Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/3230332e3137362e3138302e302f32322d3234203d3e20313331313131.roa
File:                     3230332e3137362e3138302e302f32322d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          k6UnQMLMIDRIqHuNGMjMihPo3OZCXnSVr0QRCcG/GmE=
Subject key identifier:   A9:68:0C:01:9A:7C:FC:FA:29:E8:A8:24:52:BE:51:2C:66:54:F3:34
Certificate issuer:       /CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
Certificate serial:       58A1B28DB69B86D0A23301752C19E27923B1C405
Authority key identifier: C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/3230332e3137362e3138302e302f32322d3234203d3e20313331313131.roa
Signing time:             Tue 16 Jul 2024 17:01:31 +0000
ROA not before:           Tue 16 Jul 2024 16:56:31 +0000
ROA not after:            Tue 15 Jul 2025 17:01:31 +0000
asID:                     131111
IP address blocks:        203.176.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl
                          rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 02:37:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a1:b2:8d:b6:9b:86:d0:a2:33:01:75:2c:19:e2:79:23:b1:c4:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F
        Validity
            Not Before: Jul 16 16:56:31 2024 GMT
            Not After : Jul 15 17:01:31 2025 GMT
        Subject: CN=A9680C019A7CFCFA29E8A82452BE512C6654F334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ec:4a:53:ca:dc:ec:1a:2d:81:17:26:1a:11:
                    3a:e1:c7:f3:1e:21:e1:24:0a:da:e8:b6:c8:ae:69:
                    d1:38:6a:51:02:f4:3a:e8:99:78:f0:96:8d:e3:f7:
                    5e:3a:e5:de:13:ee:e9:cb:a6:b3:18:83:5b:4b:f8:
                    ab:fd:46:e5:63:5a:f3:bb:ea:80:ec:75:0c:55:02:
                    9e:82:2f:fc:37:09:af:c4:76:99:0e:6f:35:dd:3d:
                    3d:ad:33:e1:79:96:0a:ca:8c:28:52:5a:c8:0b:ca:
                    60:89:f6:d8:ad:03:1e:cf:eb:15:6a:f0:e5:35:56:
                    da:94:74:43:6e:0f:4d:64:e0:1e:82:32:44:e9:e4:
                    f5:fa:58:ee:b6:50:46:95:6c:78:74:d2:63:8c:0c:
                    8c:4b:84:6e:cc:ff:90:af:fd:e6:9d:1e:4e:d0:93:
                    cf:79:a5:ef:14:c1:b4:8b:c9:75:5c:2e:0c:20:77:
                    f5:ef:21:52:f3:35:75:39:56:c8:49:24:1a:db:c4:
                    a1:8a:53:1e:4e:0e:c9:c5:b3:6b:2b:9a:32:21:da:
                    db:82:3d:92:49:d8:ed:3d:f4:81:94:ac:e6:2d:5b:
                    6e:e3:5b:a8:91:8c:00:e4:de:e3:d7:1c:3f:1e:81:
                    49:20:d6:17:83:71:75:91:7f:6c:85:6f:90:54:9d:
                    11:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:68:0C:01:9A:7C:FC:FA:29:E8:A8:24:52:BE:51:2C:66:54:F3:34
            X509v3 Authority Key Identifier:
                keyid:C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/3230332e3137362e3138302e302f32322d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.176.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:43:ed:2a:fb:1b:81:23:f8:d7:b3:a0:6f:82:54:93:43:23:
         73:a5:17:fd:c2:5f:7d:36:ea:63:87:b4:52:3f:6a:bf:ce:fe:
         e1:3d:73:76:37:ac:e7:a4:fb:c7:ff:90:fb:3e:98:47:5a:2e:
         6f:08:6a:04:e8:74:c8:09:f6:0d:b5:2f:08:80:d9:47:95:25:
         ff:2b:da:b4:23:9e:d2:1b:8f:06:35:db:7c:24:06:f9:2d:fa:
         1a:9b:40:ce:f9:43:2a:ab:3b:8c:5c:47:3e:e4:1d:1f:7d:39:
         6d:01:ef:04:59:77:ad:ca:70:9f:03:40:e3:12:66:83:cd:b4:
         6f:c4:ea:c1:1a:21:ec:31:4b:90:61:b0:a7:dc:f5:bf:ee:c7:
         1c:db:e5:1a:d6:55:25:be:61:47:c6:6e:92:c6:78:d5:63:e5:
         3e:17:00:bf:5c:e2:9f:ef:e9:ee:28:b6:bb:94:67:60:5d:62:
         a6:4e:42:15:c6:89:61:bc:93:68:07:b5:55:7a:b5:1f:0d:bd:
         f3:a5:61:dc:a5:d7:45:42:d9:7e:e2:00:aa:d5:9f:f5:35:2c:
         72:92:63:a8:73:4d:92:d3:dd:5d:7f:93:7b:9e:d3:ca:ce:6c:
         88:96:20:53:84:fe:ef:5d:b9:bb:47:f4:3d:13:81:9e:76:df:
         b5:30:83:ee
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUWKGyjbabhtCiMwF1LBnieSOxxAUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1QUI4
NzE2REMyRjAeFw0yNDA3MTYxNjU2MzFaFw0yNTA3MTUxNzAxMzFaMDMxMTAvBgNV
BAMTKEE5NjgwQzAxOUE3Q0ZDRkEyOUU4QTgyNDUyQkU1MTJDNjY1NEYzMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt7EpTytzsGi2BFyYaETrhx/Me
IeEkCtrotsiuadE4alEC9DromXjwlo3j91465d4T7unLprMYg1tL+Kv9RuVjWvO7
6oDsdQxVAp6CL/w3Ca/EdpkObzXdPT2tM+F5lgrKjChSWsgLymCJ9titAx7P6xVq
8OU1VtqUdENuD01k4B6CMkTp5PX6WO62UEaVbHh00mOMDIxLhG7M/5Cv/eadHk7Q
k895pe8UwbSLyXVcLgwgd/XvIVLzNXU5VshJJBrbxKGKUx5ODsnFs2srmjIh2tuC
PZJJ2O099IGUrOYtW27jW6iRjADk3uPXHD8egUkg1heDcXWRf2yFb5BUnRHTAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUqWgMAZp8/Pop6KgkUr5RLGZU8zQwHwYDVR0j
BBgwFoAUwa+MmZ6dBtrevDh9eLMFq4cW3C8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
OTIwNWU3Yy1hODgxLTQ4NzMtOTE4OC1lNTIxYjZhZjUyOWMvMC9DMUFGOEM5OTlF
OUQwNkRBREVCQzM4N0Q3OEIzMDVBQjg3MTZEQzJGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1QUI4NzE2
REMyRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5MjA1ZTdjLWE4ODEtNDg3My05
MTg4LWU1MjFiNmFmNTI5Yy8wLzMyMzAzMzJlMzEzNzM2MmUzMTM4MzAyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALLsLQwDQYJ
KoZIhvcNAQELBQADggEBAFtD7Sr7G4Ej+NezoG+CVJNDI3OlF/3CX3026mOHtFI/
ar/O/uE9c3Y3rOek+8f/kPs+mEdaLm8IagTodMgJ9g21LwiA2UeVJf8r2rQjntIb
jwY123wkBvkt+hqbQM75QyqrO4xcRz7kHR99OW0B7wRZd63KcJ8DQOMSZoPNtG/E
6sEaIewxS5BhsKfc9b/uxxzb5RrWVSW+YUfGbpLGeNVj5T4XAL9c4p/v6e4otruU
Z2BdYqZOQhXGiWG8k2gHtVV6tR8NvfOlYdyl10VC2X7iAKrVn/U1LHKSY6hzTZLT
3V1/k3ue08rObIiWIFOE/u9dubtH9D0TgZ5237Uwg+4=
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:01 2024 by rpki-client on console-ams.rpki-client.org