Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa
File:                     3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa (raw, json)
Hash identifier:          oLE0GEfjrkI2KSBI7JtjhrWL1lxuQKKIs/YRNLSMpCE=
Subject key identifier:   0D:AA:B0:C2:1E:61:1E:14:4D:F9:47:39:FA:04:43:85:F0:C5:8E:D6
Certificate issuer:       /CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
Certificate serial:       0DAAF5BC0E69E761FC658BF650B57089F1087853
Authority key identifier: 16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa
Signing time:             Thu 23 Nov 2023 00:56:43 +0000
ROA not before:           Thu 23 Nov 2023 00:51:43 +0000
ROA not after:            Thu 21 Nov 2024 00:56:43 +0000
asID:                     17910
IP address blocks:        202.127.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl
                          rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:aa:f5:bc:0e:69:e7:61:fc:65:8b:f6:50:b5:70:89:f1:08:78:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
        Validity
            Not Before: Nov 23 00:51:43 2023 GMT
            Not After : Nov 21 00:56:43 2024 GMT
        Subject: CN=0DAAB0C21E611E144DF94739FA044385F0C58ED6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:eb:34:9e:b3:ce:e6:e3:8c:12:27:3a:fd:0f:
                    18:1c:cf:d1:6d:98:7b:c5:f6:7c:77:fd:1c:fa:69:
                    15:64:16:25:cc:25:84:ad:45:b3:eb:b3:a5:a8:fc:
                    b0:a6:b4:89:2b:0f:6e:8a:f6:dc:8b:50:ee:5b:06:
                    53:b1:fd:e6:d9:c3:52:d1:f5:9d:94:78:88:75:f8:
                    92:52:f2:2f:15:30:38:0f:44:19:59:09:89:35:96:
                    93:bd:46:f8:2e:0d:c2:b5:1e:55:14:59:8a:38:d2:
                    04:13:ab:57:16:36:1f:58:b3:b4:71:59:86:f6:7a:
                    87:89:f0:a3:24:64:ac:92:e1:ba:40:ec:b6:55:12:
                    82:b0:14:a7:06:5f:8e:6c:1c:b4:97:5f:74:a3:25:
                    f3:3b:89:5e:98:69:bb:2c:ee:f8:d3:9d:f0:d1:5f:
                    f1:40:ce:84:ee:6a:97:ff:44:de:d8:dc:f1:90:3f:
                    f8:33:35:ec:2c:47:fe:3c:70:d9:dc:a1:87:74:df:
                    bc:0b:18:19:a7:0c:80:91:b2:f8:b2:ac:b2:8c:ab:
                    90:3a:fd:ed:1b:86:49:e6:ed:60:b6:3a:15:d8:e2:
                    19:cf:76:19:33:44:fc:51:5e:a1:28:2a:43:99:ff:
                    fc:67:bf:be:fb:6c:50:76:67:a3:c3:44:07:8a:5d:
                    13:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AA:B0:C2:1E:61:1E:14:4D:F9:47:39:FA:04:43:85:F0:C5:8E:D6
            X509v3 Authority Key Identifier:
                keyid:16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.127.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:fb:4e:36:a4:f9:bf:a9:ef:ee:d5:41:9a:eb:83:e4:f6:f1:
         a6:0a:1f:bc:88:82:8a:b4:5a:68:f6:13:75:bf:25:42:6b:bc:
         e1:dc:0d:6d:7e:8a:8d:8d:2f:cf:f5:52:bf:f4:d6:1b:3f:cd:
         9e:c5:33:df:fe:a1:7a:ca:ab:5b:bd:ed:08:51:a1:95:ca:52:
         91:b5:41:67:81:46:93:04:48:88:13:e7:32:6e:c2:f6:0d:51:
         15:86:f7:48:72:2a:01:87:10:e2:d4:8f:62:d9:cc:aa:c2:8e:
         63:65:3e:a4:bd:83:43:02:fb:d4:7c:63:ab:e9:86:97:70:4f:
         da:c2:60:3b:e3:95:e3:72:07:72:36:54:3c:55:c5:7c:e2:67:
         3b:93:7f:65:34:e7:e3:e9:76:d8:1b:60:00:ee:09:fe:ed:f6:
         1c:65:78:39:65:cd:da:1e:f4:f9:83:6b:f7:a0:8e:97:97:10:
         e7:b2:47:09:35:3a:09:ff:28:59:11:40:42:f9:00:df:1d:aa:
         46:af:ea:a9:31:1f:38:07:24:42:74:bd:b8:31:ed:53:e1:54:
         a9:60:d7:b0:8d:53:0a:10:f8:98:b8:6a:26:98:0f:e7:f2:5c:
         4c:e0:6d:b1:f5:4a:a5:67:41:61:8a:1d:0c:37:82:20:8b:52:
         cf:c7:d6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:51:17 2024 by rpki-client on console-fra.rpki-client.org