Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233372e302f32342d3234203d3e20313331373735.roa
File:                     3230322e37342e3233372e302f32342d3234203d3e20313331373735.roa (raw, json)
Hash identifier:          fWNR34OWbCLENdJ3Hq9SGTKp+lBfX3lNDNt7ZyQTHrg=
Subject key identifier:   7F:8C:69:0E:65:2E:44:41:C7:5E:50:50:E3:38:0F:64:91:10:95:67
Certificate issuer:       /CN=49CDCA308C289D688C649C2303BECB3ED76B5054
Certificate serial:       03BE15D9FC4C28733A9C0FBFA1ADA3FEA39F02DB
Authority key identifier: 49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233372e302f32342d3234203d3e20313331373735.roa
Signing time:             Mon 31 Jul 2023 00:05:38 +0000
ROA not before:           Mon 31 Jul 2023 00:00:38 +0000
ROA not after:            Mon 29 Jul 2024 00:05:38 +0000
asID:                     131775
IP address blocks:        202.74.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl
                          rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:be:15:d9:fc:4c:28:73:3a:9c:0f:bf:a1:ad:a3:fe:a3:9f:02:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49CDCA308C289D688C649C2303BECB3ED76B5054
        Validity
            Not Before: Jul 31 00:00:38 2023 GMT
            Not After : Jul 29 00:05:38 2024 GMT
        Subject: CN=7F8C690E652E4441C75E5050E3380F6491109567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e3:d4:78:e5:1a:3a:64:aa:9d:bc:5e:e7:ed:
                    ec:fe:7a:ec:89:bb:19:d2:61:7f:a8:86:66:db:85:
                    4b:49:ab:be:f0:38:fd:d1:eb:f7:43:07:de:e6:73:
                    83:21:d9:18:d2:54:18:28:9f:0a:58:62:47:24:a0:
                    97:9d:0b:f9:f9:03:1f:c8:5b:c1:c0:9b:19:b8:d0:
                    98:d7:64:f3:86:46:c0:37:1e:26:e3:f7:84:41:67:
                    cb:c5:ed:ac:00:15:28:dc:b1:f4:30:37:53:80:65:
                    6f:ee:7f:33:7c:b4:ee:4f:5f:d5:51:03:e2:61:88:
                    29:f8:72:f6:88:27:b6:eb:59:12:9d:af:e6:37:c6:
                    ab:0f:06:b8:6d:66:25:bd:d9:72:30:c3:e0:92:b7:
                    87:13:82:50:85:03:6c:29:a8:a6:eb:57:87:6c:35:
                    f9:1a:6a:1e:33:c1:ff:37:cc:92:9b:db:68:4a:84:
                    20:98:80:6d:83:6d:4f:7a:53:3e:d5:94:2f:68:a7:
                    65:ba:58:a0:1f:01:42:98:87:c5:61:66:8a:62:92:
                    4d:39:07:91:6d:cb:5d:47:0c:3d:7a:9b:dc:f1:59:
                    fb:44:10:2d:66:d9:77:76:a7:4c:6b:56:79:18:1f:
                    38:63:5a:56:a7:35:d5:41:36:df:7b:e6:dc:ee:86:
                    a6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8C:69:0E:65:2E:44:41:C7:5E:50:50:E3:38:0F:64:91:10:95:67
            X509v3 Authority Key Identifier:
                keyid:49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3230322e37342e3233372e302f32342d3234203d3e20313331373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.74.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:6a:2e:a7:2f:33:91:4b:ad:d4:47:20:7e:72:d9:37:3f:0b:
         01:05:cc:ed:7f:3a:4f:f5:7d:82:a7:93:4e:08:ad:c3:d8:02:
         5c:e5:f2:fa:aa:36:1e:25:91:e0:0e:18:fb:f7:c7:1e:61:df:
         29:d3:f2:53:af:81:bd:10:38:8a:f9:6e:00:2b:4d:f2:05:37:
         7f:8a:6a:91:1f:3b:91:61:07:45:2f:aa:ea:8d:82:06:08:6f:
         f9:74:e7:c3:06:95:1f:20:f3:64:2d:86:a5:32:a5:be:fc:ef:
         f4:4f:0f:f0:88:e5:bd:62:a0:e8:4a:d6:3e:bb:2b:f6:7a:a7:
         fe:3a:9a:c4:53:77:f8:6d:e7:b7:a1:7a:3e:19:90:bf:e7:e5:
         c9:10:fb:a5:3d:44:9b:aa:89:5e:0e:07:9f:b7:64:89:a9:cf:
         fc:ba:c2:38:de:1c:b5:c4:a6:ba:89:53:5e:1b:c1:a9:4c:1d:
         84:86:28:3c:a4:ea:60:6a:87:a7:06:dd:cb:fd:27:e8:ff:b8:
         53:0d:2c:64:d3:9f:c1:31:26:c7:43:e8:28:93:9d:9c:68:9f:
         4f:75:8a:6a:a5:b4:d2:25:c9:eb:7b:2b:8c:a3:43:90:66:2c:
         d0:7e:2f:e8:c1:28:c8:7e:ac:4c:8b:af:b7:0d:3c:03:70:fb:
         ae:1f:93:72
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUA74V2fxMKHM6nA+/oa2j/qOfAtswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlDRENBMzA4QzI4OUQ2ODhDNjQ5QzIzMDNCRUNCM0VE
NzZCNTA1NDAeFw0yMzA3MzEwMDAwMzhaFw0yNDA3MjkwMDA1MzhaMDMxMTAvBgNV
BAMTKDdGOEM2OTBFNjUyRTQ0NDFDNzVFNTA1MEUzMzgwRjY0OTExMDk1NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF49R45Ro6ZKqdvF7n7ez+euyJ
uxnSYX+ohmbbhUtJq77wOP3R6/dDB97mc4Mh2RjSVBgonwpYYkckoJedC/n5Ax/I
W8HAmxm40JjXZPOGRsA3Hibj94RBZ8vF7awAFSjcsfQwN1OAZW/ufzN8tO5PX9VR
A+JhiCn4cvaIJ7brWRKdr+Y3xqsPBrhtZiW92XIww+CSt4cTglCFA2wpqKbrV4ds
Nfkaah4zwf83zJKb22hKhCCYgG2DbU96Uz7VlC9op2W6WKAfAUKYh8VhZopikk05
B5Fty11HDD16m9zxWftEEC1m2Xd2p0xrVnkYHzhjWlanNdVBNt975tzuhqaRAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUf4xpDmUuREHHXlBQ4zgPZJEQlWcwHwYDVR0j
BBgwFoAUSc3KMIwonWiMZJwjA77LPtdrUFQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZWI5OGNlZC1hZjE4LTRiZmYtYWQ3MS03M2QyYjBjOWQ4YTkvMC80OUNEQ0EzMDhD
Mjg5RDY4OEM2NDlDMjMwM0JFQ0IzRUQ3NkI1MDU0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDlDRENBMzA4QzI4OUQ2ODhDNjQ5QzIzMDNCRUNCM0VENzZC
NTA1NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VlYjk4Y2VkLWFmMTgtNGJmZi1h
ZDcxLTczZDJiMGM5ZDhhOS8wLzMyMzAzMjJlMzczNDJlMzIzMzM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAykrtMA0GCSqG
SIb3DQEBCwUAA4IBAQBxai6nLzORS63URyB+ctk3PwsBBcztfzpP9X2Cp5NOCK3D
2AJc5fL6qjYeJZHgDhj798ceYd8p0/JTr4G9EDiK+W4AK03yBTd/imqRHzuRYQdF
L6rqjYIGCG/5dOfDBpUfIPNkLYalMqW+/O/0Tw/wiOW9YqDoStY+uyv2eqf+OprE
U3f4bee3oXo+GZC/5+XJEPulPUSbqoleDgeft2SJqc/8usI43hy1xKa6iVNeG8Gp
TB2Ehig8pOpgaoenBt3L/Sfo/7hTDSxk05/BMSbHQ+gok52caJ9PdYpqpbTSJcnr
eyuMo0OQZizQfi/owSjIfqxMi6+3DTwDcPuuH5Ny
-----END CERTIFICATE-----
Generated at Fri May 3 06:27:18 2024 by rpki-client on console-fra.rpki-client.org