Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3230322e3135382e302e302f31372d3234203d3e2034373837.roa
File:                     3230322e3135382e302e302f31372d3234203d3e2034373837.roa (raw, json)
Hash identifier:          BVi76J6kODdY+lokm5BvDgOvZkimvUdaKpWcFmRdUdE=
Subject key identifier:   07:22:A0:99:A5:C5:B0:A6:40:98:44:6D:02:F2:4C:6D:B4:4A:EC:F3
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       48F04640C0AC05BF18F7C0779A66BA96806E8256
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3230322e3135382e302e302f31372d3234203d3e2034373837.roa
Signing time:             Mon 31 Jul 2023 00:02:27 +0000
ROA not before:           Sun 30 Jul 2023 23:57:27 +0000
ROA not after:            Mon 29 Jul 2024 00:02:27 +0000
asID:                     4787
IP address blocks:        202.158.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
                          rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:f0:46:40:c0:ac:05:bf:18:f7:c0:77:9a:66:ba:96:80:6e:82:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul 30 23:57:27 2023 GMT
            Not After : Jul 29 00:02:27 2024 GMT
        Subject: CN=0722A099A5C5B0A64098446D02F24C6DB44AECF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cd:70:da:28:d8:43:6f:c6:e1:2e:b2:4f:a8:
                    d4:38:ca:98:b1:c8:9e:46:88:cc:be:eb:88:c2:77:
                    da:51:4d:c2:91:46:17:0f:80:38:e2:e1:1e:df:96:
                    a6:25:ba:09:1c:db:24:d4:8b:9e:ce:22:31:1d:db:
                    37:ee:a1:f3:16:9b:6f:a0:b8:af:74:ff:ed:b0:2e:
                    e0:dd:0f:c7:1f:6e:b7:a2:8a:4a:5e:41:77:8c:6e:
                    9c:8c:d3:66:f6:47:2b:ce:4c:77:06:26:df:39:71:
                    4e:d9:fb:ed:01:d7:d6:2d:11:8e:f4:94:67:d4:b3:
                    0f:05:c2:cb:c4:76:9f:fa:61:30:01:e2:2f:df:69:
                    cb:99:11:30:6f:3b:2e:42:1b:0c:0b:88:89:a4:fd:
                    97:34:d7:c1:f3:65:07:54:ba:1b:e1:ae:c7:aa:bc:
                    6e:23:5c:8b:32:f9:d4:ac:3a:1b:4f:1c:f6:a2:b4:
                    d0:07:a3:e2:77:47:ec:df:7b:bc:22:0c:6d:07:1e:
                    d7:c2:95:30:2e:b8:b0:a3:85:5e:33:85:10:5e:be:
                    41:83:44:b3:ed:85:90:aa:e3:a2:70:2b:37:f0:30:
                    b9:87:66:b7:f9:e5:83:b0:23:80:a2:42:cc:3b:ba:
                    bd:33:f4:d2:e4:2e:0f:27:64:23:8b:4e:1c:ab:bd:
                    9e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:22:A0:99:A5:C5:B0:A6:40:98:44:6D:02:F2:4C:6D:B4:4A:EC:F3
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3230322e3135382e302e302f31372d3234203d3e2034373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.158.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         2c:fc:c6:24:04:ab:98:91:96:a8:47:b8:98:0c:69:77:97:1e:
         25:20:20:63:fc:09:3c:fe:e7:42:41:21:2f:e0:02:06:f0:f3:
         c8:d5:bf:08:73:a6:85:b8:cc:0a:47:65:32:fa:ae:76:da:dc:
         32:dd:0d:75:c8:bb:78:ff:83:9c:ee:37:2a:e5:28:7c:e9:8b:
         67:d7:61:cb:ac:74:df:24:f8:87:f1:18:99:26:89:cd:43:94:
         13:5e:14:3b:4b:6d:c8:c4:aa:bf:0f:50:2c:f1:11:8c:86:f7:
         83:9a:ae:39:cf:7e:0d:77:91:2e:34:92:1b:0c:6b:fa:44:86:
         73:b2:1a:fe:d6:e9:0f:a6:40:eb:a0:79:6d:9a:5f:be:a5:7d:
         a7:fc:72:1a:60:04:52:94:f1:dd:62:3d:0c:00:9d:dd:4f:70:
         f1:01:ab:cd:64:ab:2e:4e:89:89:69:02:f7:74:ae:eb:4a:bb:
         0a:c7:10:f8:2e:ff:78:df:10:4b:f3:b9:42:7d:80:3e:0e:0e:
         25:6e:91:d1:67:15:44:1d:01:15:90:c4:b4:ac:80:2d:ea:c0:
         0a:f5:46:16:f7:79:fc:e0:ea:f1:6c:f4:dd:09:db:01:99:4f:
         aa:b1:c7:53:42:0f:03:4a:89:e8:31:92:ba:3f:ad:8f:23:ac:
         37:9f:bd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:08:35 2024 by rpki-client on console-ams.rpki-client.org