Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/3230332e3131342e3232362e302f32342d3234203d3e203435373033.roa
File:                     3230332e3131342e3232362e302f32342d3234203d3e203435373033.roa (raw, json)
Hash identifier:          U/HTYYLCgyLTnv1DsyLDEIBZhQdvxaSNhePZXOe+aNE=
Subject key identifier:   0D:D1:40:0D:09:A4:36:95:7E:10:CE:59:96:BA:10:DF:BF:BD:D7:66
Certificate issuer:       /CN=B7959E04EF090801395CE53E099D09F7AF2EF81B
Certificate serial:       7A863330E51D69764A32D66A7278A091D916A4E3
Authority key identifier: B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/3230332e3131342e3232362e302f32342d3234203d3e203435373033.roa
Signing time:             Fri 14 Jul 2023 04:00:00 +0000
ROA not before:           Fri 14 Jul 2023 03:55:00 +0000
ROA not after:            Fri 12 Jul 2024 04:00:00 +0000
asID:                     45703
IP address blocks:        203.114.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl
                          rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 08:12:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:86:33:30:e5:1d:69:76:4a:32:d6:6a:72:78:a0:91:d9:16:a4:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7959E04EF090801395CE53E099D09F7AF2EF81B
        Validity
            Not Before: Jul 14 03:55:00 2023 GMT
            Not After : Jul 12 04:00:00 2024 GMT
        Subject: CN=0DD1400D09A436957E10CE5996BA10DFBFBDD766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:db:72:3b:70:6f:a5:bb:42:fa:29:89:7f:5b:
                    a6:9a:9f:9e:80:57:2a:f8:cf:2c:24:33:3e:75:9d:
                    a4:92:46:a6:5a:e6:aa:ca:38:40:73:23:e1:27:6a:
                    c4:44:d4:5a:5d:ec:be:c0:dd:58:b3:f1:34:df:ab:
                    8a:f6:27:67:ca:1b:1e:a7:eb:bb:ae:7d:52:8b:2b:
                    da:84:fa:d6:76:92:30:47:84:57:d2:0a:8a:36:43:
                    c3:e6:eb:5d:b9:76:04:82:59:4b:0c:4b:b7:87:de:
                    2f:a8:99:16:fd:5e:c7:fb:fc:8d:be:94:c2:c0:88:
                    f8:ab:b3:b2:26:ed:39:e1:1e:04:d9:f4:64:b6:af:
                    0f:a3:a1:a5:bf:92:9d:49:29:22:c1:a0:12:26:a0:
                    63:7b:af:85:6e:6c:73:48:5b:8d:66:66:ca:16:4e:
                    72:10:21:4e:6d:6a:9a:68:98:68:19:83:13:a4:98:
                    35:2e:b6:04:a3:a2:fd:8f:9b:3f:61:bd:db:ee:be:
                    b9:f6:81:fb:ea:9e:af:5f:6f:e2:70:00:6f:4a:c9:
                    89:3b:a6:ff:4d:07:1a:1a:50:0e:24:fe:e1:5d:69:
                    b3:30:86:3d:7f:f6:15:b4:21:fe:79:3b:e4:84:c5:
                    7b:88:f4:de:16:c7:b6:8e:8b:35:8d:8b:e3:bb:9f:
                    a4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D1:40:0D:09:A4:36:95:7E:10:CE:59:96:BA:10:DF:BF:BD:D7:66
            X509v3 Authority Key Identifier:
                keyid:B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/3230332e3131342e3232362e302f32342d3234203d3e203435373033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.114.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:6b:c4:df:de:32:2d:0f:dc:6c:f8:2a:40:2c:eb:ad:68:ab:
         d1:35:2d:dd:04:b7:79:3b:31:90:c3:c0:99:ef:98:b7:90:c1:
         04:3b:96:d6:03:98:dd:39:a9:b8:e9:57:15:ed:50:f3:e8:05:
         38:8a:21:e7:c5:15:73:32:db:67:b5:45:14:a6:72:6c:6f:0d:
         04:56:73:29:c9:08:d9:72:83:e8:7a:85:ab:72:c9:73:b1:e7:
         ae:1c:72:44:4d:93:3b:95:b7:5d:da:4e:4d:ca:e2:84:97:74:
         e2:ff:4b:dc:95:0f:a7:1d:65:fa:ee:39:7b:c7:f6:d8:99:d8:
         d4:14:1b:63:39:f3:35:31:34:26:d7:2c:45:7f:5f:98:55:11:
         eb:d4:94:46:79:fa:bf:30:ad:81:d8:28:59:ac:3b:0c:04:77:
         39:c4:6b:03:6e:55:86:84:80:6a:95:23:d7:d6:ac:b3:5d:31:
         14:73:23:58:6a:d5:67:5c:9a:ec:c6:ed:27:a0:fe:a8:7b:29:
         38:69:2e:d3:ff:cc:d5:90:68:c2:f0:af:3d:9b:59:9a:5c:ac:
         fd:91:e9:ef:40:f7:bb:ff:cf:50:24:ad:d2:30:05:77:e9:9a:
         75:55:4e:ec:62:ad:03:c0:de:84:f2:d9:d0:8c:95:29:d2:28:
         33:73:d3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 07:07:10 2024 by rpki-client on console-ams.rpki-client.org