Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230322e302f32342d3234203d3e203138313533.roa
File:                     3230322e37322e3230322e302f32342d3234203d3e203138313533.roa (raw, json)
Hash identifier:          RUM5SHI4/SMDK4iwL5sC8857lmFTJWLjT98zmMkSIyE=
Subject key identifier:   DF:0E:6D:14:A7:44:F5:E0:81:C0:FA:00:7E:3C:2C:88:D8:D1:DC:4D
Certificate issuer:       /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Certificate serial:       2DBB12B318F0819BC0CF5108FF4D8C94479E30C0
Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230322e302f32342d3234203d3e203138313533.roa
Signing time:             Mon 31 Jul 2023 00:05:46 +0000
ROA not before:           Mon 31 Jul 2023 00:00:46 +0000
ROA not after:            Mon 29 Jul 2024 00:05:46 +0000
asID:                     18153
IP address blocks:        202.72.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl
                          rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 23:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:bb:12:b3:18:f0:81:9b:c0:cf:51:08:ff:4d:8c:94:47:9e:30:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
        Validity
            Not Before: Jul 31 00:00:46 2023 GMT
            Not After : Jul 29 00:05:46 2024 GMT
        Subject: CN=DF0E6D14A744F5E081C0FA007E3C2C88D8D1DC4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e1:03:1a:b4:4e:a5:65:2b:39:d3:b6:cf:f1:
                    56:d6:ff:97:79:67:f5:e4:4b:a9:e6:f6:d4:bf:79:
                    11:0d:a1:e4:9e:79:d3:dd:8e:2d:1c:f8:40:f9:2e:
                    37:92:77:30:96:c1:70:b7:18:dd:ff:0b:64:b4:fb:
                    1e:9b:2f:ab:81:dc:5a:f9:5f:f4:83:0f:d7:70:df:
                    31:7d:b7:b1:05:d8:ee:dd:f5:b6:de:56:ec:2b:63:
                    8d:37:f2:7a:ec:b5:f1:68:2f:a6:93:c5:89:5f:f3:
                    c0:af:aa:62:90:5d:8d:d8:c5:97:eb:71:c9:f7:6b:
                    f2:8f:69:56:e6:b5:b9:dc:79:97:d3:cc:19:e9:89:
                    12:7a:9d:f8:c6:c9:cf:4d:28:c2:07:87:00:66:1f:
                    78:d0:cd:12:03:0c:8d:57:38:5f:fc:76:8a:64:a0:
                    d3:84:92:f4:19:1c:5b:b1:6b:86:c9:9d:d2:f7:09:
                    10:65:3d:f1:3f:88:1a:50:bf:34:05:97:e2:35:d3:
                    f8:91:e8:1a:a3:1f:b7:f3:eb:73:cb:14:1b:a5:f6:
                    e7:99:fe:d5:f4:2b:ff:60:d0:35:ae:7d:be:ca:c3:
                    8f:10:a3:b2:90:91:2a:ff:28:23:cd:10:76:b7:47:
                    05:87:73:8f:c9:f0:f9:a8:b0:30:84:a4:39:3d:b2:
                    9c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0E:6D:14:A7:44:F5:E0:81:C0:FA:00:7E:3C:2C:88:D8:D1:DC:4D
            X509v3 Authority Key Identifier:
                keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230322e302f32342d3234203d3e203138313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.72.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:f0:40:95:cd:52:d1:7e:12:e6:e3:47:29:33:cb:a6:d6:b8:
         dd:65:e5:9a:10:db:aa:26:ab:33:70:d7:bd:e6:9b:5a:b9:83:
         ac:b5:73:cf:4e:11:80:65:55:64:66:36:25:9e:45:c0:83:51:
         a3:ce:8b:5b:72:fe:1a:b4:2c:db:fa:7a:58:72:b0:68:52:87:
         cc:64:98:19:86:6b:b7:24:19:c3:eb:5f:77:0f:3b:ac:50:24:
         ac:8a:be:63:70:4f:e3:55:e3:9a:ca:37:ee:51:25:b6:5b:1d:
         04:36:c5:11:c8:0f:52:95:be:20:0b:98:06:1d:c2:d1:eb:4a:
         92:e3:9d:f2:9c:69:d8:36:5e:08:b6:54:e7:fc:d6:22:d1:1f:
         bc:e4:68:ad:bc:b7:01:20:a5:e6:bf:3d:e0:9c:9c:16:af:26:
         43:93:83:4a:a4:3e:99:49:3c:5e:55:8b:df:0b:91:bf:0b:1f:
         5a:9f:ee:e0:b2:3c:0e:af:81:c8:0d:47:8b:c7:54:c2:71:a9:
         b2:00:10:67:e6:66:cd:9f:3e:cb:ff:49:5a:d4:0b:63:16:65:
         f9:fa:61:79:62:e7:86:8a:67:44:db:8b:41:3c:77:a0:55:77:
         10:9c:f4:e1:bc:05:c6:36:c4:89:ec:56:aa:13:bf:47:73:1b:
         bb:d7:3c:fa
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIULbsSsxjwgZvAz1EI/02MlEeeMMAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVERTY0REJDNDA5ODg4MUYxMUI3MDEyM0RGNTE0RDM4
Rjc4ODFFRTAeFw0yMzA3MzEwMDAwNDZaFw0yNDA3MjkwMDA1NDZaMDMxMTAvBgNV
BAMTKERGMEU2RDE0QTc0NEY1RTA4MUMwRkEwMDdFM0MyQzg4RDhEMURDNEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC64QMatE6lZSs507bP8VbW/5d5
Z/XkS6nm9tS/eRENoeSeedPdji0c+ED5LjeSdzCWwXC3GN3/C2S0+x6bL6uB3Fr5
X/SDD9dw3zF9t7EF2O7d9bbeVuwrY4038nrstfFoL6aTxYlf88CvqmKQXY3YxZfr
ccn3a/KPaVbmtbnceZfTzBnpiRJ6nfjGyc9NKMIHhwBmH3jQzRIDDI1XOF/8dopk
oNOEkvQZHFuxa4bJndL3CRBlPfE/iBpQvzQFl+I10/iR6BqjH7fz63PLFBul9ueZ
/tX0K/9g0DWufb7Kw48Qo7KQkSr/KCPNEHa3RwWHc4/J8PmosDCEpDk9spxTAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU3w5tFKdE9eCBwPoAfjwsiNjR3E0wHwYDVR0j
BBgwFoAUnt5k28QJiIHxG3ASPfUU0494ge4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
OWFjYjRhOC03ODA0LTQ1MjYtODRkMi04NjliOTFhNjcxOWQvMC85RURFNjREQkM0
MDk4ODgxRjExQjcwMTIzREY1MTREMzhGNzg4MUVFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUVERTY0REJDNDA5ODg4MUYxMUI3MDEyM0RGNTE0RDM4Rjc4
ODFFRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY5YWNiNGE4LTc4MDQtNDUyNi04
NGQyLTg2OWI5MWE2NzE5ZC8wLzMyMzAzMjJlMzczMjJlMzIzMDMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzODMxMzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpIyjANBgkqhkiG
9w0BAQsFAAOCAQEACvBAlc1S0X4S5uNHKTPLpta43WXlmhDbqiarM3DXveabWrmD
rLVzz04RgGVVZGY2JZ5FwINRo86LW3L+GrQs2/p6WHKwaFKHzGSYGYZrtyQZw+tf
dw87rFAkrIq+Y3BP41Xjmso37lEltlsdBDbFEcgPUpW+IAuYBh3C0etKkuOd8pxp
2DZeCLZU5/zWItEfvORorby3ASCl5r894JycFq8mQ5ODSqQ+mUk8XlWL3wuRvwsf
Wp/u4LI8Dq+ByA1Hi8dUwnGpsgAQZ+ZmzZ8+y/9JWtQLYxZl+fpheWLnhopnRNuL
QTx3oFV3EJz04bwFxjbEiexWqhO/R3Mbu9c8+g==
-----END CERTIFICATE-----
Generated at Thu Apr 18 23:07:30 2024 by rpki-client on console-ams.rpki-client.org