Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3230332e3230372e35362e302f32322d3232203d3e203535363939.roa
File:                     3230332e3230372e35362e302f32322d3232203d3e203535363939.roa (raw, json)
Hash identifier:          3lPGMpBmz03kAitI1gAsv1Onbvg/l4g+KTAVxVsmVu0=
Subject key identifier:   B5:50:7F:87:F5:DC:28:18:83:A9:35:9E:C7:CB:C4:2E:08:5B:10:7D
Certificate issuer:       /CN=1976DD7D4FBDFBEB355F0B96690613959E106872
Certificate serial:       61A43F304A8CD452280C4111905107B244620479
Authority key identifier: 19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3230332e3230372e35362e302f32322d3232203d3e203535363939.roa
Signing time:             Mon 31 Jul 2023 00:06:17 +0000
ROA not before:           Mon 31 Jul 2023 00:01:17 +0000
ROA not after:            Mon 29 Jul 2024 00:06:17 +0000
asID:                     55699
IP address blocks:        203.207.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl
                          rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 10:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a4:3f:30:4a:8c:d4:52:28:0c:41:11:90:51:07:b2:44:62:04:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1976DD7D4FBDFBEB355F0B96690613959E106872
        Validity
            Not Before: Jul 31 00:01:17 2023 GMT
            Not After : Jul 29 00:06:17 2024 GMT
        Subject: CN=B5507F87F5DC281883A9359EC7CBC42E085B107D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9c:65:2d:c9:c7:ab:38:6b:3a:86:07:65:d6:
                    b6:85:35:e8:97:ae:fc:d1:b9:61:b6:fd:3c:0c:24:
                    93:9d:d8:c3:c8:e6:28:e3:5a:50:38:6e:fd:29:4c:
                    46:af:3a:25:11:1b:6a:7f:a5:41:9a:7a:b2:12:c6:
                    be:e9:ca:f4:a7:e5:83:bd:d1:5c:45:72:15:44:20:
                    55:f7:20:67:18:a6:7f:4e:a9:b7:ba:7c:65:4e:3d:
                    2a:7b:95:92:1d:f1:fa:ea:f7:2f:2b:6f:37:8a:27:
                    9f:71:32:f5:6a:dd:0c:b0:e8:c1:36:a6:c1:9e:dd:
                    5f:93:b6:61:62:0e:fb:08:b7:88:0c:1e:8d:2b:e9:
                    87:ac:33:b7:d1:62:82:47:b3:79:b9:7e:3e:1e:64:
                    98:87:6d:a5:1e:55:a3:e6:db:89:c5:d9:db:44:06:
                    8f:b6:4a:db:2d:2d:b4:23:68:23:e3:fe:7b:08:ac:
                    53:f8:36:78:50:e2:9f:4c:40:c5:54:f0:c3:8b:e3:
                    88:6a:38:c6:2b:f1:29:0e:23:11:35:5a:29:a1:41:
                    07:d0:fa:4b:da:50:8f:61:ff:ca:32:ac:63:46:b9:
                    e6:eb:73:de:66:10:3a:e1:86:52:0b:1e:27:4b:ec:
                    b5:3e:20:3d:4a:e8:e6:ba:bc:99:1e:9c:d1:44:25:
                    c8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:50:7F:87:F5:DC:28:18:83:A9:35:9E:C7:CB:C4:2E:08:5B:10:7D
            X509v3 Authority Key Identifier:
                keyid:19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3230332e3230372e35362e302f32322d3232203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.207.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:36:a3:01:09:83:b8:13:e8:ef:76:66:16:a0:cf:96:43:64:
         02:49:f9:03:0f:83:f9:8e:34:82:92:13:b6:91:f0:06:9f:bf:
         35:44:0b:98:78:5a:77:6e:47:0a:99:88:88:ea:79:a6:b4:89:
         02:53:49:fa:47:f0:8c:2d:e2:c8:0b:f1:79:70:d8:ff:48:77:
         f7:db:d7:27:31:39:4b:d4:67:a2:c3:ea:48:0e:e8:4b:c4:2c:
         0a:97:50:4c:7a:2c:fd:63:02:38:ad:0d:91:d9:ff:7b:68:b3:
         f0:1f:33:83:43:d1:ff:5b:d7:f6:b9:f7:f2:e9:14:4c:14:f7:
         2e:86:15:ec:c0:3a:58:2f:51:b6:0b:5f:f7:77:31:20:46:10:
         22:3c:9b:dd:39:de:45:e0:1c:49:10:6f:55:20:f5:95:7d:7f:
         63:1d:e8:e1:f6:97:6a:38:26:f8:cd:4f:95:65:07:da:89:84:
         80:9b:98:12:d3:ec:98:dd:2d:8a:8d:e2:dc:2c:44:33:28:53:
         6e:ac:dc:b4:35:62:11:12:2a:1d:ae:32:7f:e2:d1:92:f1:e2:
         09:17:62:c2:8c:f6:35:51:11:7a:64:c0:20:ce:c1:d5:70:32:
         9a:2a:6e:7d:ca:2c:39:9e:d1:46:ca:b7:7a:5a:c2:93:cd:25:
         25:7c:4f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 10:29:46 2024 by rpki-client on console-fra.rpki-client.org