Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137322e302f32322d3232203d3e203234323036.roa
File:                     3131302e34342e3137322e302f32322d3232203d3e203234323036.roa (raw, json)
Hash identifier:          uV1O4PZ+vP86Kvs/uBDtUa0vcuYJ/k9jDvukA0/vDGc=
Subject key identifier:   A6:6E:95:4D:11:A8:14:F8:B6:2C:FE:BE:9A:81:45:E4:F5:C6:9B:B4
Certificate issuer:       /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial:       6DE1287F947855C268B381D15CE748B702285A1E
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137322e302f32322d3232203d3e203234323036.roa
Signing time:             Wed 09 Aug 2023 12:00:00 +0000
ROA not before:           Wed 09 Aug 2023 11:55:00 +0000
ROA not after:            Wed 07 Aug 2024 12:00:00 +0000
asID:                     24206
IP address blocks:        110.44.172.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
                          rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 05:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e1:28:7f:94:78:55:c2:68:b3:81:d1:5c:e7:48:b7:02:28:5a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
        Validity
            Not Before: Aug  9 11:55:00 2023 GMT
            Not After : Aug  7 12:00:00 2024 GMT
        Subject: CN=A66E954D11A814F8B62CFEBE9A8145E4F5C69BB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:e7:3c:53:5f:99:ed:57:c4:bc:5d:f6:1f:67:
                    21:e5:fd:8c:a2:8f:22:cf:15:75:67:50:c0:b7:32:
                    2a:2b:f1:6f:20:2e:a4:fb:e2:82:60:e6:69:57:5f:
                    1b:e6:08:19:94:bd:2f:20:e6:c5:7c:a5:f8:45:51:
                    e2:68:2b:65:77:19:eb:4d:4a:b3:7c:da:44:a4:95:
                    0b:ce:28:31:d3:a5:c8:a5:03:bc:ca:ad:1f:64:50:
                    4e:5e:ef:06:ed:e0:cc:d4:81:ab:7c:57:56:43:b8:
                    36:62:75:bd:50:9c:0f:40:70:bf:67:7e:2e:04:ee:
                    b8:cb:56:fb:ef:d1:d5:5d:ac:ff:b6:8e:0f:93:04:
                    64:8e:7c:04:ef:87:51:2f:37:3f:4e:1b:43:df:06:
                    ff:ff:cc:62:1c:db:e8:a4:b5:e0:49:31:bb:1c:cd:
                    44:e2:22:6a:2e:17:0b:09:83:bd:1a:d3:bf:08:4e:
                    de:90:ee:7d:db:43:f2:d9:03:97:ae:0d:06:08:74:
                    52:8f:51:1b:14:4b:d7:ed:f1:4a:2b:5e:15:df:99:
                    04:b9:7a:e7:5d:bf:a7:27:8f:22:40:84:db:e6:a2:
                    56:2f:19:36:a1:b4:1f:c4:0a:2f:e1:37:ee:ea:5e:
                    f3:2a:44:ac:fb:a9:b3:c6:0a:99:38:7d:c6:3f:86:
                    bd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6E:95:4D:11:A8:14:F8:B6:2C:FE:BE:9A:81:45:E4:F5:C6:9B:B4
            X509v3 Authority Key Identifier:
                keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137322e302f32322d3232203d3e203234323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.44.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:a1:1b:43:3d:3c:b0:79:de:95:82:17:63:c2:b8:11:ba:d2:
         44:d3:b7:89:81:10:66:ce:bd:20:b3:4a:55:2b:9a:9b:85:eb:
         03:46:bd:a1:1f:cf:11:27:af:64:54:2b:be:70:6e:59:66:c5:
         f8:72:2a:97:98:43:a6:7c:de:0a:dc:aa:99:a9:80:be:c4:21:
         2d:94:1e:95:63:5e:eb:4d:4b:b5:5f:9e:ec:1a:87:48:d1:4a:
         17:5d:6c:37:36:72:2a:d9:d4:ee:ff:0b:9e:84:44:7f:38:31:
         e2:7c:4e:1e:19:46:18:22:c7:4e:49:c2:1a:b4:c0:01:cd:62:
         9d:d8:97:3a:ed:3a:fb:9c:af:18:23:1b:be:3c:0b:ba:b5:f9:
         a6:5c:b3:83:05:9d:64:d8:97:41:18:16:8c:a5:1c:1a:84:19:
         7a:e9:0b:7e:0d:1c:eb:c9:98:47:d8:cf:6d:eb:af:50:b3:b4:
         4b:8a:46:38:4f:c5:6f:3e:20:80:35:f0:e7:28:5f:5a:a8:54:
         4f:c3:f6:4c:40:ab:8f:5f:78:e7:e1:a4:8a:ce:e2:76:37:2e:
         74:ab:f6:a5:ea:87:35:4c:ba:8b:ee:cd:15:0f:58:d4:db:92:
         c0:53:0b:d8:d0:3d:5a:55:e9:a8:cf:cf:ff:c1:ec:e4:ee:3c:
         f8:51:10:d5
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUbeEof5R4VcJos4HRXOdItwIoWh4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC
MEMxMDhBOTAeFw0yMzA4MDkxMTU1MDBaFw0yNDA4MDcxMjAwMDBaMDMxMTAvBgNV
BAMTKEE2NkU5NTREMTFBODE0RjhCNjJDRkVCRTlBODE0NUU0RjVDNjlCQjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd5zxTX5ntV8S8XfYfZyHl/Yyi
jyLPFXVnUMC3Mior8W8gLqT74oJg5mlXXxvmCBmUvS8g5sV8pfhFUeJoK2V3GetN
SrN82kSklQvOKDHTpcilA7zKrR9kUE5e7wbt4MzUgat8V1ZDuDZidb1QnA9AcL9n
fi4E7rjLVvvv0dVdrP+2jg+TBGSOfATvh1EvNz9OG0PfBv//zGIc2+ikteBJMbsc
zUTiImouFwsJg70a078ITt6Q7n3bQ/LZA5euDQYIdFKPURsUS9ft8UorXhXfmQS5
euddv6cnjyJAhNvmolYvGTahtB/ECi/hN+7qXvMqRKz7qbPGCpk4fcY/hr2ZAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUpm6VTRGoFPi2LP6+moFF5PXGm7QwHwYDVR0j
BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD
NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx
MDhBOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05
MTg2LWE2NDhjMmRhM2Y3Yi8wLzMxMzEzMDJlMzQzNDJlMzEzNzMyMmUzMDJmMzIz
MjJkMzIzMjIwM2QzZTIwMzIzNDMyMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAm4srDANBgkqhkiG
9w0BAQsFAAOCAQEAe6EbQz08sHnelYIXY8K4EbrSRNO3iYEQZs69ILNKVSuam4Xr
A0a9oR/PESevZFQrvnBuWWbF+HIql5hDpnzeCtyqmamAvsQhLZQelWNe601LtV+e
7BqHSNFKF11sNzZyKtnU7v8LnoREfzgx4nxOHhlGGCLHTknCGrTAAc1indiXOu06
+5yvGCMbvjwLurX5plyzgwWdZNiXQRgWjKUcGoQZeukLfg0c68mYR9jPbeuvULO0
S4pGOE/Fbz4ggDXw5yhfWqhUT8P2TECrj1945+Gkis7idjcudKv2peqHNUy6i+7N
FQ9Y1NuSwFML2NA9WlXpqM/P/8Hs5O48+FEQ1Q==
-----END CERTIFICATE-----
Generated at Thu Apr 18 22:02:08 2024 by rpki-client on console-fra.rpki-client.org