Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3230322e3135312e31322e302f32322d3232203d3e203535363939.roa
File:                     3230322e3135312e31322e302f32322d3232203d3e203535363939.roa (raw, json)
Hash identifier:          CO247HziiI/b7MeueGEm7fq5GE2/VyGGrWCM8PhDOFQ=
Subject key identifier:   56:E2:CE:46:A4:72:8C:61:8B:F3:0E:C9:9C:54:8C:8D:2C:E9:CF:5F
Certificate issuer:       /CN=1976DD7D4FBDFBEB355F0B96690613959E106872
Certificate serial:       1F429A96DF343DF90B123958DC5448F4FA5D90B7
Authority key identifier: 19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3230322e3135312e31322e302f32322d3232203d3e203535363939.roa
Signing time:             Mon 31 Jul 2023 00:06:18 +0000
ROA not before:           Mon 31 Jul 2023 00:01:18 +0000
ROA not after:            Mon 29 Jul 2024 00:06:18 +0000
asID:                     55699
IP address blocks:        202.151.12.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl
                          rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 10:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:42:9a:96:df:34:3d:f9:0b:12:39:58:dc:54:48:f4:fa:5d:90:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1976DD7D4FBDFBEB355F0B96690613959E106872
        Validity
            Not Before: Jul 31 00:01:18 2023 GMT
            Not After : Jul 29 00:06:18 2024 GMT
        Subject: CN=56E2CE46A4728C618BF30EC99C548C8D2CE9CF5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:91:b4:7b:f0:1c:61:b3:9d:63:39:e4:65:ae:
                    b8:6a:d1:9f:d7:b7:4f:85:c6:03:97:2c:95:be:59:
                    c2:41:e2:4a:e0:c1:d7:bb:69:ed:e1:b8:e9:09:d9:
                    09:29:a5:e1:3a:cf:42:7e:90:81:a5:b2:ef:83:38:
                    fd:0d:18:33:c4:c3:5b:c1:d0:31:e5:9e:01:52:74:
                    4e:cf:af:7c:ea:c1:ce:74:75:d6:fa:2c:e7:c2:c6:
                    8a:65:b5:86:0b:80:06:40:ae:f3:e2:11:49:52:8a:
                    b6:23:3b:33:43:64:f5:05:40:b8:33:ab:5e:9f:24:
                    ed:df:f0:94:58:17:95:43:1b:0c:0a:86:c2:b1:00:
                    88:7f:26:f2:00:5f:ab:cb:cd:89:9c:ac:e1:46:cb:
                    58:04:3f:2a:7c:b5:03:a8:3b:2a:ff:fb:99:2b:b4:
                    3a:1a:40:f9:85:d7:40:e9:94:28:e1:35:59:4f:50:
                    be:40:5a:df:52:d8:52:e3:7a:34:77:57:cd:a8:46:
                    88:f4:9e:7a:75:6a:df:da:71:2e:40:09:7b:54:cc:
                    a8:3a:d5:45:c2:65:44:0a:da:39:9a:7c:f5:40:7a:
                    50:84:ec:5a:4a:5a:70:2f:ec:fc:a7:3f:19:18:dd:
                    e8:15:18:89:97:92:c9:45:77:25:2f:e9:44:39:1e:
                    f9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E2:CE:46:A4:72:8C:61:8B:F3:0E:C9:9C:54:8C:8D:2C:E9:CF:5F
            X509v3 Authority Key Identifier:
                keyid:19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3230322e3135312e31322e302f32322d3232203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.151.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:55:fa:d7:f2:fd:83:05:8b:52:e4:4f:24:33:8e:ee:b4:eb:
         c1:e0:fe:b0:30:ac:ef:46:37:fc:fc:4a:fd:68:92:cc:e1:39:
         60:7b:7c:84:9b:7e:55:4e:8b:63:64:eb:a4:b3:89:7b:9d:cb:
         00:ed:a0:ea:95:c9:08:fa:b2:02:ee:f6:31:ef:92:99:75:1e:
         24:ee:c6:69:16:0c:f2:38:b0:fc:c6:de:42:6d:82:9c:60:85:
         ec:23:be:6c:9f:82:80:04:01:94:6f:c6:e3:1f:8b:c1:e9:74:
         72:1b:74:7c:a7:b9:5e:62:be:3f:6a:e5:15:b2:c6:a5:64:b2:
         c7:77:6e:2e:57:a9:5b:f4:ef:0d:f8:dd:3a:c3:32:3e:b0:43:
         18:f9:61:9a:c7:a4:0f:92:8f:73:e2:7d:ca:93:64:ce:c9:18:
         a1:1b:35:db:d1:d5:e3:2b:ba:67:03:6c:18:7b:64:6b:f9:c7:
         6f:d0:8d:2c:2a:7e:89:c1:69:63:a6:fa:d5:6d:8e:4a:61:f5:
         2c:cd:3b:9c:6c:a8:7c:3c:db:c7:d2:af:28:c2:26:1e:19:d7:
         24:58:07:31:9f:07:9d:d8:2b:78:9b:50:d2:5b:87:d3:ce:a1:
         ed:28:c2:5a:e6:db:9f:76:5e:40:79:6d:9c:a8:8d:1a:ff:1b:
         af:c1:90:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 11:01:38 2024 by rpki-client on console-ams.rpki-client.org