Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e31362e302f32342d3234203d3e203535363835.roa
File:                     3230332e3136312e31362e302f32342d3234203d3e203535363835.roa (raw, json)
Hash identifier:          ly0/u50jM/0mQoVjvzFQP+DuoaMBsoUNJolU21cEUcA=
Subject key identifier:   80:83:4F:1C:CB:FA:04:7E:AC:D7:F1:2F:02:E9:03:E7:45:9E:10:9C
Certificate issuer:       /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial:       55A4EBFB3E133B18E4EE50D04033E993A935DB52
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e31362e302f32342d3234203d3e203535363835.roa
Signing time:             Thu 14 Sep 2023 04:02:31 +0000
ROA not before:           Thu 14 Sep 2023 03:57:31 +0000
ROA not after:            Thu 12 Sep 2024 04:02:31 +0000
asID:                     55685
IP address blocks:        203.161.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
                          rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 13:23:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:a4:eb:fb:3e:13:3b:18:e4:ee:50:d0:40:33:e9:93:a9:35:db:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
        Validity
            Not Before: Sep 14 03:57:31 2023 GMT
            Not After : Sep 12 04:02:31 2024 GMT
        Subject: CN=80834F1CCBFA047EACD7F12F02E903E7459E109C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f2:a1:37:6f:65:47:8a:5a:78:ad:84:4b:16:
                    c5:1a:07:d2:88:e9:4f:26:e5:ec:a4:8b:a9:63:ae:
                    ab:2e:38:7d:8d:df:ab:8b:62:43:67:6b:6f:ec:f1:
                    2d:94:b3:aa:c2:86:a6:03:a4:66:00:7b:33:7c:02:
                    cf:7a:d7:a5:7d:d0:a0:1a:a6:21:0b:65:57:f3:c8:
                    1c:12:05:dd:bb:d3:f7:a9:e4:b5:48:6d:e6:fe:4e:
                    8d:c7:0e:ac:4d:55:04:f9:22:d6:93:cb:4b:70:2d:
                    8c:63:02:e6:d6:fe:5e:3e:b5:f5:a0:3e:26:ef:f8:
                    c6:b0:42:39:14:44:e7:14:e1:ef:e9:48:ac:b9:aa:
                    60:53:cc:d2:79:76:24:fd:c7:31:e9:f7:13:fc:e8:
                    4a:c6:17:0e:5c:19:62:e2:ac:e9:65:4f:f1:b9:1e:
                    bf:64:56:9d:28:de:bd:c1:af:6d:f1:17:e4:73:fe:
                    c0:fe:2c:cf:e8:7f:8b:3b:a6:45:3a:2d:91:79:6f:
                    39:ed:eb:63:09:f1:1d:f4:0f:19:ee:c7:f2:63:65:
                    53:18:78:00:0b:8c:f2:2e:3f:00:d4:fa:63:6e:68:
                    1d:6e:f2:54:b5:de:c3:b1:4e:44:73:64:4a:da:db:
                    27:25:74:c7:17:b3:7d:a5:b2:15:58:7c:53:25:99:
                    71:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:83:4F:1C:CB:FA:04:7E:AC:D7:F1:2F:02:E9:03:E7:45:9E:10:9C
            X509v3 Authority Key Identifier:
                keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e31362e302f32342d3234203d3e203535363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.161.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:ec:ab:6d:a1:06:33:8f:79:b3:dc:87:0b:86:c2:f6:66:ca:
         65:ff:a6:16:8e:37:9b:63:5c:20:96:cf:4b:0b:54:bb:01:06:
         ff:0c:70:7b:df:6c:2e:f9:45:44:b7:21:bf:a1:6d:74:e7:bc:
         e9:6d:6e:5f:83:ff:b7:a4:e8:45:4e:ea:84:1e:1a:d7:5a:5e:
         07:90:f5:d4:c1:32:59:e7:ca:bc:fa:cd:44:da:1d:97:53:8f:
         b6:00:c2:97:28:50:eb:34:4c:28:9f:8e:0a:d3:69:50:e0:71:
         50:76:fd:90:94:96:22:95:8d:43:ba:9a:3d:49:2f:20:d9:a4:
         65:79:7b:d5:fc:f6:65:98:87:1d:f1:5d:13:e9:62:e6:15:43:
         0c:f9:10:82:47:91:16:dc:eb:65:eb:3a:ee:b8:5a:2f:60:51:
         5f:60:f8:1b:52:b4:46:83:51:3a:71:f6:16:6b:61:9a:ea:f4:
         85:59:54:28:dd:37:f7:0e:08:1f:5b:5a:f3:ff:16:c2:f8:18:
         c5:50:39:6e:d4:c1:2a:cd:a1:00:fc:d9:e3:1a:20:f6:70:4e:
         80:5e:20:bf:c2:1d:9f:eb:9c:08:53:15:ee:1f:68:58:23:c6:
         a4:ed:96:73:76:fa:7b:9d:5b:85:49:ef:8b:e8:f9:a3:c9:18:
         20:a4:14:43
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUVaTr+z4TOxjk7lDQQDPpk6k121IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4
MTFBNzA0RDAeFw0yMzA5MTQwMzU3MzFaFw0yNDA5MTIwNDAyMzFaMDMxMTAvBgNV
BAMTKDgwODM0RjFDQ0JGQTA0N0VBQ0Q3RjEyRjAyRTkwM0U3NDU5RTEwOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu8qE3b2VHilp4rYRLFsUaB9KI
6U8m5eyki6ljrqsuOH2N36uLYkNna2/s8S2Us6rChqYDpGYAezN8As9616V90KAa
piELZVfzyBwSBd270/ep5LVIbeb+To3HDqxNVQT5ItaTy0twLYxjAubW/l4+tfWg
Pibv+MawQjkUROcU4e/pSKy5qmBTzNJ5diT9xzHp9xP86ErGFw5cGWLirOllT/G5
Hr9kVp0o3r3Br23xF+Rz/sD+LM/of4s7pkU6LZF5bznt62MJ8R30Dxnux/JjZVMY
eAALjPIuPwDU+mNuaB1u8lS13sOxTkRzZEra2ycldMcXs32lshVYfFMlmXHTAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUgINPHMv6BH6s1/EvAukD50WeEJwwHwYDVR0j
BBgwFoAUtvATFRDmL3Pl8pJG+cj2kYEacE0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NWQ4ZGFiNC04YmI2LTRlZDAtOGRhYi01YTQwNjE2N2I5OWQvMC9CNkYwMTMxNTEw
RTYyRjczRTVGMjkyNDZGOUM4RjY5MTgxMUE3MDRELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjZGMDEzMTUxMEU2MkY3M0U1RjI5MjQ2RjlDOEY2OTE4MTFB
NzA0RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg1ZDhkYWI0LThiYjYtNGVkMC04
ZGFiLTVhNDA2MTY3Yjk5ZC8wLzMyMzAzMzJlMzEzNjMxMmUzMTM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMuhEDANBgkqhkiG
9w0BAQsFAAOCAQEASOyrbaEGM495s9yHC4bC9mbKZf+mFo43m2NcIJbPSwtUuwEG
/wxwe99sLvlFRLchv6FtdOe86W1uX4P/t6ToRU7qhB4a11peB5D11MEyWefKvPrN
RNodl1OPtgDClyhQ6zRMKJ+OCtNpUOBxUHb9kJSWIpWNQ7qaPUkvINmkZXl71fz2
ZZiHHfFdE+li5hVDDPkQgkeRFtzrZes67rhaL2BRX2D4G1K0RoNROnH2Fmthmur0
hVlUKN039w4IH1ta8/8WwvgYxVA5btTBKs2hAPzZ4xog9nBOgF4gv8Idn+ucCFMV
7h9oWCPGpO2Wc3b6e51bhUnvi+j5o8kYIKQUQw==
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:30:53 2024 by rpki-client on console-fra.rpki-client.org