Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e39392e302f32342d3234203d3e203137393130.roa
File:                     3230322e3132372e39392e302f32342d3234203d3e203137393130.roa (raw, json)
Hash identifier:          IuioFLA+LJj7T7qDQwofxHSDlvloHKK0lkILscreEJo=
Subject key identifier:   4A:F2:1C:7A:93:99:26:28:C4:60:3E:FF:73:C6:9F:8C:F6:81:6C:61
Certificate issuer:       /CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
Certificate serial:       2E98EBECA837F6A4FA4D3D3C500C9CC17097F8D1
Authority key identifier: 16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e39392e302f32342d3234203d3e203137393130.roa
Signing time:             Thu 23 Nov 2023 00:45:57 +0000
ROA not before:           Thu 23 Nov 2023 00:40:57 +0000
ROA not after:            Thu 21 Nov 2024 00:45:57 +0000
asID:                     17910
IP address blocks:        202.127.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl
                          rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:98:eb:ec:a8:37:f6:a4:fa:4d:3d:3c:50:0c:9c:c1:70:97:f8:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
        Validity
            Not Before: Nov 23 00:40:57 2023 GMT
            Not After : Nov 21 00:45:57 2024 GMT
        Subject: CN=4AF21C7A93992628C4603EFF73C69F8CF6816C61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7c:31:37:20:fc:fb:dc:d6:c6:e6:fa:41:d3:
                    91:7a:c8:48:a5:f7:62:e9:1d:88:d9:ce:b8:6c:c2:
                    44:2a:87:e5:fa:c3:87:f5:b7:ef:ae:4d:7b:65:3e:
                    03:d6:1f:d3:79:78:ea:f0:08:a4:4e:2a:8e:34:b5:
                    0c:71:e0:c7:1e:8d:e5:ae:56:de:64:ad:41:ec:a1:
                    30:fb:ce:11:5c:f2:50:f7:a6:e1:90:f6:86:56:fc:
                    ef:64:27:a1:81:b4:ae:67:4f:7d:92:a9:3f:eb:21:
                    02:53:c1:aa:38:c3:20:38:d6:35:dc:70:8d:67:75:
                    31:10:12:bf:06:b8:de:9d:10:2d:86:95:dd:f0:fe:
                    d4:9a:cc:95:7a:49:04:c3:36:00:dd:50:9f:30:6d:
                    ed:1b:45:9e:93:f6:77:f1:40:59:ea:be:e2:42:99:
                    07:6a:c6:8e:b6:bf:c4:e1:bd:1c:29:d5:ce:d2:4c:
                    5a:1e:8a:7b:72:b6:24:fa:5f:79:69:f7:d8:dd:15:
                    41:f3:87:c3:c5:94:cb:cf:8d:6c:ea:79:f9:e5:84:
                    c8:91:c5:78:fc:bc:50:29:d2:9b:6d:0b:09:48:49:
                    ce:ec:ab:2d:8e:a1:73:b4:63:54:8c:cc:8a:41:73:
                    22:44:82:06:db:75:ab:b7:bd:33:cf:92:d5:60:00:
                    2e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F2:1C:7A:93:99:26:28:C4:60:3E:FF:73:C6:9F:8C:F6:81:6C:61
            X509v3 Authority Key Identifier:
                keyid:16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e39392e302f32342d3234203d3e203137393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.127.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:06:1b:3e:4b:1d:75:41:1d:a5:52:dd:62:f9:42:9f:85:83:
         a5:9f:f0:e0:bb:74:0e:04:dc:a4:f4:71:1f:a6:92:d2:27:eb:
         69:26:fc:37:98:40:93:c3:74:31:6f:9a:72:05:9e:52:0d:27:
         5e:58:1b:a2:d6:09:ed:c7:1f:e0:aa:ce:2f:d1:de:f8:28:e1:
         1e:61:ca:2d:a1:a8:10:5d:05:65:7d:7d:53:34:0c:1b:c2:06:
         8e:58:84:63:ee:83:c4:14:89:ad:b8:94:d3:f2:f6:be:c8:7c:
         5d:f1:3f:95:81:35:6f:4a:b9:8c:9d:31:fa:9c:f5:a6:a8:f2:
         38:b2:9f:79:16:91:b1:49:32:c7:2d:e0:79:a0:cd:0e:97:6a:
         c1:24:29:b6:75:b7:5c:d1:41:f0:11:ea:98:0e:65:d2:9a:12:
         07:26:27:ff:8e:91:84:77:9c:9a:2e:f1:ad:02:cb:ce:cc:d5:
         94:7e:fb:75:ac:54:d7:fe:96:7b:a2:14:af:58:ce:df:23:b7:
         a6:27:6a:93:54:19:42:8f:a6:3c:70:3c:ec:ec:b2:43:af:3a:
         30:fa:1c:0a:c0:5f:6c:b8:a4:f2:b6:eb:b0:ca:e7:9b:31:89:
         ba:cb:dd:ba:51:cd:4f:2e:bc:e4:8d:7b:4b:80:ab:09:cf:45:
         dd:4f:75:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 15:16:06 2024 by rpki-client on console-ams.rpki-client.org