Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136392e302f32342d3234203d3e203138303539.roa
File:                     3230322e34332e3136392e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          40JN27G7uXPxsa0Pd33ptDpypOIKWOFb0hX8P2xOVDw=
Subject key identifier:   F4:B5:D5:CD:F5:45:30:F7:DD:A1:41:D3:6A:E6:AD:04:FA:9E:03:1A
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       2A536E4D7E9800231528A3EF28BDE1E3E60636A6
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136392e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 24 Nov 2023 03:23:29 +0000
ROA not before:           Fri 24 Nov 2023 03:18:29 +0000
ROA not after:            Fri 22 Nov 2024 03:23:29 +0000
asID:                     18059
IP address blocks:        202.43.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 04:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:53:6e:4d:7e:98:00:23:15:28:a3:ef:28:bd:e1:e3:e6:06:36:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Nov 24 03:18:29 2023 GMT
            Not After : Nov 22 03:23:29 2024 GMT
        Subject: CN=F4B5D5CDF54530F7DDA141D36AE6AD04FA9E031A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cf:54:a6:b0:32:cb:84:89:15:45:4f:84:f4:
                    f5:d8:2f:25:af:b5:d2:83:53:8c:63:1e:9f:15:90:
                    89:3a:9d:eb:12:b2:20:1b:ac:b1:d6:2d:02:40:c9:
                    3a:96:3b:9f:cb:64:13:96:bb:35:8e:6f:9d:9e:ac:
                    7d:ca:ea:b4:ed:46:f7:76:d9:fd:98:dc:aa:d1:f2:
                    03:6b:cd:5b:8b:a9:ec:79:29:fc:81:d4:92:ba:c4:
                    db:49:b0:62:0b:e6:18:e2:9c:d7:1e:77:96:88:b5:
                    35:32:c6:0e:e4:5b:1a:a3:36:dc:56:19:26:fa:09:
                    59:74:a9:13:48:f8:2e:5a:e3:e7:0b:ec:2a:35:5c:
                    85:e2:57:b7:1c:48:b8:5c:0b:9a:c8:0b:ee:d7:a5:
                    69:64:fe:a9:77:88:98:79:39:4e:71:0b:4e:92:79:
                    23:88:09:d4:68:e1:33:f4:70:95:9a:d2:69:f7:bd:
                    e9:c6:d3:29:45:c4:14:19:2a:ba:76:ef:fc:be:4a:
                    f3:77:b0:67:07:41:90:e2:a4:7c:cd:77:68:db:41:
                    6f:e3:28:89:6b:3b:da:ee:e7:1b:46:7f:e2:b4:54:
                    cf:b7:a4:3f:82:db:21:82:ab:ca:ef:10:47:59:e4:
                    2a:09:cc:5c:1c:9f:01:69:f0:90:2c:82:79:ba:3a:
                    8f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B5:D5:CD:F5:45:30:F7:DD:A1:41:D3:6A:E6:AD:04:FA:9E:03:1A
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230322e34332e3136392e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:3d:cb:ac:3c:8f:bd:b9:50:92:ba:1c:85:bb:09:e1:3e:10:
         da:58:51:2a:58:f0:49:fe:96:ef:1b:cb:74:a3:82:fa:9e:32:
         86:0f:7f:a0:56:45:06:65:ed:07:7d:41:89:d9:85:76:78:9e:
         ca:7c:0f:cc:f5:2c:29:e5:02:72:48:bc:09:37:02:8f:08:d7:
         2b:c6:0a:6a:de:88:7f:f4:dc:91:69:bd:22:14:80:88:9e:d9:
         b2:f3:8c:00:e6:3a:09:2c:19:5c:88:f9:9b:ff:5c:ef:bb:d2:
         ce:77:8c:3f:d7:5b:3c:05:a2:83:fb:e7:a7:b5:1b:37:6a:68:
         ea:8d:42:87:b5:8c:c8:26:d9:7a:fc:10:3b:f8:cf:6a:86:1b:
         d0:c7:31:fd:1e:c5:28:93:ad:89:33:28:15:25:19:5b:af:ad:
         da:53:5b:a9:1e:ad:2c:20:e4:0f:90:51:e9:87:93:48:45:6d:
         33:b1:76:cf:c7:4b:43:99:7c:8a:90:5c:10:b7:1c:a8:34:b7:
         bd:66:48:c9:57:a2:a3:5d:e9:a3:2b:bb:42:19:22:90:51:f5:
         eb:1d:32:c2:50:76:2b:50:ea:c3:3f:22:c1:70:df:e7:e2:f0:
         d1:07:9d:37:b0:bb:1d:b3:d8:fe:4c:24:3e:7d:50:79:b9:14:
         0f:da:b8:9a
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUKlNuTX6YACMVKKPvKL3h4+YGNqYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2
QzhBMUQ4RTAeFw0yMzExMjQwMzE4MjlaFw0yNDExMjIwMzIzMjlaMDMxMTAvBgNV
BAMTKEY0QjVENUNERjU0NTMwRjdEREExNDFEMzZBRTZBRDA0RkE5RTAzMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTz1SmsDLLhIkVRU+E9PXYLyWv
tdKDU4xjHp8VkIk6nesSsiAbrLHWLQJAyTqWO5/LZBOWuzWOb52erH3K6rTtRvd2
2f2Y3KrR8gNrzVuLqex5KfyB1JK6xNtJsGIL5hjinNced5aItTUyxg7kWxqjNtxW
GSb6CVl0qRNI+C5a4+cL7Co1XIXiV7ccSLhcC5rIC+7XpWlk/ql3iJh5OU5xC06S
eSOICdRo4TP0cJWa0mn3venG0ylFxBQZKrp27/y+SvN3sGcHQZDipHzNd2jbQW/j
KIlrO9ru5xtGf+K0VM+3pD+C2yGCq8rvEEdZ5CoJzFwcnwFp8JAsgnm6Oo/VAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU9LXVzfVFMPfdoUHTauatBPqeAxowHwYDVR0j
BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1
MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB
MUQ4RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h
ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMjJlMzQzMzJlMzEzNjM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMorqTANBgkqhkiG
9w0BAQsFAAOCAQEAZT3LrDyPvblQkrochbsJ4T4Q2lhRKljwSf6W7xvLdKOC+p4y
hg9/oFZFBmXtB31BidmFdnieynwPzPUsKeUCcki8CTcCjwjXK8YKat6If/TckWm9
IhSAiJ7ZsvOMAOY6CSwZXIj5m/9c77vSzneMP9dbPAWig/vnp7UbN2po6o1Ch7WM
yCbZevwQO/jPaoYb0Mcx/R7FKJOtiTMoFSUZW6+t2lNbqR6tLCDkD5BR6YeTSEVt
M7F2z8dLQ5l8ipBcELccqDS3vWZIyVeio13poyu7QhkikFH16x0ywlB2K1Dqwz8i
wXDf5+Lw0QedN7C7HbPY/kwkPn1QebkUD9q4mg==
-----END CERTIFICATE-----
Generated at Tue Apr 30 10:13:54 2024 by rpki-client on console-fra.rpki-client.org