Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/3231302e37392e3139302e302f32332d3234203d3e20313336303532.roa
File:                     3231302e37392e3139302e302f32332d3234203d3e20313336303532.roa (raw, json)
Hash identifier:          qHYJ45eLr8E0YUFyW6of2faRdTfStiryCs4gMVkXNZk=
Subject key identifier:   49:D5:91:73:DB:27:03:11:15:94:CC:96:E7:23:77:3B:05:5F:22:74
Certificate issuer:       /CN=7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56
Certificate serial:       4EC2EC1CA68BF1BCD15004B41E83A6029112F2E5
Authority key identifier: 7A:82:C5:E5:CF:F6:8F:50:08:CC:06:8E:C7:CA:6D:A3:83:C3:3D:56
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/3231302e37392e3139302e302f32332d3234203d3e20313336303532.roa
Signing time:             Sun 03 Dec 2023 02:56:54 +0000
ROA not before:           Sun 03 Dec 2023 02:51:54 +0000
ROA not after:            Sun 01 Dec 2024 02:56:54 +0000
asID:                     136052
IP address blocks:        210.79.190.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.crl
                          rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 21:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c2:ec:1c:a6:8b:f1:bc:d1:50:04:b4:1e:83:a6:02:91:12:f2:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56
        Validity
            Not Before: Dec  3 02:51:54 2023 GMT
            Not After : Dec  1 02:56:54 2024 GMT
        Subject: CN=49D59173DB2703111594CC96E723773B055F2274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:66:63:25:e5:63:6c:56:91:d1:37:22:2c:43:
                    b1:93:d7:f7:c9:13:20:30:5d:08:d7:0c:c6:57:f5:
                    62:cd:88:7e:1e:9e:c4:45:a2:99:e1:8c:f7:d7:52:
                    ee:26:7d:99:0c:12:6f:e9:b6:30:9f:1a:2b:27:31:
                    e2:2a:fc:02:6b:dd:8c:a0:4e:f2:4b:a3:85:23:9f:
                    23:cd:a4:37:93:bf:63:dc:62:13:7f:43:97:11:9d:
                    74:9d:12:e8:67:f1:d0:27:64:f5:f7:c2:4a:ff:a3:
                    18:5d:20:25:bc:2d:08:53:ab:c9:58:4c:84:7d:ca:
                    1e:3f:fd:43:14:b3:d6:d1:d9:d4:a0:09:9c:97:4f:
                    87:cd:dd:b8:9f:e4:25:29:f6:db:23:5b:42:bc:bb:
                    c6:5d:da:10:7e:c8:ac:00:39:58:e6:0b:cd:83:1f:
                    bf:37:0b:68:dd:bc:1c:90:3b:d4:2e:c1:78:93:61:
                    a3:1f:63:62:b3:71:7c:d9:2e:04:84:7a:68:e5:c3:
                    ad:ad:48:ba:ac:b7:47:5c:8c:b6:fb:94:3c:f0:49:
                    0a:b8:46:21:6d:24:bc:90:08:98:59:f0:74:f9:71:
                    19:b5:23:7f:44:13:2d:14:69:14:cb:2e:ab:c4:30:
                    43:ae:49:31:78:64:52:9b:fd:86:51:cb:e9:46:9e:
                    0d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D5:91:73:DB:27:03:11:15:94:CC:96:E7:23:77:3B:05:5F:22:74
            X509v3 Authority Key Identifier:
                keyid:7A:82:C5:E5:CF:F6:8F:50:08:CC:06:8E:C7:CA:6D:A3:83:C3:3D:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A82C5E5CFF68F5008CC068EC7CA6DA383C33D56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b260f03c-8968-470f-b618-d3eb2c928a4d/0/3231302e37392e3139302e302f32332d3234203d3e20313336303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.79.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:60:e2:47:5b:0f:43:68:05:fc:e1:a8:fc:2f:c4:d4:4c:db:
         b2:02:7d:48:92:d1:f0:98:52:b9:93:13:1c:e7:88:69:aa:48:
         54:e4:92:84:7a:0a:3a:6f:c4:26:12:08:a2:3a:af:62:73:0d:
         81:40:95:1a:7e:f7:a8:f7:5c:26:cd:ec:d2:b6:06:ea:09:a7:
         82:51:1d:5e:93:c9:18:14:3a:12:d6:b5:ae:bf:d8:ce:22:cc:
         89:83:1e:f4:32:75:ed:59:5c:0e:3c:33:ed:81:08:ea:45:d4:
         39:93:21:f6:e1:ea:d7:94:61:e8:12:ef:20:a1:a1:7b:d3:b1:
         00:36:e0:38:f3:1c:78:e9:4c:3a:ea:46:7e:17:f6:23:b7:f3:
         de:b7:70:7f:66:7a:c1:6f:5c:90:f2:10:5a:8a:50:dd:ae:88:
         a6:66:cd:0a:4b:9a:70:49:e3:b5:71:25:06:ea:4e:81:97:e1:
         34:eb:6a:bf:89:06:14:c5:6c:ab:dd:f1:a2:c6:31:22:99:b2:
         f8:d5:0c:4f:e4:27:cc:6f:96:d1:9d:24:f0:16:56:6f:64:a0:
         2e:b0:6b:03:87:a6:46:79:c5:c0:3e:c4:9c:ad:31:1b:a3:97:
         66:4b:8e:bc:76:ad:3c:88:60:cf:7c:2c:fe:65:83:31:ee:c3:
         1d:04:08:bf
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUTsLsHKaL8bzRUAS0HoOmApES8uUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0E4MkM1RTVDRkY2OEY1MDA4Q0MwNjhFQzdDQTZEQTM4
M0MzM0Q1NjAeFw0yMzEyMDMwMjUxNTRaFw0yNDEyMDEwMjU2NTRaMDMxMTAvBgNV
BAMTKDQ5RDU5MTczREIyNzAzMTExNTk0Q0M5NkU3MjM3NzNCMDU1RjIyNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxZmMl5WNsVpHRNyIsQ7GT1/fJ
EyAwXQjXDMZX9WLNiH4ensRFopnhjPfXUu4mfZkMEm/ptjCfGisnMeIq/AJr3Yyg
TvJLo4UjnyPNpDeTv2PcYhN/Q5cRnXSdEuhn8dAnZPX3wkr/oxhdICW8LQhTq8lY
TIR9yh4//UMUs9bR2dSgCZyXT4fN3bif5CUp9tsjW0K8u8Zd2hB+yKwAOVjmC82D
H783C2jdvByQO9QuwXiTYaMfY2KzcXzZLgSEemjlw62tSLqst0dcjLb7lDzwSQq4
RiFtJLyQCJhZ8HT5cRm1I39EEy0UaRTLLqvEMEOuSTF4ZFKb/YZRy+lGng0XAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUSdWRc9snAxEVlMyW5yN3OwVfInQwHwYDVR0j
BBgwFoAUeoLF5c/2j1AIzAaOx8pto4PDPVYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
MjYwZjAzYy04OTY4LTQ3MGYtYjYxOC1kM2ViMmM5MjhhNGQvMC83QTgyQzVFNUNG
RjY4RjUwMDhDQzA2OEVDN0NBNkRBMzgzQzMzRDU2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0E4MkM1RTVDRkY2OEY1MDA4Q0MwNjhFQzdDQTZEQTM4M0Mz
M0Q1Ni5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IyNjBmMDNjLTg5NjgtNDcwZi1i
NjE4LWQzZWIyYzkyOGE0ZC8wLzMyMzEzMDJlMzczOTJlMzEzOTMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzM2MzAzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0k++MA0GCSqG
SIb3DQEBCwUAA4IBAQBGYOJHWw9DaAX84aj8L8TUTNuyAn1IktHwmFK5kxMc54hp
qkhU5JKEego6b8QmEgiiOq9icw2BQJUafveo91wmzezStgbqCaeCUR1ek8kYFDoS
1rWuv9jOIsyJgx70MnXtWVwOPDPtgQjqRdQ5kyH24erXlGHoEu8goaF707EANuA4
8xx46Uw66kZ+F/Yjt/Pet3B/ZnrBb1yQ8hBailDdroimZs0KS5pwSeO1cSUG6k6B
l+E062q/iQYUxWyr3fGixjEimbL41QxP5CfMb5bRnSTwFlZvZKAusGsDh6ZGecXA
PsScrTEbo5dmS468dq08iGDPfCz+ZYMx7sMdBAi/
-----END CERTIFICATE-----
Generated at Wed May 1 22:50:38 2024 by rpki-client on console-ams.rpki-client.org