySpo1nwKsoSOUfDntXlzdOtEdiDT6btMhv7qC
NT3iWlHkHa2Cf9wslyOSOue58NHUNO9at/iHw7DMtcBtJ8W+EiL5f+ekKQmNAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUJEyauBIS5+lNMBSYJk8L+nukLB4wHwYDVR0j
BBgwFoAU5akHxOxtptk0JhMoDMrybpjb65gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MzhkMjc1NS0zODBkLTQ3N2UtYmYyNS0wYWYyOTAyNmJkNzAvMC9FNUE5MDdDNEVD
NkRBNkQ5MzQyNjEzMjgwQ0NBRjI2RTk4REJFQjk4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTVBOTA3QzRFQzZEQTZEOTM0MjYxMzI4MENDQUYyNkU5OERC
RUI5OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzOGQyNzU1LTM4MGQtNDc3ZS1i
ZjI1LTBhZjI5MDI2YmQ3MC8wLzMxMzYzMzJlMzUzMzJlMzEzOTM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODMzMzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKM1wjANBgkqhkiG
9w0BAQsFAAOCAQEAoBr1SEdh8ZGWlbSXhI4NT+Afj2I4OTx4mgB64+YVIuTCf9Ht
SymsMll3NNO8o4uhLYf54mrFOGjhDHF9p5hUdF3ZaFjtyYOnxqvgRonMTdbqPEvz
qez7+cbiSwGoXHZ+B+NYLr6nT9TBa9hVCFb5CkdI/gY9CietFAtRrkAJW52eyU6J
iHZbTcQqoGG+yKNAdlhNu0l8acDddWc2z5L+7bRfjEUECa+07S+kHicHZiLT5xHA
gg7lVxh5M96+1IYzxpqxulrJ81b4RKrjBQ5fgy1IfmqwjTvsif6Aoog+yeJLfJsp
84Ox7xzn6pbaCPxMmp4B1OdKDE9ojkucxyjxyg==
-----END CERTIFICATE-----
Generated at Sun Apr 28 05:31:58 2024 by rpki-client on console-ams.rpki-client.org