Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32352e302f32342d3234203d3e20313430343639.roa
File:                     3230322e35372e32352e302f32342d3234203d3e20313430343639.roa (raw, json)
Hash identifier:          iN9muUR+YxZ4o3/CA09QGfaZsZWDJWswkN40Rz3saoA=
Subject key identifier:   B6:EB:E5:91:74:62:7B:75:EC:95:2A:9F:4B:DE:35:C1:A0:99:BF:03
Certificate issuer:       /CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Certificate serial:       54E846D65233F3A8437E4248C3D6A1CC50EB3FBD
Authority key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32352e302f32342d3234203d3e20313430343639.roa
Signing time:             Mon 04 Dec 2023 15:00:01 +0000
ROA not before:           Mon 04 Dec 2023 14:55:01 +0000
ROA not after:            Mon 02 Dec 2024 15:00:01 +0000
asID:                     140469
IP address blocks:        202.57.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl
                          rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 18 Jun 2024 08:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:e8:46:d6:52:33:f3:a8:43:7e:42:48:c3:d6:a1:cc:50:eb:3f:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F969EE9B0838D22156118A888B81BF27B859BD5
        Validity
            Not Before: Dec  4 14:55:01 2023 GMT
            Not After : Dec  2 15:00:01 2024 GMT
        Subject: CN=B6EBE59174627B75EC952A9F4BDE35C1A099BF03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:31:c5:fa:3d:2b:6d:d7:2e:52:dd:57:fc:e7:
                    7e:00:28:a5:bf:fd:ed:94:29:94:46:fd:39:a5:f7:
                    8c:9f:a8:2c:9e:df:05:f8:b4:8e:f6:ef:5c:02:1c:
                    2c:74:63:9f:4c:e6:5d:87:d2:e0:35:2a:f9:16:5d:
                    ab:a9:65:89:83:f3:66:b3:c3:de:97:9a:bf:53:b9:
                    58:10:aa:50:6b:70:b1:a6:c9:6c:b1:58:13:c8:20:
                    85:2b:14:43:bb:c7:ec:be:2f:1a:bb:3e:29:05:28:
                    0d:aa:8a:1e:5b:53:1d:44:9c:65:a7:f2:6c:6e:40:
                    0a:ca:a8:01:27:06:1d:e8:40:04:47:0f:64:42:8e:
                    0c:79:41:c3:a5:95:be:bb:65:c9:ca:3c:3e:12:4a:
                    88:e6:16:f2:04:4e:50:9f:68:13:86:9b:5d:0d:0e:
                    79:3c:ee:56:75:72:65:5f:56:48:74:bf:5f:4c:0f:
                    ae:32:32:23:25:55:e6:0e:6e:41:cc:4f:a9:95:6b:
                    c2:c2:59:17:52:28:b8:11:97:c8:74:d8:21:dd:0a:
                    0c:65:e9:ee:2c:07:27:e4:ba:9a:2f:89:47:ef:99:
                    16:d8:90:f6:f3:8d:e0:d3:9f:7c:70:c8:5c:2d:c7:
                    25:b3:3c:41:42:26:72:0a:97:b0:4c:6f:0f:ed:b9:
                    11:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EB:E5:91:74:62:7B:75:EC:95:2A:9F:4B:DE:35:C1:A0:99:BF:03
            X509v3 Authority Key Identifier:
                keyid:1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32352e302f32342d3234203d3e20313430343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.57.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:c5:6b:2c:fb:e5:43:44:5a:d1:31:19:99:7a:5a:5e:8c:d6:
         53:62:ad:94:b4:08:3a:6b:a3:37:32:60:85:31:85:02:40:40:
         38:c6:44:66:bc:c4:46:bd:d4:e5:b4:be:34:88:f5:37:ff:38:
         b8:bc:d0:a9:28:8e:25:32:2b:3d:19:2f:2e:07:3e:82:32:9b:
         ed:52:b6:1b:a4:26:e8:29:b3:4b:98:fe:9e:53:02:c6:cd:3d:
         73:fd:ab:33:94:48:60:eb:8c:4e:1b:d7:f9:4f:ff:71:c8:ed:
         c5:e1:f9:c0:09:33:b0:5b:3d:c4:94:b2:09:c7:c3:c6:f4:4d:
         28:2e:cf:e5:dd:92:db:8f:78:e6:66:15:42:46:a7:13:4a:c0:
         49:e0:ea:f0:8f:9f:e3:53:0a:b3:bb:5e:d8:36:55:a0:a8:6d:
         f6:31:6b:ce:5e:2a:ae:6f:d2:94:17:ea:c9:c0:30:b8:21:c8:
         2d:cd:b5:3f:84:f8:28:ab:a1:0b:81:9e:30:55:98:ba:f6:83:
         59:8e:df:30:b3:a3:11:d9:b7:07:3b:bd:11:e5:d7:10:32:ea:
         7d:c7:0b:f2:b4:61:fa:96:a6:7b:0d:3c:9c:eb:bd:ec:62:1c:
         9c:a2:7b:14:8e:0c:d3:99:71:75:f5:c8:54:2a:fe:9e:1b:d9:
         13:7b:56:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 12:14:19 2024 by rpki-client on console-fra.rpki-client.org