Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/3230322e302e3130372e302f32342d3234203d3e203535363937.roa
File:                     3230322e302e3130372e302f32342d3234203d3e203535363937.roa (raw, json)
Hash identifier:          Bd/gqe9FyczxZnzm/DwkPkww6XODlaha3Ea3bASObnI=
Subject key identifier:   A5:31:42:85:63:A6:84:C8:EB:E7:83:AC:41:17:D0:7E:A9:4C:43:66
Certificate issuer:       /CN=1FA59BCEE428AFC03264229113A5539024697A14
Certificate serial:       61F9EB84B4E89FF5C732942A349CB8F78E4FEE47
Authority key identifier: 1F:A5:9B:CE:E4:28:AF:C0:32:64:22:91:13:A5:53:90:24:69:7A:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/3230322e302e3130372e302f32342d3234203d3e203535363937.roa
Signing time:             Mon 31 Jul 2023 00:07:15 +0000
ROA not before:           Mon 31 Jul 2023 00:02:15 +0000
ROA not after:            Mon 29 Jul 2024 00:07:15 +0000
asID:                     55697
IP address blocks:        202.0.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.crl
                          rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 19:36:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:f9:eb:84:b4:e8:9f:f5:c7:32:94:2a:34:9c:b8:f7:8e:4f:ee:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FA59BCEE428AFC03264229113A5539024697A14
        Validity
            Not Before: Jul 31 00:02:15 2023 GMT
            Not After : Jul 29 00:07:15 2024 GMT
        Subject: CN=A531428563A684C8EBE783AC4117D07EA94C4366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0b:67:b4:f6:ed:00:5f:2e:b8:04:ad:ef:f4:
                    f1:7a:f7:a8:6f:f3:08:24:a5:dc:34:1c:e9:44:00:
                    5d:19:d5:52:8d:fe:7e:83:a4:47:a6:fc:04:99:8e:
                    8c:48:ea:91:27:ff:ad:60:ad:1d:55:d4:37:ec:14:
                    ad:b2:52:1a:15:7e:4a:0d:dd:dd:72:1c:74:37:8c:
                    07:2e:40:2c:9c:b9:c2:9d:7b:04:34:21:84:80:05:
                    69:01:71:8d:a0:10:51:14:98:e3:e9:a8:da:6c:f5:
                    41:d6:e7:e4:f1:8f:ca:a2:5e:55:79:b0:bc:ad:1c:
                    ae:25:6b:20:3f:58:8b:98:a5:b1:e4:9c:17:ce:10:
                    bb:4e:6d:58:d3:1f:83:65:b4:f0:f9:1b:c8:5f:37:
                    0b:16:0b:5e:55:cb:6d:9e:a0:52:5f:df:ea:42:69:
                    52:4f:77:b5:30:14:49:ba:89:1d:13:3a:a6:ec:20:
                    7f:d4:25:ca:9c:22:d6:6d:32:da:7b:07:9d:b5:c4:
                    2d:5b:1c:80:ea:4d:82:d4:fe:81:12:27:5c:d5:1d:
                    f0:e8:3c:aa:fd:33:9f:1b:3d:63:8c:54:5c:86:26:
                    b4:45:f4:f1:c8:7a:32:ba:c6:f2:3f:e5:b2:fa:bd:
                    f9:e9:e5:aa:f4:ed:1f:42:9d:7c:1c:f3:df:82:c2:
                    0a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:31:42:85:63:A6:84:C8:EB:E7:83:AC:41:17:D0:7E:A9:4C:43:66
            X509v3 Authority Key Identifier:
                keyid:1F:A5:9B:CE:E4:28:AF:C0:32:64:22:91:13:A5:53:90:24:69:7A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/3230322e302e3130372e302f32342d3234203d3e203535363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.0.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:a0:c3:41:9b:a4:62:10:1d:4f:16:7e:4f:24:fb:5b:8d:6a:
         8c:af:e7:f1:ef:06:43:fe:5e:30:5b:b5:a5:2d:5b:af:1b:ec:
         93:cf:fa:9c:bd:f3:20:fe:63:af:2a:8d:9f:2c:d9:62:36:12:
         4f:9d:18:c2:14:6d:c3:f8:0b:a4:ce:3c:55:06:54:dc:46:fb:
         48:53:2d:84:d5:16:1b:90:b8:9b:b3:71:76:ec:f6:02:b9:d8:
         b0:26:ae:75:cc:61:14:f7:26:74:27:c1:1c:5c:ab:99:aa:b7:
         d9:4c:e9:1a:20:8d:70:91:9a:eb:0f:e9:8b:d9:91:4d:c4:7a:
         be:f1:24:3e:41:ef:7d:81:36:a2:a0:6e:44:a9:28:16:f7:48:
         c5:e4:df:ea:3f:6c:ea:66:c8:16:e9:3c:06:03:72:36:e3:e9:
         41:35:ad:df:47:1b:bc:17:6b:fd:42:07:60:9a:7c:9a:c2:73:
         34:ea:5e:58:73:3d:d1:1d:30:4f:e3:57:c8:85:ab:81:c6:f8:
         8e:ed:0f:dd:95:d2:62:aa:e8:d7:2e:3f:70:02:e9:42:02:70:
         16:87:ba:09:d7:08:5e:7b:b5:40:6b:72:77:41:ca:83:b7:48:
         d0:87:b7:b4:94:dd:87:5e:33:19:9e:a6:3a:7b:d6:c6:71:a0:
         7e:9b:62:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 17:41:02 2024 by rpki-client on console-ams.rpki-client.org