Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/3230322e38372e3234302e302f32312d3234203d3e203234323032.roa
File:                     3230322e38372e3234302e302f32312d3234203d3e203234323032.roa (raw, json)
Hash identifier:          O9WLpDuzxRZvUVc+MyrBt8LC5HzacV+oChvYVrFCIyQ=
Subject key identifier:   6A:B6:E5:4A:6E:49:9E:A0:5F:E3:B8:A3:62:0F:EC:8B:E4:5A:7F:BF
Certificate issuer:       /CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C
Certificate serial:       3A05662BD4B110847F8561843C3018CF53586113
Authority key identifier: F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/3230322e38372e3234302e302f32312d3234203d3e203234323032.roa
Signing time:             Mon 31 Jul 2023 00:08:09 +0000
ROA not before:           Mon 31 Jul 2023 00:03:09 +0000
ROA not after:            Mon 29 Jul 2024 00:08:09 +0000
asID:                     24202
IP address blocks:        202.87.240.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl
                          rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Mar 2024 16:36:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:05:66:2b:d4:b1:10:84:7f:85:61:84:3c:30:18:cf:53:58:61:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F959D883144B0BFBE80E98C04EE6B6F6953F074C
        Validity
            Not Before: Jul 31 00:03:09 2023 GMT
            Not After : Jul 29 00:08:09 2024 GMT
        Subject: CN=6AB6E54A6E499EA05FE3B8A3620FEC8BE45A7FBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:04:65:1e:84:33:78:de:8c:76:fd:f2:98:86:
                    2c:15:cc:9e:1d:c2:57:87:8c:94:44:7e:d6:9c:74:
                    35:03:6c:26:62:e2:8f:09:90:f5:92:44:87:22:a1:
                    20:cb:77:c0:81:bc:e7:45:c2:94:e6:77:e3:1a:95:
                    88:a8:6e:69:97:f0:ae:89:5b:a0:03:ef:f1:92:61:
                    c9:32:38:ff:fc:a4:b3:23:0b:a1:49:72:d1:c4:8e:
                    5a:e0:89:c7:9e:60:23:87:de:d2:8e:de:bf:66:fe:
                    b2:71:db:35:1e:97:a6:2a:d4:91:46:a3:71:44:98:
                    ca:e6:33:50:e4:6d:97:31:23:10:81:53:9e:9b:88:
                    24:d0:80:e5:d0:1f:f9:1c:64:49:19:ad:a8:49:56:
                    77:ff:99:f1:69:a2:a9:40:cb:1e:bf:51:d8:10:bb:
                    c5:82:8d:e3:9f:ec:f9:49:fd:60:4b:24:5e:01:25:
                    3b:1c:1b:8a:26:ac:1e:07:0a:68:25:db:6e:fe:ab:
                    0f:62:9b:68:6c:43:f0:af:b7:d3:57:b2:65:e4:7c:
                    5a:2b:0d:99:49:20:8b:27:b6:10:07:2c:13:b6:08:
                    0c:f7:55:d1:df:9d:13:aa:81:0f:d6:f7:8a:a8:41:
                    59:44:4b:2a:d4:72:57:54:83:0e:3e:48:02:f7:1a:
                    9b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B6:E5:4A:6E:49:9E:A0:5F:E3:B8:A3:62:0F:EC:8B:E4:5A:7F:BF
            X509v3 Authority Key Identifier:
                keyid:F9:59:D8:83:14:4B:0B:FB:E8:0E:98:C0:4E:E6:B6:F6:95:3F:07:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/F959D883144B0BFBE80E98C04EE6B6F6953F074C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F959D883144B0BFBE80E98C04EE6B6F6953F074C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/61f02a89-7ee8-4a83-8004-234d914a0fd4/0/3230322e38372e3234302e302f32312d3234203d3e203234323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.87.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:7e:07:32:4f:f6:fe:98:c3:4d:e4:ae:b2:d1:0d:a6:d7:34:
         ae:84:d2:44:7e:61:40:97:c1:a6:8b:18:aa:47:12:9b:ea:85:
         14:6b:28:d9:13:66:ab:d6:86:02:15:93:55:c9:6c:25:28:20:
         6e:76:94:7c:b3:80:b0:68:57:44:87:c3:a1:fa:3e:54:ad:93:
         ee:72:45:c6:d3:32:95:1b:3e:b9:ec:5c:36:d2:fe:14:16:57:
         a9:9e:c4:a6:99:94:d2:c5:ae:cd:df:51:b8:cf:41:01:a0:f1:
         de:67:00:ca:ae:95:88:2b:b7:53:08:6b:4a:77:ba:2b:3e:e6:
         73:1f:16:7d:6e:4e:74:40:75:20:f4:c2:4e:fd:29:f3:a1:da:
         9f:01:25:92:7b:fb:8b:49:a2:11:27:99:8a:45:ff:d5:4c:d5:
         3b:e9:7e:bd:19:7c:93:9f:9f:c1:3a:20:24:ee:ef:d5:47:d1:
         14:6d:2e:67:5d:6a:e1:60:39:ae:79:0b:dc:0e:ab:37:ef:86:
         34:43:71:a6:2a:43:a6:d6:cf:e4:39:b8:19:8a:ed:fd:3e:e8:
         a2:fc:ee:a4:2b:cc:84:34:b6:1d:6d:9c:f1:58:1f:8e:74:cc:
         fd:ad:81:7d:cb:ad:17:f7:89:b1:e5:ea:55:4a:80:96:42:5d:
         25:90:e4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 04:37:33 2024 by rpki-client on console-ams.rpki-client.org