Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e39362e302f32302d3230203d3e203137393130.roa
File:                     3230322e3132372e39362e302f32302d3230203d3e203137393130.roa (raw, json)
Hash identifier:          TVO0oi6DvDIA1QyGzSV+PdAxnsMuulpA5Y5pU6YeWMM=
Subject key identifier:   39:41:58:5A:CC:AF:71:76:23:19:FC:25:C5:21:C3:9F:8D:C7:5D:95
Certificate issuer:       /CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
Certificate serial:       32260FF7B8C31C6E1EEBC6D245143939195FEA09
Authority key identifier: 16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e39362e302f32302d3230203d3e203137393130.roa
Signing time:             Mon 31 Jul 2023 00:09:27 +0000
ROA not before:           Mon 31 Jul 2023 00:04:27 +0000
ROA not after:            Mon 29 Jul 2024 00:09:27 +0000
asID:                     17910
IP address blocks:        202.127.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl
                          rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 00:28:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:26:0f:f7:b8:c3:1c:6e:1e:eb:c6:d2:45:14:39:39:19:5f:ea:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
        Validity
            Not Before: Jul 31 00:04:27 2023 GMT
            Not After : Jul 29 00:09:27 2024 GMT
        Subject: CN=3941585ACCAF71762319FC25C521C39F8DC75D95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2d:13:88:23:6b:f3:2f:ea:06:0b:bb:53:8e:
                    92:c9:56:16:e6:38:41:ef:10:01:55:e1:80:21:89:
                    68:5b:89:0b:dc:d2:0b:b8:b2:f4:38:67:6d:6a:c4:
                    9a:7e:c2:20:53:e3:39:34:ff:d7:02:9d:55:db:2e:
                    cd:55:ee:9c:3f:8d:08:29:45:cf:92:65:a2:43:f4:
                    e1:c4:58:df:54:87:1e:93:ff:83:56:6b:ac:ac:aa:
                    53:31:bc:b8:c4:8b:2b:4e:de:4e:11:a9:0f:98:1f:
                    78:65:2f:ec:38:00:45:63:78:6c:bf:89:c1:89:c9:
                    5e:b6:8b:a3:1f:1c:97:84:48:76:36:a7:43:7e:d8:
                    86:12:9b:fe:1b:7d:0d:65:ea:c6:9a:99:9b:d0:d3:
                    2b:67:e4:2e:e0:9c:a1:b8:e9:43:71:63:5d:75:6a:
                    c8:4a:83:33:34:37:31:c9:0e:51:6a:bc:96:1e:be:
                    c6:8e:0b:68:71:0e:1e:ad:36:ee:10:21:79:93:de:
                    48:1f:bb:e1:9e:1e:d9:63:38:a1:d4:b4:df:07:1b:
                    8b:76:c6:ca:db:d2:ad:c3:33:4f:13:e9:88:90:22:
                    ff:0b:40:58:3b:02:ce:db:04:5e:67:88:c2:27:05:
                    20:da:10:38:e9:23:9f:c7:5d:18:97:7a:4e:79:a6:
                    e1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:41:58:5A:CC:AF:71:76:23:19:FC:25:C5:21:C3:9F:8D:C7:5D:95
            X509v3 Authority Key Identifier:
                keyid:16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e39362e302f32302d3230203d3e203137393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.127.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:1a:78:4f:71:e3:da:a4:f5:c7:35:19:fd:cc:1f:80:56:b3:
         8c:49:95:c4:d1:c8:fc:51:51:61:c8:6b:36:c2:8b:00:fd:3f:
         22:80:0d:e1:fd:74:79:ee:5c:d3:f5:51:4f:9f:8b:b4:b0:27:
         71:c3:d7:1d:33:9e:e5:fb:b5:d6:c3:f7:68:c3:24:12:f1:b3:
         21:e0:a3:c9:c1:2c:0a:fd:39:2e:e7:74:0a:bc:36:c6:35:3b:
         88:93:0a:01:a6:a6:cc:e0:df:82:c7:a6:16:c3:80:2a:fd:df:
         35:5d:0a:99:9f:77:de:66:56:d6:3f:3c:c4:62:12:56:29:12:
         0d:6e:ce:60:86:fa:ae:42:87:0c:41:f4:48:ed:e3:c2:cd:2a:
         70:11:fe:b4:2a:93:b9:2f:df:67:6b:67:75:87:c9:fe:1e:87:
         22:db:b3:85:73:8e:44:e3:9d:45:b6:84:ec:4e:5d:c1:8a:5f:
         66:14:f3:09:f8:13:a8:93:bd:85:0b:5a:0f:96:63:23:2d:ca:
         e3:94:45:3d:e6:4d:c8:b2:36:bd:5e:0c:07:8c:8a:cd:68:c3:
         a2:dc:c8:c7:72:34:c7:6f:d9:38:d3:25:8c:e8:38:20:7f:03:
         05:5c:db:06:b4:18:c1:a7:32:65:28:b5:6f:91:d0:ef:aa:b5:
         9f:32:50:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 01:43:22 2024 by rpki-client on console-ams.rpki-client.org