Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139352e302f32342d3234203d3e203538333831.roa
File:                     3136332e35332e3139352e302f32342d3234203d3e203538333831.roa (raw, json)
Hash identifier:          2icL8k21rGPWJS8QpFrXGrC5p6zgAwfRqba9egNcGys=
Subject key identifier:   7B:81:FD:52:61:F5:D6:AE:86:29:B5:1F:2F:5D:7A:DF:F1:EE:C3:A5
Certificate issuer:       /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial:       2F04158BB7F39D7EA7317A0B1947346CC05E7080
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139352e302f32342d3234203d3e203538333831.roa
Signing time:             Wed 31 May 2023 16:05:09 +0000
ROA not before:           Wed 31 May 2023 16:00:09 +0000
ROA not after:            Wed 29 May 2024 16:05:09 +0000
asID:                     58381
IP address blocks:        163.53.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
                          rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 21:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:04:15:8b:b7:f3:9d:7e:a7:31:7a:0b:19:47:34:6c:c0:5e:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
        Validity
            Not Before: May 31 16:00:09 2023 GMT
            Not After : May 29 16:05:09 2024 GMT
        Subject: CN=7B81FD5261F5D6AE8629B51F2F5D7ADFF1EEC3A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6d:ab:96:a4:6a:99:88:03:15:7e:1e:91:eb:
                    c1:65:be:77:42:4b:b4:57:54:35:ce:d2:9b:dd:fd:
                    20:53:14:97:b9:59:4e:f5:eb:e2:31:4e:2e:07:9f:
                    5b:00:70:c6:60:d7:fc:1f:d4:aa:69:a2:34:da:ef:
                    bc:73:98:17:55:62:49:e1:c9:0b:1a:88:3d:3d:16:
                    3b:c3:ef:1a:31:a5:9f:07:a9:86:f8:ee:7e:43:91:
                    63:d3:2c:e8:23:50:67:10:ed:0d:be:72:bc:d6:2d:
                    06:ef:99:59:95:a3:1f:d3:1a:b5:d5:0e:ec:49:3d:
                    ca:a9:9b:f5:ef:c3:45:f5:ab:3d:bc:08:2e:bb:43:
                    e3:ea:7b:3b:d3:52:97:ca:0c:6f:75:59:4f:29:30:
                    74:91:bd:29:fd:7b:2e:57:c8:d5:43:20:ca:d5:f4:
                    0f:c7:f8:1a:80:ba:7a:78:59:5d:de:b4:c8:09:6d:
                    54:b1:62:45:0f:73:51:cc:1a:55:0f:65:bc:7b:87:
                    3c:7a:d2:3d:61:07:68:6d:9d:18:71:4f:33:de:78:
                    c4:03:f0:e3:c3:6d:1a:0c:80:68:d5:4f:4a:f7:34:
                    23:17:26:58:11:85:45:4a:d0:81:26:a9:48:17:2a:
                    1d:4e:c1:15:68:1a:40:22:c4:14:fd:eb:d5:84:bb:
                    a4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:81:FD:52:61:F5:D6:AE:86:29:B5:1F:2F:5D:7A:DF:F1:EE:C3:A5
            X509v3 Authority Key Identifier:
                keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139352e302f32342d3234203d3e203538333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.53.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:f3:d6:70:97:9b:68:5a:b1:ef:37:c3:a0:48:f1:af:97:92:
         78:e3:84:03:53:0c:83:19:8b:c4:ba:be:c7:74:14:17:50:ca:
         bc:b6:89:ba:9b:6d:8e:ed:00:cc:ae:51:59:04:7e:28:df:56:
         16:d0:a0:25:76:8e:4d:a9:ea:68:c5:6e:a2:57:30:0b:84:f7:
         24:ee:5b:53:4c:e7:32:a4:f2:4a:7e:e3:f9:9e:2e:13:e3:ac:
         11:04:f1:54:d8:30:38:3d:d6:0d:09:7a:29:f1:cd:14:f2:0c:
         c0:b7:1e:ed:db:f2:a7:2a:b7:ea:da:1b:fb:e5:39:3e:4f:c4:
         5b:59:1a:05:55:0a:ab:b4:aa:90:f9:3a:36:39:50:4e:2b:5c:
         7a:fb:72:66:fe:a9:61:0b:9b:8b:8b:54:30:28:f4:3c:3c:f2:
         c0:cf:db:27:47:6d:16:42:7b:fb:81:45:e6:a7:b9:81:b8:94:
         e1:46:86:38:c2:f9:2e:b0:17:a8:a7:15:5f:90:a1:de:fe:42:
         47:37:13:eb:d4:b4:fc:b8:cc:d0:1f:fa:28:78:3b:a6:e6:c0:
         ab:24:5f:97:ad:2e:bb:19:7b:bb:4a:5e:c3:cf:31:83:5b:6a:
         97:0b:a8:2c:af:da:3b:ea:a4:f1:77:fd:a0:bb:b1:0d:d0:35:
         ed:a0:e3:0e
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIULwQVi7fznX6nMXoLGUc0bMBecIAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVBOTA3QzRFQzZEQTZEOTM0MjYxMzI4MENDQUYyNkU5
OERCRUI5ODAeFw0yMzA1MzExNjAwMDlaFw0yNDA1MjkxNjA1MDlaMDMxMTAvBgNV
BAMTKDdCODFGRDUyNjFGNUQ2QUU4NjI5QjUxRjJGNUQ3QURGRjFFRUMzQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJbauWpGqZiAMVfh6R68FlvndC
S7RXVDXO0pvd/SBTFJe5WU716+IxTi4Hn1sAcMZg1/wf1KppojTa77xzmBdVYknh
yQsaiD09FjvD7xoxpZ8HqYb47n5DkWPTLOgjUGcQ7Q2+crzWLQbvmVmVox/TGrXV
DuxJPcqpm/Xvw0X1qz28CC67Q+PqezvTUpfKDG91WU8pMHSRvSn9ey5XyNVDIMrV
9A/H+BqAunp4WV3etMgJbVSxYkUPc1HMGlUPZbx7hzx60j1hB2htnRhxTzPeeMQD
8OPDbRoMgGjVT0r3NCMXJlgRhUVK0IEmqUgXKh1OwRVoGkAixBT969WEu6QzAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUe4H9UmH11q6GKbUfL1163/Huw6UwHwYDVR0j
BBgwFoAU5akHxOxtptk0JhMoDMrybpjb65gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MzhkMjc1NS0zODBkLTQ3N2UtYmYyNS0wYWYyOTAyNmJkNzAvMC9FNUE5MDdDNEVD
NkRBNkQ5MzQyNjEzMjgwQ0NBRjI2RTk4REJFQjk4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTVBOTA3QzRFQzZEQTZEOTM0MjYxMzI4MENDQUYyNkU5OERC
RUI5OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMzOGQyNzU1LTM4MGQtNDc3ZS1i
ZjI1LTBhZjI5MDI2YmQ3MC8wLzMxMzYzMzJlMzUzMzJlMzEzOTM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODMzMzgzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKM1wzANBgkqhkiG
9w0BAQsFAAOCAQEALPPWcJebaFqx7zfDoEjxr5eSeOOEA1MMgxmLxLq+x3QUF1DK
vLaJupttju0AzK5RWQR+KN9WFtCgJXaOTanqaMVuolcwC4T3JO5bU0znMqTySn7j
+Z4uE+OsEQTxVNgwOD3WDQl6KfHNFPIMwLce7dvypyq36tob++U5Pk/EW1kaBVUK
q7SqkPk6NjlQTitcevtyZv6pYQubi4tUMCj0PDzywM/bJ0dtFkJ7+4FF5qe5gbiU
4UaGOML5LrAXqKcVX5Ch3v5CRzcT69S0/LjM0B/6KHg7pubAqyRfl60uuxl7u0pe
w88xg1tqlwuoLK/aO+qk8Xf9oLuxDdA17aDjDg==
-----END CERTIFICATE-----
Generated at Sun Apr 28 05:31:58 2024 by rpki-client on console-ams.rpki-client.org