Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3230322e36312e3130302e302f32332d3234203d3e203435373836.roa
File:                     3230322e36312e3130302e302f32332d3234203d3e203435373836.roa (raw, json)
Hash identifier:          xJAJFT5sBGdAPYOIVpMxfAlUbXVUYeTheje3gaRysFo=
Subject key identifier:   E7:00:76:ED:06:B4:DD:D2:15:59:1C:C8:5D:89:12:CD:08:FB:4B:5C
Certificate issuer:       /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
Certificate serial:       132F3272B52FC01C7E738920E336995450072B47
Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3230322e36312e3130302e302f32332d3234203d3e203435373836.roa
Signing time:             Mon 31 Jul 2023 00:06:15 +0000
ROA not before:           Mon 31 Jul 2023 00:01:15 +0000
ROA not after:            Mon 29 Jul 2024 00:06:15 +0000
asID:                     45786
IP address blocks:        202.61.100.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl
                          rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 17 May 2024 15:18:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2f:32:72:b5:2f:c0:1c:7e:73:89:20:e3:36:99:54:50:07:2b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B
        Validity
            Not Before: Jul 31 00:01:15 2023 GMT
            Not After : Jul 29 00:06:15 2024 GMT
        Subject: CN=E70076ED06B4DDD215591CC85D8912CD08FB4B5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d3:0f:6d:85:f1:68:58:97:31:15:dd:09:09:
                    af:ec:a3:16:f1:c8:4e:0b:52:bc:9c:02:00:b3:d3:
                    9d:d7:1b:4e:55:82:b3:f7:e5:9b:2d:15:ff:15:7e:
                    dd:9e:c8:6b:f8:1f:30:ec:7d:c8:8a:f1:ce:a7:18:
                    2f:34:39:13:94:c4:cf:0f:3e:ba:24:04:5a:21:32:
                    b2:1f:3a:45:0a:f6:ec:d4:64:5d:a1:e0:08:9c:9a:
                    d7:fb:6b:f6:ae:d6:96:42:e8:39:64:22:b0:8a:8e:
                    c2:e1:12:9e:35:14:af:06:fc:b6:c1:d6:5b:78:6a:
                    f6:fc:12:fe:d1:eb:9d:b9:ba:29:45:39:70:87:5e:
                    13:7c:a0:4e:45:00:1a:cc:a9:97:c7:20:d3:b7:6a:
                    75:db:60:74:54:ea:79:81:08:8a:58:f8:fa:a5:3e:
                    e3:9c:4d:25:77:c2:9b:20:28:89:2a:93:8f:13:61:
                    90:a8:89:8c:0b:69:f4:61:8c:84:14:c4:18:13:89:
                    cc:4d:39:97:9b:71:d2:26:b6:4a:a9:9e:27:dd:fa:
                    71:a0:b9:c4:ec:fb:3f:be:86:5b:aa:26:30:31:03:
                    ab:cc:12:b4:db:f6:77:57:30:31:02:a9:f4:2c:9b:
                    5a:04:dc:fa:46:88:e9:a5:b8:b1:9f:05:2f:31:44:
                    05:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:00:76:ED:06:B4:DD:D2:15:59:1C:C8:5D:89:12:CD:08:FB:4B:5C
            X509v3 Authority Key Identifier:
                keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/3230322e36312e3130302e302f32332d3234203d3e203435373836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.61.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:5d:03:ab:3a:e7:ce:92:c0:13:bd:bd:46:24:33:1a:16:f2:
         4c:60:2a:76:d3:5b:1f:d0:57:9e:51:42:38:62:3a:8b:14:16:
         cd:7e:b9:f0:40:97:a2:62:7a:7f:b1:5c:96:45:b5:4b:e1:d2:
         ff:41:01:aa:68:e2:d5:b8:41:67:ff:a5:34:a6:40:77:d9:fb:
         82:c9:6c:69:6a:c8:97:c9:71:9d:81:54:26:22:ad:96:a5:06:
         67:f8:07:ad:22:ef:67:6e:af:bb:4d:61:97:4b:08:a9:ec:de:
         b0:f2:7e:a9:e7:fb:e9:d7:76:a3:71:cd:18:9e:0b:53:58:45:
         85:9a:d4:43:06:71:10:c3:59:a6:4b:96:af:be:99:ca:fe:e5:
         56:1a:4f:ba:48:70:55:96:aa:ea:ef:09:1f:0d:a9:a8:d6:df:
         45:5c:b7:3c:fe:f8:74:ee:c9:56:88:d9:89:7b:2e:2a:e7:0c:
         81:6e:31:7d:31:ce:66:6d:6b:19:14:c0:f3:8d:e0:bc:94:40:
         9e:39:4a:2f:d7:0d:c8:e0:95:14:2b:69:71:e8:5b:8e:d4:24:
         10:a5:53:44:cb:c4:f4:da:5a:31:52:25:5b:cb:94:4b:5f:85:
         c7:44:02:a0:8f:8f:8c:75:25:6c:bf:cd:1c:33:58:5c:d7:64:
         ed:e7:fb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 14 16:58:50 2024 by rpki-client on console-fra.rpki-client.org