Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233342e302f32342d3234203d3e203138303539.roa
File:                     3230332e3133342e3233342e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          V7PhgJ02VFJE7U2TXZt5nccW/W2kqAQSK79tU465e6s=
Subject key identifier:   79:6E:65:D9:F6:D6:BF:FA:33:63:90:1C:8F:42:44:C0:08:33:1E:49
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       7EDB7E42575F6B5E0466AD2BBC3A695E98C4DFB4
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233342e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 24 Nov 2023 04:06:48 +0000
ROA not before:           Fri 24 Nov 2023 04:01:48 +0000
ROA not after:            Fri 22 Nov 2024 04:06:48 +0000
asID:                     18059
IP address blocks:        203.134.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 21:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:db:7e:42:57:5f:6b:5e:04:66:ad:2b:bc:3a:69:5e:98:c4:df:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Nov 24 04:01:48 2023 GMT
            Not After : Nov 22 04:06:48 2024 GMT
        Subject: CN=796E65D9F6D6BFFA3363901C8F4244C008331E49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:85:e2:bc:42:b1:8f:cf:15:2d:d3:25:d0:74:
                    61:9d:90:59:1f:cb:c6:69:49:8f:5e:a5:6b:72:6a:
                    81:e3:cd:f8:ea:f6:03:9e:7a:a4:d0:55:62:8a:ca:
                    38:f7:36:ef:65:5a:27:b6:7c:14:68:46:ec:25:d1:
                    e6:be:cc:d5:e9:a1:7c:db:05:25:87:70:f8:c8:17:
                    93:15:e0:9e:5f:0d:8a:96:61:da:b0:2b:55:88:fb:
                    22:c6:32:bf:99:13:f9:15:56:74:6b:01:7b:af:53:
                    f7:61:7b:13:69:b2:98:d7:99:92:fe:8a:9d:6e:02:
                    5f:23:67:3b:38:6c:27:3c:9c:9f:cc:d6:3f:a9:4e:
                    dd:76:7a:c7:77:17:dc:61:2e:4f:21:3f:1f:3f:25:
                    70:f1:54:14:c3:6e:21:38:3c:18:74:c0:70:40:73:
                    d7:8b:a4:1f:34:ba:23:62:41:8b:94:04:7c:64:5b:
                    80:b7:55:61:be:33:b3:0d:10:79:08:69:ee:7f:9e:
                    2f:3a:83:85:a4:85:23:89:7f:4b:53:73:20:10:29:
                    81:4c:92:79:bc:9c:4f:62:2f:6c:0f:dc:92:05:74:
                    bb:77:83:a6:8c:2a:59:20:9c:50:bf:78:8c:a9:72:
                    c8:68:5e:08:b4:9f:2f:73:bb:89:79:d2:96:aa:6d:
                    c2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6E:65:D9:F6:D6:BF:FA:33:63:90:1C:8F:42:44:C0:08:33:1E:49
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3133342e3233342e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.134.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:fc:d7:de:e1:f3:ab:65:17:6d:a8:d5:0a:e7:2f:5b:75:a3:
         a2:ed:13:04:2d:31:20:ec:8e:b9:2c:79:6a:b5:33:78:2d:88:
         03:26:09:69:a5:c3:99:1f:44:6b:3b:7c:d4:26:e6:f1:72:80:
         2a:ca:1b:6f:3d:f0:e2:f4:75:d0:55:3c:63:f0:be:b5:0d:60:
         84:a6:0b:49:d9:b1:e4:88:e1:af:1c:82:ea:c3:7e:90:63:38:
         ae:5a:cb:e2:e2:e6:fe:d4:e5:7d:1e:ab:9d:1e:eb:03:f8:df:
         87:38:8b:76:d5:c6:a9:ff:18:a7:0a:06:a5:55:7f:67:06:59:
         69:81:ae:cf:86:4a:c3:8e:00:71:42:88:8c:ec:75:6a:cc:93:
         65:87:cc:ab:b2:f1:1f:6c:52:44:3b:e7:ea:49:47:36:58:46:
         2f:0c:42:75:32:48:c7:d7:60:9d:d8:83:15:2d:63:4f:88:24:
         5b:44:da:4c:50:90:f5:5f:56:11:1e:1c:0c:dd:38:52:07:2a:
         9e:25:26:e9:01:6b:98:6d:0a:c1:aa:43:e9:f8:a8:fd:46:95:
         0b:38:12:31:2b:cb:ad:c6:b1:37:5f:a9:a6:ea:ff:fe:22:13:
         58:ea:40:08:d1:64:b2:97:f6:5b:88:f9:4b:15:7c:86:82:14:
         45:e9:3e:bb
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUftt+Qldfa14EZq0rvDppXpjE37QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2
QzhBMUQ4RTAeFw0yMzExMjQwNDAxNDhaFw0yNDExMjIwNDA2NDhaMDMxMTAvBgNV
BAMTKDc5NkU2NUQ5RjZENkJGRkEzMzYzOTAxQzhGNDI0NEMwMDgzMzFFNDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+heK8QrGPzxUt0yXQdGGdkFkf
y8ZpSY9epWtyaoHjzfjq9gOeeqTQVWKKyjj3Nu9lWie2fBRoRuwl0ea+zNXpoXzb
BSWHcPjIF5MV4J5fDYqWYdqwK1WI+yLGMr+ZE/kVVnRrAXuvU/dhexNpspjXmZL+
ip1uAl8jZzs4bCc8nJ/M1j+pTt12esd3F9xhLk8hPx8/JXDxVBTDbiE4PBh0wHBA
c9eLpB80uiNiQYuUBHxkW4C3VWG+M7MNEHkIae5/ni86g4WkhSOJf0tTcyAQKYFM
knm8nE9iL2wP3JIFdLt3g6aMKlkgnFC/eIypcshoXgi0ny9zu4l50paqbcLbAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUeW5l2fbWv/ozY5Acj0JEwAgzHkkwHwYDVR0j
BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1
MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB
MUQ4RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h
ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMzJlMzEzMzM0MmUzMjMzMzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM4MzAzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy4bqMA0GCSqG
SIb3DQEBCwUAA4IBAQCq/Nfe4fOrZRdtqNUK5y9bdaOi7RMELTEg7I65LHlqtTN4
LYgDJglppcOZH0RrO3zUJubxcoAqyhtvPfDi9HXQVTxj8L61DWCEpgtJ2bHkiOGv
HILqw36QYziuWsvi4ub+1OV9HqudHusD+N+HOIt21cap/xinCgalVX9nBllpga7P
hkrDjgBxQoiM7HVqzJNlh8yrsvEfbFJEO+fqSUc2WEYvDEJ1MkjH12Cd2IMVLWNP
iCRbRNpMUJD1X1YRHhwM3ThSByqeJSbpAWuYbQrBqkPp+Kj9RpULOBIxK8utxrE3
X6mm6v/+IhNY6kAI0WSyl/ZbiPlLFXyGghRF6T67
-----END CERTIFICATE-----
Generated at Sun Apr 28 15:44:29 2024 by rpki-client on console-fra.rpki-client.org