Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e39382e302f32342d3234203d3e203137393130.roa
File:                     3230322e3132372e39382e302f32342d3234203d3e203137393130.roa (raw, json)
Hash identifier:          uerqS2ZTJP9jpeXp2GDEX4FEl1rSIhdIYzKe6NmLQPU=
Subject key identifier:   B4:82:44:9A:37:DF:83:5A:37:EE:22:64:54:14:BC:57:9A:6D:9A:EB
Certificate issuer:       /CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
Certificate serial:       5C7C3B359961818741888061F79C03DA27DE15F0
Authority key identifier: 16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e39382e302f32342d3234203d3e203137393130.roa
Signing time:             Thu 23 Nov 2023 00:55:47 +0000
ROA not before:           Thu 23 Nov 2023 00:50:47 +0000
ROA not after:            Thu 21 Nov 2024 00:55:47 +0000
asID:                     17910
IP address blocks:        202.127.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl
                          rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:7c:3b:35:99:61:81:87:41:88:80:61:f7:9c:03:da:27:de:15:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
        Validity
            Not Before: Nov 23 00:50:47 2023 GMT
            Not After : Nov 21 00:55:47 2024 GMT
        Subject: CN=B482449A37DF835A37EE22645414BC579A6D9AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:29:2f:48:b5:7d:51:81:b9:9b:a4:12:7c:85:
                    d1:eb:1c:a1:58:d1:48:d2:b4:2f:c0:01:fd:07:c4:
                    01:84:98:50:a0:29:8a:8d:30:bd:a2:53:c3:3b:66:
                    25:6e:a5:0f:3d:aa:68:46:44:d4:6a:bd:ea:c7:49:
                    15:bc:82:5d:14:0e:b1:a1:3a:11:fd:d3:87:22:3f:
                    85:af:79:a2:b6:da:43:a0:ae:1c:dd:ea:a8:d8:e6:
                    29:ce:34:96:17:65:ef:e1:57:a7:9c:0a:6c:49:db:
                    91:81:5f:1c:5b:fd:cd:ee:c2:2b:34:63:e5:9f:9d:
                    4d:41:ab:d8:19:31:d0:99:0d:c7:a9:9c:cd:96:36:
                    30:87:fa:50:0a:2a:a5:3b:56:08:13:b8:64:30:c8:
                    d7:4d:85:6e:93:11:8c:46:e2:b3:8d:12:f4:df:c7:
                    ea:a8:78:a7:e2:d9:64:5e:fe:9b:7f:c0:3b:db:96:
                    59:82:3e:e0:20:c2:c5:18:0f:5b:02:af:df:a8:5b:
                    8f:5c:d3:36:84:ac:1b:f5:3f:3f:20:7a:cd:f7:d0:
                    20:03:68:80:ea:46:d7:79:65:31:7f:57:ee:f7:77:
                    4c:f2:d4:91:b5:aa:42:96:b5:d3:f7:62:c2:f7:f1:
                    ba:0d:67:9f:7f:4f:62:9f:41:86:8a:4e:58:d1:3b:
                    b2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:82:44:9A:37:DF:83:5A:37:EE:22:64:54:14:BC:57:9A:6D:9A:EB
            X509v3 Authority Key Identifier:
                keyid:16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e39382e302f32342d3234203d3e203137393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.127.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:cb:e0:18:19:e6:ff:52:3c:2d:d1:31:02:da:de:55:0b:76:
         84:99:a7:4c:2b:0a:81:3a:83:3d:d1:3f:84:2c:7a:c5:49:94:
         9e:76:9a:d2:d2:d3:d9:88:0d:80:20:c1:8c:b1:d1:df:e9:f0:
         96:70:7d:07:19:ce:d9:9d:49:93:98:29:d0:78:0d:4d:b5:10:
         67:90:30:d6:33:7a:c0:36:10:b4:8f:ec:cd:4e:be:49:eb:bc:
         00:18:8a:ba:9f:dd:84:ce:54:48:14:db:0c:e9:74:3c:a6:b2:
         e3:0e:04:38:84:cd:cd:9a:a6:cf:4d:d8:a9:45:1f:1e:65:2e:
         90:bb:34:a3:19:c6:9f:74:94:4c:28:c1:a5:09:a5:09:5d:0e:
         cd:f5:d4:c5:b7:f1:b0:19:ae:27:94:f5:e1:30:4e:e0:f6:ef:
         f1:f4:87:13:06:7f:28:ee:6f:30:50:c5:2a:48:33:88:7c:37:
         3d:b5:ce:6b:77:08:43:2c:1d:71:bf:e3:8d:59:f2:cf:f5:31:
         5a:8d:0d:ae:1b:2a:6f:af:02:e9:29:89:1c:50:57:4d:64:80:
         97:2c:cd:97:8b:05:14:dc:c1:a0:96:15:e6:7a:88:b4:e2:70:
         db:3f:ba:97:f1:48:4c:c7:fc:df:fa:52:83:ea:52:ae:67:02:
         1a:fa:8f:79
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUXHw7NZlhgYdBiIBh95wD2ifeFfAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTYzNUY1RTQxOTc5ODM0MUJEQzYxNUQ0RTFDNkFFMzQw
QzM0QkVFRDAeFw0yMzExMjMwMDUwNDdaFw0yNDExMjEwMDU1NDdaMDMxMTAvBgNV
BAMTKEI0ODI0NDlBMzdERjgzNUEzN0VFMjI2NDU0MTRCQzU3OUE2RDlBRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtKS9ItX1RgbmbpBJ8hdHrHKFY
0UjStC/AAf0HxAGEmFCgKYqNML2iU8M7ZiVupQ89qmhGRNRqverHSRW8gl0UDrGh
OhH904ciP4WveaK22kOgrhzd6qjY5inONJYXZe/hV6ecCmxJ25GBXxxb/c3uwis0
Y+WfnU1Bq9gZMdCZDcepnM2WNjCH+lAKKqU7VggTuGQwyNdNhW6TEYxG4rONEvTf
x+qoeKfi2WRe/pt/wDvbllmCPuAgwsUYD1sCr9+oW49c0zaErBv1Pz8ges330CAD
aIDqRtd5ZTF/V+73d0zy1JG1qkKWtdP3YsL38boNZ59/T2KfQYaKTljRO7KvAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUtIJEmjffg1o37iJkVBS8V5ptmuswHwYDVR0j
BBgwFoAUFjX15Bl5g0G9xhXU4cauNAw0vu0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NjQ1MDAzMi01NDkyLTRhNWEtOTQzZi1iZGI0NzMzNDEyMzMvMC8xNjM1RjVFNDE5
Nzk4MzQxQkRDNjE1RDRFMUM2QUUzNDBDMzRCRUVELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTYzNUY1RTQxOTc5ODM0MUJEQzYxNUQ0RTFDNkFFMzQwQzM0
QkVFRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg2NDUwMDMyLTU0OTItNGE1YS05
NDNmLWJkYjQ3MzM0MTIzMy8wLzMyMzAzMjJlMzEzMjM3MmUzOTM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNzM5MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMp/YjANBgkqhkiG
9w0BAQsFAAOCAQEAn8vgGBnm/1I8LdExAtreVQt2hJmnTCsKgTqDPdE/hCx6xUmU
nnaa0tLT2YgNgCDBjLHR3+nwlnB9BxnO2Z1Jk5gp0HgNTbUQZ5Aw1jN6wDYQtI/s
zU6+Seu8ABiKup/dhM5USBTbDOl0PKay4w4EOITNzZqmz03YqUUfHmUukLs0oxnG
n3SUTCjBpQmlCV0OzfXUxbfxsBmuJ5T14TBO4Pbv8fSHEwZ/KO5vMFDFKkgziHw3
PbXOa3cIQywdcb/jjVnyz/UxWo0Nrhsqb68C6SmJHFBXTWSAlyzNl4sFFNzBoJYV
5nqItOJw2z+6l/FITMf83/pSg+pSrmcCGvqPeQ==
-----END CERTIFICATE-----
Generated at Fri May 3 14:51:17 2024 by rpki-client on console-fra.rpki-client.org