Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/3230322e3132352e38322e302f32332d3233203d3e20313430343433.roa
File:                     3230322e3132352e38322e302f32332d3233203d3e20313430343433.roa (raw, json)
Hash identifier:          0UdiwQf3AD4nNFy1UGGE/xyIAMCCm9l+7Aephu2EIY4=
Subject key identifier:   BC:71:C9:33:A2:67:79:57:BD:AE:0F:70:C5:34:21:B3:69:48:10:F2
Certificate issuer:       /CN=B0928A45D014D8D5FAD50314E828086F12B15610
Certificate serial:       0279E427DC35D51E74D027C40A919355A91F6A04
Authority key identifier: B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/3230322e3132352e38322e302f32332d3233203d3e20313430343433.roa
Signing time:             Tue 13 Jun 2023 05:00:01 +0000
ROA not before:           Tue 13 Jun 2023 04:55:01 +0000
ROA not after:            Tue 11 Jun 2024 05:00:01 +0000
asID:                     140443
IP address blocks:        202.125.82.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl
                          rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 00:51:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:79:e4:27:dc:35:d5:1e:74:d0:27:c4:0a:91:93:55:a9:1f:6a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0928A45D014D8D5FAD50314E828086F12B15610
        Validity
            Not Before: Jun 13 04:55:01 2023 GMT
            Not After : Jun 11 05:00:01 2024 GMT
        Subject: CN=BC71C933A2677957BDAE0F70C53421B3694810F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a9:e5:53:7f:96:9e:57:b5:59:f7:ef:ec:86:
                    45:59:87:3b:a2:f0:a9:39:8d:f8:bc:63:74:33:06:
                    ef:62:c9:9a:47:5b:a3:70:54:b7:f5:1e:98:54:fb:
                    4d:12:6e:32:6e:c2:27:1f:0e:6b:10:ae:a4:b6:4c:
                    1d:a8:43:16:bc:c0:e3:e4:a7:cf:a6:f5:29:b7:d0:
                    3f:6f:18:ac:92:3e:14:aa:f2:ac:ce:d4:a5:85:fb:
                    9a:2a:0c:9b:6c:62:1f:42:87:4f:af:d6:bb:64:5f:
                    66:3a:e2:b8:73:83:1d:d9:e5:ae:13:6b:fb:2a:d1:
                    57:43:e0:b9:ee:01:16:89:9b:e2:f5:b9:6b:b3:00:
                    a9:0f:27:84:70:a2:a7:d3:2f:af:67:98:47:cc:8c:
                    d8:ef:34:e3:cf:bf:c3:ac:a7:65:6c:d7:f5:97:4a:
                    63:6b:77:8e:f9:63:ac:36:11:88:42:ad:15:4b:15:
                    d3:6c:bb:cf:51:af:ba:18:34:b1:33:ff:c6:3a:b2:
                    90:2a:18:c6:d4:26:3c:4a:c7:a0:0e:cb:f8:7a:c5:
                    06:90:84:62:b8:4a:cb:f2:fe:b9:9d:1c:f6:07:46:
                    60:32:fa:9d:84:dd:87:42:a2:01:46:59:66:4a:3e:
                    2b:97:ea:89:95:29:0c:f4:96:c9:a1:29:72:60:d8:
                    fa:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:71:C9:33:A2:67:79:57:BD:AE:0F:70:C5:34:21:B3:69:48:10:F2
            X509v3 Authority Key Identifier:
                keyid:B0:92:8A:45:D0:14:D8:D5:FA:D5:03:14:E8:28:08:6F:12:B1:56:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/B0928A45D014D8D5FAD50314E828086F12B15610.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0928A45D014D8D5FAD50314E828086F12B15610.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cd323be-837d-4244-846c-7d2393a9a009/0/3230322e3132352e38322e302f32332d3233203d3e20313430343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.125.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:6a:7e:f7:a8:bf:fa:80:2e:e6:ad:f4:57:d7:00:23:7a:a2:
         8e:2f:c9:91:7b:a5:72:81:c7:9d:85:39:87:96:d8:d7:b5:31:
         e8:ef:ca:b3:06:60:d9:33:22:db:04:9d:0d:b3:62:53:ac:24:
         2e:c2:f8:ca:1c:bd:57:d8:13:f2:a2:35:e3:f1:36:b6:cd:03:
         5d:28:11:a8:98:b6:f5:e2:39:43:7d:68:07:4a:61:4a:e7:d6:
         27:8e:8a:ec:2e:0f:a2:f3:09:bd:3b:9e:2d:f7:63:2a:81:79:
         68:01:37:1e:f0:20:42:20:a0:66:28:6c:02:61:ae:e2:2f:38:
         e3:42:a0:5f:7f:29:02:d6:66:d1:d2:93:b1:1e:00:07:10:e6:
         e8:29:7e:56:eb:3c:53:a3:8e:e7:20:ef:4e:b7:ee:af:6f:ae:
         b2:13:de:41:a6:9a:17:75:2e:ee:e4:28:b5:17:00:6a:2f:2b:
         5b:b0:9d:0e:a7:23:03:32:ac:71:72:7b:33:02:9f:23:07:36:
         8c:1c:61:7e:b5:69:5a:17:50:de:bc:25:5c:c0:7e:62:5a:38:
         27:cb:aa:a1:86:55:78:85:8c:af:69:d6:d0:fc:b3:07:2e:52:
         1e:6f:46:5d:1e:02:6e:c5:3d:5c:fc:39:e8:21:f4:c1:e5:69:
         75:82:4c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 04:33:59 2024 by rpki-client on console-fra.rpki-client.org