Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e38342e302f32322d3234203d3e20313335343738.roa
File:                     3130312e3132382e38342e302f32322d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          wkkUYCAOhCf75QrsSOVxoA5CIwOWiUr7O3zQkETw7VA=
Subject key identifier:   3B:0E:87:26:78:70:20:84:8A:AD:49:37:E6:A7:DC:C2:15:AA:40:23
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       6101DDE78D58B8CC9A4CCF31EC0CF6A06ADB855D
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e38342e302f32322d3234203d3e20313335343738.roa
Signing time:             Mon 31 Jul 2023 00:02:26 +0000
ROA not before:           Sun 30 Jul 2023 23:57:26 +0000
ROA not after:            Mon 29 Jul 2024 00:02:26 +0000
asID:                     135478
IP address blocks:        101.128.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
                          rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 01:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:01:dd:e7:8d:58:b8:cc:9a:4c:cf:31:ec:0c:f6:a0:6a:db:85:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul 30 23:57:26 2023 GMT
            Not After : Jul 29 00:02:26 2024 GMT
        Subject: CN=3B0E8726787020848AAD4937E6A7DCC215AA4023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bf:e4:1c:5f:bd:fd:fd:b0:fb:17:f1:2b:00:
                    a2:94:f9:95:61:99:27:95:2a:5a:de:3e:70:1e:06:
                    01:63:36:e7:b6:49:70:3b:7b:a2:af:98:dd:c0:1d:
                    b4:db:1a:a9:b8:69:e2:5f:b9:97:2e:d0:26:c3:50:
                    2a:e1:ef:61:b1:c5:9a:59:aa:44:91:40:8f:a9:87:
                    67:ea:93:5a:8d:2d:5e:e3:a9:88:13:b3:22:f7:40:
                    2b:73:6e:bb:d0:e8:87:d6:f0:5b:94:e3:d6:1b:ae:
                    b1:8f:11:80:55:2d:3c:1e:bf:56:29:09:db:60:44:
                    0d:43:14:e0:06:b4:30:7e:e5:6c:4b:48:da:25:b4:
                    17:58:d2:7c:a6:82:74:75:17:a2:b4:fa:eb:5b:d5:
                    c4:2f:48:2d:21:35:42:b9:43:2b:c1:e4:f4:53:1b:
                    f3:79:7e:d2:e7:a4:a7:b3:f3:b1:44:58:4d:19:cc:
                    eb:bc:29:0c:29:85:d0:bc:19:6e:46:78:5e:ff:f6:
                    15:4c:e6:69:f2:08:2d:24:41:84:e7:0d:85:11:09:
                    c6:a4:cc:40:32:a1:3b:0d:78:32:93:b9:89:5c:a9:
                    e0:9a:5a:a0:8e:06:ec:1a:0b:3a:cb:96:2c:c7:c3:
                    cf:80:33:d9:9f:89:c0:02:5a:13:38:5d:92:7f:be:
                    86:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0E:87:26:78:70:20:84:8A:AD:49:37:E6:A7:DC:C2:15:AA:40:23
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e3132382e38342e302f32322d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.128.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:9d:e0:b9:de:3b:59:6a:b9:8c:f5:d3:fd:60:69:67:d7:c1:
         d8:61:62:4e:84:03:a8:98:45:72:83:3b:65:ca:de:87:d3:f0:
         2a:9a:1b:40:07:f7:ef:6b:ec:eb:11:e8:01:6d:0e:fd:28:f9:
         4a:a8:30:65:d3:45:36:9c:17:81:a2:06:5d:a0:34:e7:a9:f0:
         a7:2e:91:94:c2:26:0b:68:fc:32:17:e8:7d:cd:00:b3:57:3e:
         54:e7:72:9a:58:17:a5:fe:41:7d:e7:f0:ef:c7:f6:a0:3d:e4:
         9c:7b:20:22:03:4a:dc:50:92:9b:b6:b2:a7:15:fd:ce:0b:8a:
         f5:bc:08:7f:88:bb:64:fc:7d:12:da:21:a3:b6:95:b5:68:5a:
         11:96:b5:02:7b:9b:b7:0d:91:e6:ae:fa:60:d7:d4:5c:f0:66:
         08:84:73:4a:d2:90:65:4b:3b:fc:52:97:d0:b6:3f:ec:82:36:
         51:5e:2a:67:00:ca:12:db:f5:67:95:70:44:31:12:c0:d2:b4:
         3e:34:c5:a7:25:33:5e:83:90:cb:cd:14:ba:3c:1d:ca:6f:b5:
         22:69:eb:f2:dd:f7:58:d9:63:45:0c:53:ed:8e:28:e2:e0:6d:
         9c:c5:37:d1:fb:7f:cb:08:3e:05:ec:44:bd:c1:43:fd:43:fc:
         cd:36:ea:30
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUYQHd541YuMyaTM8x7Az2oGrbhV0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEz
N0Q2OTk4QTAeFw0yMzA3MzAyMzU3MjZaFw0yNDA3MjkwMDAyMjZaMDMxMTAvBgNV
BAMTKDNCMEU4NzI2Nzg3MDIwODQ4QUFENDkzN0U2QTdEQ0MyMTVBQTQwMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCv+QcX739/bD7F/ErAKKU+ZVh
mSeVKlrePnAeBgFjNue2SXA7e6KvmN3AHbTbGqm4aeJfuZcu0CbDUCrh72GxxZpZ
qkSRQI+ph2fqk1qNLV7jqYgTsyL3QCtzbrvQ6IfW8FuU49YbrrGPEYBVLTwev1Yp
CdtgRA1DFOAGtDB+5WxLSNoltBdY0nymgnR1F6K0+utb1cQvSC0hNUK5QyvB5PRT
G/N5ftLnpKez87FEWE0ZzOu8KQwphdC8GW5GeF7/9hVM5mnyCC0kQYTnDYURCcak
zEAyoTsNeDKTuYlcqeCaWqCOBuwaCzrLlizHw8+AM9mficACWhM4XZJ/voaLAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUOw6HJnhwIISKrUk35qfcwhWqQCMwHwYDVR0j
BBgwFoAUfizzRtXehA3A7pRMkY7cUTfWmYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YTcwMjcyNi1iMmM2LTQ2ZmMtODI5Ny0yZGJkZWM2ZDZkNWQvMC83RTJDRjM0NkQ1
REU4NDBEQzBFRTk0NEM5MThFREM1MTM3RDY5OThBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0UyQ0YzNDZENURFODQwREMwRUU5NDRDOTE4RURDNTEzN0Q2
OTk4QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhNzAyNzI2LWIyYzYtNDZmYy04
Mjk3LTJkYmRlYzZkNmQ1ZC8wLzMxMzAzMTJlMzEzMjM4MmUzODM0MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZYBUMA0GCSqG
SIb3DQEBCwUAA4IBAQA5neC53jtZarmM9dP9YGln18HYYWJOhAOomEVygztlyt6H
0/AqmhtAB/fva+zrEegBbQ79KPlKqDBl00U2nBeBogZdoDTnqfCnLpGUwiYLaPwy
F+h9zQCzVz5U53KaWBel/kF95/Dvx/agPeSceyAiA0rcUJKbtrKnFf3OC4r1vAh/
iLtk/H0S2iGjtpW1aFoRlrUCe5u3DZHmrvpg19Rc8GYIhHNK0pBlSzv8UpfQtj/s
gjZRXipnAMoS2/VnlXBEMRLA0rQ+NMWnJTNeg5DLzRS6PB3Kb7Uiaevy3fdY2WNF
DFPtjiji4G2cxTfR+3/LCD4F7ES9wUP9Q/zNNuow
-----END CERTIFICATE-----
Generated at Tue Apr 30 21:57:49 2024 by rpki-client on console-ams.rpki-client.org