Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa
File:                     3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (raw, json)
Hash identifier:          O6imjZiVkJXzatcm2roLkT5dgmuL4vywVvQgeTTr+HE=
Subject key identifier:   82:E9:47:9E:1B:54:00:C8:A9:4C:7B:9F:16:2D:0B:41:26:44:B2:ED
Certificate issuer:       /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Certificate serial:       7BC63DC08B953C0D8F9728CF72E8C118D7F68F80
Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa
Signing time:             Mon 31 Jul 2023 00:05:28 +0000
ROA not before:           Mon 31 Jul 2023 00:00:28 +0000
ROA not after:            Mon 29 Jul 2024 00:05:28 +0000
asID:                     131745
IP address blocks:        210.247.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl
                          rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 15:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c6:3d:c0:8b:95:3c:0d:8f:97:28:cf:72:e8:c1:18:d7:f6:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
        Validity
            Not Before: Jul 31 00:00:28 2023 GMT
            Not After : Jul 29 00:05:28 2024 GMT
        Subject: CN=82E9479E1B5400C8A94C7B9F162D0B412644B2ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:86:9f:9e:e5:89:d8:3c:f3:37:46:09:5b:6e:
                    42:eb:53:c0:74:7c:89:bb:b6:27:37:7c:b6:d8:98:
                    d0:97:76:77:18:f6:7e:75:60:15:13:db:ae:a5:98:
                    5d:9e:29:70:3d:ae:fb:36:de:cf:c0:6b:e2:22:9c:
                    ad:5f:c3:18:56:7f:35:c3:e4:e8:bd:77:f7:b5:d9:
                    68:13:b2:bc:aa:7e:01:93:0f:63:63:7d:f0:d8:a8:
                    93:c2:0f:ec:68:dc:5f:6c:b5:56:b1:05:fc:f6:70:
                    d9:81:7a:f2:35:79:37:63:55:da:9f:8e:c9:12:85:
                    3b:3e:d8:2b:a1:d5:da:20:ab:d6:80:72:4c:2c:e5:
                    3b:7b:67:ff:1a:cf:43:c1:06:e7:67:d6:93:26:66:
                    28:37:e2:4d:62:83:61:ea:da:29:de:b1:35:07:5a:
                    5a:88:1d:41:5d:4b:0f:93:79:a4:84:01:b5:9c:1c:
                    d7:4f:81:f8:07:71:b9:ca:75:1f:59:98:cf:8e:6c:
                    a4:9c:e9:16:97:3a:bd:3a:9c:73:98:d6:70:c2:05:
                    3c:19:ce:a9:db:e3:1b:7a:cb:c9:98:b6:b2:0d:43:
                    62:01:66:39:bc:91:a5:17:0c:7f:e5:b0:5f:b6:a3:
                    53:dd:60:f9:15:9b:f6:3d:f5:8d:f3:a6:d3:63:7b:
                    10:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E9:47:9E:1B:54:00:C8:A9:4C:7B:9F:16:2D:0B:41:26:44:B2:ED
            X509v3 Authority Key Identifier:
                keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.247.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:b3:98:d0:5e:45:ab:6f:44:6a:7b:e2:9c:54:17:3d:d8:35:
         10:9a:ec:ae:a4:f1:12:f5:51:cb:ec:7d:84:2c:3b:f4:ff:8c:
         e4:a9:4a:a9:47:c6:99:f3:60:0a:dc:48:bd:b8:e6:8f:4a:18:
         33:d9:79:7b:78:99:ac:4a:2c:a8:92:a8:68:85:24:a1:50:d3:
         6c:5b:53:01:0b:f0:0e:cb:fe:42:d3:fb:54:19:0f:c6:8c:65:
         17:68:3f:37:c2:4c:e6:b8:64:d9:a1:48:33:eb:3a:c1:50:0b:
         48:c7:60:ba:80:ff:65:a7:37:14:aa:85:2c:9f:1d:c0:30:c3:
         d5:31:c3:d9:08:9c:03:05:1e:c7:ec:20:03:e9:bd:f2:74:57:
         53:d3:a6:bd:f1:0b:68:b8:de:a3:48:b8:e8:e7:0f:c8:cc:92:
         bc:b5:c5:3b:6c:e9:6e:78:08:9b:88:0d:93:0c:46:4e:65:4a:
         35:55:13:37:48:7d:db:9f:1f:a6:ed:fc:f9:5a:d2:97:7f:0f:
         f3:b0:19:00:14:8e:26:f4:60:bd:8b:73:80:d9:b6:8b:43:52:
         11:d3:23:45:d6:77:9e:a0:0c:6a:8b:aa:d4:34:b0:75:a4:cf:
         4a:c0:04:4f:a6:8e:63:da:ac:4f:65:5a:e2:ed:5f:54:0a:88:
         3f:92:7e:8d
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUe8Y9wIuVPA2PlyjPcujBGNf2j4AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJD
QUI5NjEwRjAeFw0yMzA3MzEwMDAwMjhaFw0yNDA3MjkwMDA1MjhaMDMxMTAvBgNV
BAMTKDgyRTk0NzlFMUI1NDAwQzhBOTRDN0I5RjE2MkQwQjQxMjY0NEIyRUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCshp+e5YnYPPM3RglbbkLrU8B0
fIm7tic3fLbYmNCXdncY9n51YBUT266lmF2eKXA9rvs23s/Aa+IinK1fwxhWfzXD
5Oi9d/e12WgTsryqfgGTD2NjffDYqJPCD+xo3F9stVaxBfz2cNmBevI1eTdjVdqf
jskShTs+2Cuh1dogq9aAckws5Tt7Z/8az0PBBudn1pMmZig34k1ig2Hq2inesTUH
WlqIHUFdSw+TeaSEAbWcHNdPgfgHcbnKdR9ZmM+ObKSc6RaXOr06nHOY1nDCBTwZ
zqnb4xt6y8mYtrINQ2IBZjm8kaUXDH/lsF+2o1PdYPkVm/Y99Y3zptNjexBZAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUgulHnhtUAMipTHufFi0LQSZEsu0wHwYDVR0j
BBgwFoAUiv67UdAMjgaq6oQuDAz/wsq5YQ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
NjEyNDMyOS1lYzIwLTQ0NjAtYWMzMS05YzM2Y2Y5NGYzZmIvMC84QUZFQkI1MUQw
MEM4RTA2QUFFQTg0MkUwQzBDRkZDMkNBQjk2MTBGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJDQUI5
NjEwRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk2MTI0MzI5LWVjMjAtNDQ2MC1h
YzMxLTljMzZjZjk0ZjNmYi8wLzMyMzEzMDJlMzIzNDM3MmUzMjM0MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzEzNzM0MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADS9/YwDQYJ
KoZIhvcNAQELBQADggEBAFyzmNBeRatvRGp74pxUFz3YNRCa7K6k8RL1UcvsfYQs
O/T/jOSpSqlHxpnzYArcSL245o9KGDPZeXt4maxKLKiSqGiFJKFQ02xbUwEL8A7L
/kLT+1QZD8aMZRdoPzfCTOa4ZNmhSDPrOsFQC0jHYLqA/2WnNxSqhSyfHcAww9Ux
w9kInAMFHsfsIAPpvfJ0V1PTpr3xC2i43qNIuOjnD8jMkry1xTts6W54CJuIDZMM
Rk5lSjVVEzdIfdufH6bt/Pla0pd/D/OwGQAUjib0YL2Lc4DZtotDUhHTI0XWd56g
DGqLqtQ0sHWkz0rABE+mjmParE9lWuLtX1QKiD+Sfo0=
-----END CERTIFICATE-----
Generated at Thu Apr 25 06:16:25 2024 by rpki-client on console-ams.rpki-client.org