Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32372e302f32342d3234203d3e20313430343639.roa
File:                     3230322e35372e32372e302f32342d3234203d3e20313430343639.roa (raw, json)
Hash identifier:          DBukz6S8F4E+SIpJGzmMi/09xJMB2awXahKvpu68Xfk=
Subject key identifier:   8E:79:56:4D:D8:78:60:79:F6:2C:C5:5B:2C:C8:EB:3C:89:B7:39:46
Certificate issuer:       /CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Certificate serial:       4365882E5D7813ED7FF65E455C036AACB166B0A0
Authority key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32372e302f32342d3234203d3e20313430343639.roa
Signing time:             Thu 16 Nov 2023 11:00:00 +0000
ROA not before:           Thu 16 Nov 2023 10:55:00 +0000
ROA not after:            Thu 14 Nov 2024 11:00:00 +0000
asID:                     140469
IP address blocks:        202.57.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl
                          rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 02:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:65:88:2e:5d:78:13:ed:7f:f6:5e:45:5c:03:6a:ac:b1:66:b0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F969EE9B0838D22156118A888B81BF27B859BD5
        Validity
            Not Before: Nov 16 10:55:00 2023 GMT
            Not After : Nov 14 11:00:00 2024 GMT
        Subject: CN=8E79564DD8786079F62CC55B2CC8EB3C89B73946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:43:09:96:15:16:d3:1a:eb:ca:42:61:6a:13:
                    9f:2a:f0:f2:71:e0:bd:a6:df:cf:9e:63:c4:21:7b:
                    4d:4e:20:ab:30:0c:4c:d8:a9:e5:72:a3:a5:57:17:
                    0a:e0:55:19:10:f5:53:42:20:34:17:87:52:7a:2b:
                    56:3e:0c:cd:71:bc:33:5c:67:37:4d:26:c3:17:b5:
                    c4:ca:b2:c3:62:82:4e:a1:22:83:e2:0a:05:0d:b0:
                    2e:67:3f:5e:cb:86:9f:8a:4e:59:e5:87:19:d9:11:
                    a5:9e:ac:82:f0:64:d6:00:8d:97:d9:9a:e8:39:dd:
                    3a:ad:ee:49:0b:f2:02:5d:e7:9d:ba:33:0c:51:7a:
                    62:d2:6a:3a:c0:d2:7b:a0:c7:5f:fc:60:d1:9f:cf:
                    f6:a8:ed:f8:ab:c4:46:40:3a:dc:1e:7f:dc:09:6b:
                    dd:86:32:57:56:b0:e2:b3:88:1b:bd:59:64:f5:3c:
                    28:7a:c0:79:53:48:44:3d:94:b9:1a:d8:c6:20:f2:
                    2f:75:f7:7a:4f:75:6b:35:b1:57:0a:ee:72:b9:ee:
                    f5:87:11:8f:d9:9f:69:79:2a:30:1a:a7:72:55:f5:
                    8c:7a:df:64:dc:43:64:81:b4:44:e7:e5:5c:38:13:
                    7d:22:d8:7b:fc:6d:6b:0b:a4:a8:b7:66:33:59:5d:
                    c7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:79:56:4D:D8:78:60:79:F6:2C:C5:5B:2C:C8:EB:3C:89:B7:39:46
            X509v3 Authority Key Identifier:
                keyid:1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32372e302f32342d3234203d3e20313430343639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.57.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:95:94:09:71:6a:6b:c6:79:27:4b:4b:ae:69:3c:72:e7:44:
         90:17:13:54:ba:47:26:dc:69:3c:cd:8f:4a:02:7d:e3:ba:6b:
         cb:cc:12:67:45:0a:b8:98:5e:fc:27:7c:12:1e:7d:be:6f:4e:
         e0:cb:9d:d7:9e:f4:ea:87:c1:ea:2e:97:69:f5:1f:3e:2f:77:
         cd:95:01:98:d1:4b:c8:83:0e:39:2e:47:4b:18:44:f6:e6:23:
         75:e7:bd:9c:01:2c:15:bd:70:c5:ef:69:65:fc:7c:03:57:94:
         f3:10:72:13:52:56:c1:5f:9f:a2:45:62:c5:de:37:e4:cc:10:
         41:28:17:1d:09:09:00:76:da:4d:9b:c1:ce:89:08:01:32:13:
         67:9b:78:2a:b1:c1:e4:fa:0d:e6:69:f7:70:6c:bc:bc:da:27:
         36:c9:66:28:44:ed:41:44:a9:20:05:d5:fa:38:71:d8:fa:a2:
         e0:bd:4c:3e:3d:a5:59:cf:f1:a3:a8:4f:2e:b0:93:a8:3b:e8:
         d5:2f:de:42:fb:c3:d5:c7:e0:f3:ad:41:fc:1e:2e:07:28:a9:
         74:bf:56:a2:da:6c:83:c6:b2:e8:57:95:11:b1:74:26:94:24:
         fc:a9:4a:66:90:44:32:51:1c:e2:e6:26:4b:3e:54:84:c6:9e:
         55:91:ce:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 02:49:52 2024 by rpki-client on console-fra.rpki-client.org