Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32362e302f32342d3234203d3e20313430343639.roa
File:                     3230322e35372e32362e302f32342d3234203d3e20313430343639.roa (raw, json)
Hash identifier:          zzH66NV40eulXXh5IAF/2gVsu4+dBTyq1EWe4ftH/hU=
Subject key identifier:   42:A4:80:BA:4D:51:84:38:C4:B9:F3:07:5D:6D:6B:CA:63:28:80:47
Certificate issuer:       /CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Certificate serial:       2B44D22A8E9FCE32D0460FAA7A3E0A1CA6FB8D79
Authority key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32362e302f32342d3234203d3e20313430343639.roa
Signing time:             Mon 04 Dec 2023 15:00:00 +0000
ROA not before:           Mon 04 Dec 2023 14:55:00 +0000
ROA not after:            Mon 02 Dec 2024 15:00:00 +0000
asID:                     140469
IP address blocks:        202.57.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl
                          rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 18 Jun 2024 08:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:44:d2:2a:8e:9f:ce:32:d0:46:0f:aa:7a:3e:0a:1c:a6:fb:8d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F969EE9B0838D22156118A888B81BF27B859BD5
        Validity
            Not Before: Dec  4 14:55:00 2023 GMT
            Not After : Dec  2 15:00:00 2024 GMT
        Subject: CN=42A480BA4D518438C4B9F3075D6D6BCA63288047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:50:6e:61:ba:bb:44:eb:bc:97:e1:7b:99:b1:
                    f6:a2:fe:dd:9a:8c:21:a1:98:9c:0a:b2:7a:f0:b8:
                    f1:e8:a1:5b:54:b9:f5:f7:cd:ba:41:4f:3f:44:a2:
                    aa:d4:45:14:5d:95:cb:ca:0f:20:76:f9:dd:1e:18:
                    f1:04:19:b4:37:de:2f:24:f9:75:9f:07:e2:33:81:
                    39:bf:36:39:3a:d7:bf:0d:3b:43:49:ce:f3:78:2b:
                    ee:9e:8a:ed:9e:19:ee:71:af:d9:19:d9:22:6a:a6:
                    e9:6a:4d:45:d2:66:8d:c0:9f:57:d3:ee:ca:9b:f3:
                    08:78:b8:4e:cd:f9:a9:c9:2c:5f:8f:fd:26:33:a1:
                    18:ec:90:19:76:c3:d2:4d:42:4a:c9:aa:bb:55:86:
                    38:0a:49:e0:4c:55:89:03:92:19:80:6b:1c:b3:db:
                    38:76:47:37:fc:c4:c0:a1:53:33:aa:a8:58:ba:95:
                    43:a4:b8:cb:d4:3b:26:a6:c3:c4:df:35:15:f8:66:
                    4b:33:85:8b:23:be:45:26:15:39:2a:6f:59:f6:d9:
                    9b:c3:d2:bc:db:0c:1c:19:23:5d:00:1f:5f:81:aa:
                    3f:42:d2:49:67:d1:b7:93:16:3c:2d:cb:4e:78:69:
                    ed:e2:d2:0e:e9:e8:99:b8:d3:47:e4:12:66:dd:d8:
                    97:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A4:80:BA:4D:51:84:38:C4:B9:F3:07:5D:6D:6B:CA:63:28:80:47
            X509v3 Authority Key Identifier:
                keyid:1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32362e302f32342d3234203d3e20313430343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.57.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:29:57:b9:44:43:a7:95:b2:37:20:0b:be:b8:5d:4f:28:b3:
         2a:03:5d:a3:9c:ca:9d:c6:86:53:48:51:ad:12:29:65:cf:bc:
         39:3d:8d:1e:9e:48:97:7b:5f:89:d8:d0:2c:a8:89:72:69:0f:
         db:da:19:d1:a3:79:f7:bc:3e:33:7e:6e:f2:a4:bc:69:53:df:
         c4:d4:e6:08:94:7f:83:69:a4:23:7f:4a:67:cc:ea:92:21:af:
         81:90:07:09:05:3d:6a:49:e3:30:75:10:ba:2a:34:fc:24:f4:
         22:8f:52:e7:5d:fb:fe:84:ed:ec:71:ef:39:8d:11:dc:19:3a:
         21:56:8c:12:00:44:a8:d1:e6:b9:16:b7:4b:a3:39:14:dc:08:
         bb:6e:ef:e4:88:04:9e:0d:ae:23:9e:d6:59:2a:4b:a5:98:68:
         90:1f:90:94:85:5a:6b:1c:bb:10:67:a4:c9:74:f0:a9:5b:b4:
         fe:98:45:79:af:7d:0b:41:6b:dd:13:98:2a:af:fe:08:79:c1:
         5b:06:73:3d:8a:d3:bb:87:12:3c:fa:33:ca:1f:b9:23:43:5e:
         b6:f3:da:17:a6:5a:81:82:5b:76:46:a7:44:54:37:25:e4:ec:
         11:44:5a:6b:77:66:63:f9:86:44:f5:37:f9:87:c1:b0:95:14:
         1e:2f:ed:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 13:30:38 2024 by rpki-client on console-ams.rpki-client.org