Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139332e302f32342d3234203d3e203138313533.roa
File:                     3230322e37322e3139332e302f32342d3234203d3e203138313533.roa (raw, json)
Hash identifier:          hN2t7weLf+o/ENYi7A1cc3Uy0CwFIk3m1qbqJu8mFms=
Subject key identifier:   13:87:D6:96:8E:19:B2:59:8E:EA:8B:2B:30:81:F8:FC:16:0B:E0:CE
Certificate issuer:       /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Certificate serial:       461AD0E09F50BAA740882E96802E4813B2A0C124
Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139332e302f32342d3234203d3e203138313533.roa
Signing time:             Mon 31 Jul 2023 00:05:46 +0000
ROA not before:           Mon 31 Jul 2023 00:00:46 +0000
ROA not after:            Mon 29 Jul 2024 00:05:46 +0000
asID:                     18153
IP address blocks:        202.72.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl
                          rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 03:04:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:1a:d0:e0:9f:50:ba:a7:40:88:2e:96:80:2e:48:13:b2:a0:c1:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
        Validity
            Not Before: Jul 31 00:00:46 2023 GMT
            Not After : Jul 29 00:05:46 2024 GMT
        Subject: CN=1387D6968E19B2598EEA8B2B3081F8FC160BE0CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:07:3a:eb:c5:16:12:a0:b0:b5:dd:57:09:c1:
                    55:72:0c:f4:de:b2:be:1b:ea:6f:b4:d3:56:3f:0b:
                    1c:bd:28:d0:b8:a5:b4:45:85:c0:9f:3a:44:d0:db:
                    f6:ad:cb:44:c2:5e:05:5c:cc:18:10:cf:79:13:03:
                    71:5e:47:fd:9f:54:d9:80:2b:3f:4e:1a:b1:44:61:
                    3a:e6:0c:7a:d7:96:52:c8:93:89:b7:9b:7d:0c:c3:
                    19:92:40:4d:88:e8:ac:35:ee:d2:fc:61:15:de:24:
                    ca:3a:1a:14:59:90:d9:9c:a5:4a:70:a0:1a:a1:de:
                    6b:2e:57:2d:df:02:fd:62:37:6a:41:0b:f8:bd:3d:
                    04:24:25:d4:33:89:94:0f:f0:e4:8f:47:b0:72:3d:
                    9d:fd:19:a9:5f:9d:df:73:1b:d2:7f:17:9e:ca:f8:
                    d5:96:20:2e:82:ff:7e:2c:01:20:73:7d:af:f2:76:
                    6f:0c:45:8f:81:6b:7f:dc:d2:55:5f:c8:b3:71:44:
                    17:54:10:bd:4e:6d:79:c8:0e:f1:02:dc:43:b4:3b:
                    49:22:52:54:ac:9e:e1:43:e6:93:9d:a4:e5:ed:67:
                    fe:1f:07:24:4a:ce:cc:a6:89:37:f6:5f:02:d8:dd:
                    2c:b1:9f:0a:c2:68:75:06:dc:0a:b7:3a:19:76:fd:
                    1e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:87:D6:96:8E:19:B2:59:8E:EA:8B:2B:30:81:F8:FC:16:0B:E0:CE
            X509v3 Authority Key Identifier:
                keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3139332e302f32342d3234203d3e203138313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.72.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:fb:6b:0e:c1:dc:f6:5f:37:e1:c1:08:5b:ce:17:aa:e7:6c:
         1e:0b:16:40:93:17:55:86:12:bf:f2:ff:75:5a:bb:1d:71:54:
         66:af:e4:39:41:f4:37:6d:9f:bd:cb:c1:23:66:45:13:d3:6f:
         f9:b9:8c:70:d8:ce:6a:e1:43:f7:3e:69:9f:e2:51:c7:bc:e6:
         2f:fb:80:95:20:de:6e:09:ba:72:36:d3:a0:6e:46:9e:0a:83:
         61:27:cd:71:0e:8d:92:8a:79:51:1c:f9:b9:20:ba:66:9b:b9:
         af:6f:ce:ca:7e:4a:1b:b6:89:f6:4a:d1:31:29:99:0d:8b:44:
         79:4d:58:80:29:f4:e7:d5:bf:62:8d:be:6a:64:f0:fa:f1:fb:
         d7:27:05:4a:6b:ea:dd:6c:de:a7:94:39:34:52:d1:f2:49:85:
         ce:83:e2:ff:a1:82:ce:d2:85:48:e9:56:03:b6:0f:dc:dc:c1:
         b0:2d:e3:a2:9b:05:ca:00:8c:7e:37:f7:af:60:70:79:f6:6a:
         38:a8:5d:54:ca:a3:58:f5:94:8f:7a:0a:31:ba:20:e4:aa:7a:
         83:b8:09:85:59:0b:41:2c:8b:f7:a4:d5:de:e0:9c:ac:ca:e6:
         07:b6:73:a6:01:1c:15:f3:b8:10:d0:f9:58:65:53:f9:94:ca:
         f8:07:dd:f1
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIURhrQ4J9QuqdAiC6WgC5IE7KgwSQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVERTY0REJDNDA5ODg4MUYxMUI3MDEyM0RGNTE0RDM4
Rjc4ODFFRTAeFw0yMzA3MzEwMDAwNDZaFw0yNDA3MjkwMDA1NDZaMDMxMTAvBgNV
BAMTKDEzODdENjk2OEUxOUIyNTk4RUVBOEIyQjMwODFGOEZDMTYwQkUwQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjBzrrxRYSoLC13VcJwVVyDPTe
sr4b6m+001Y/Cxy9KNC4pbRFhcCfOkTQ2/aty0TCXgVczBgQz3kTA3FeR/2fVNmA
Kz9OGrFEYTrmDHrXllLIk4m3m30MwxmSQE2I6Kw17tL8YRXeJMo6GhRZkNmcpUpw
oBqh3msuVy3fAv1iN2pBC/i9PQQkJdQziZQP8OSPR7ByPZ39Galfnd9zG9J/F57K
+NWWIC6C/34sASBzfa/ydm8MRY+Ba3/c0lVfyLNxRBdUEL1ObXnIDvEC3EO0O0ki
UlSsnuFD5pOdpOXtZ/4fByRKzsymiTf2XwLY3SyxnwrCaHUG3Aq3Ohl2/R6rAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUE4fWlo4ZslmO6osrMIH4/BYL4M4wHwYDVR0j
BBgwFoAUnt5k28QJiIHxG3ASPfUU0494ge4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
OWFjYjRhOC03ODA0LTQ1MjYtODRkMi04NjliOTFhNjcxOWQvMC85RURFNjREQkM0
MDk4ODgxRjExQjcwMTIzREY1MTREMzhGNzg4MUVFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUVERTY0REJDNDA5ODg4MUYxMUI3MDEyM0RGNTE0RDM4Rjc4
ODFFRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY5YWNiNGE4LTc4MDQtNDUyNi04
NGQyLTg2OWI5MWE2NzE5ZC8wLzMyMzAzMjJlMzczMjJlMzEzOTMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzODMxMzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpIwTANBgkqhkiG
9w0BAQsFAAOCAQEAS/trDsHc9l834cEIW84XqudsHgsWQJMXVYYSv/L/dVq7HXFU
Zq/kOUH0N22fvcvBI2ZFE9Nv+bmMcNjOauFD9z5pn+JRx7zmL/uAlSDebgm6cjbT
oG5GngqDYSfNcQ6Nkop5URz5uSC6Zpu5r2/Oyn5KG7aJ9krRMSmZDYtEeU1YgCn0
59W/Yo2+amTw+vH71ycFSmvq3Wzep5Q5NFLR8kmFzoPi/6GCztKFSOlWA7YP3NzB
sC3jopsFygCMfjf3r2BwefZqOKhdVMqjWPWUj3oKMbog5Kp6g7gJhVkLQSyL96TV
3uCcrMrmB7ZzpgEcFfO4END5WGVT+ZTK+Afd8Q==
-----END CERTIFICATE-----
Generated at Tue Apr 23 18:36:05 2024 by rpki-client on console-ams.rpki-client.org