Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34302e302f32342d3234203d3e203538343837.roa
File:                     3230322e31302e34302e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier:          3vQ3zMiMSMYMMp0i+xtOvu0Yx5WNBvRsYKdyI3BSbMk=
Subject key identifier:   0B:3F:60:AD:EC:3A:CC:59:23:CD:91:84:17:E6:E7:FF:B2:8E:0B:C7
Certificate issuer:       /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial:       407CA5CEB067BAC8C16AFD22B108BB628D26A698
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34302e302f32342d3234203d3e203538343837.roa
Signing time:             Thu 11 Apr 2024 10:02:02 +0000
ROA not before:           Thu 11 Apr 2024 09:57:02 +0000
ROA not after:            Thu 10 Apr 2025 10:02:02 +0000
asID:                     58487
IP address blocks:        202.10.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
                          rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:7c:a5:ce:b0:67:ba:c8:c1:6a:fd:22:b1:08:bb:62:8d:26:a6:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
        Validity
            Not Before: Apr 11 09:57:02 2024 GMT
            Not After : Apr 10 10:02:02 2025 GMT
        Subject: CN=0B3F60ADEC3ACC5923CD918417E6E7FFB28E0BC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b3:f2:6b:82:a9:6b:fb:0e:64:79:eb:cb:25:
                    a9:77:d6:5b:a7:ac:42:79:34:5b:ac:57:13:8e:af:
                    51:77:93:b0:1d:fe:50:57:ea:b4:00:e7:b7:63:96:
                    34:20:8f:38:ff:7b:c3:c5:08:61:c3:4c:79:8d:61:
                    81:d7:e8:ff:32:a8:12:84:0c:69:14:9e:22:36:de:
                    a4:63:e7:f3:27:50:83:c1:50:b7:1c:08:0a:9d:f4:
                    9f:c5:aa:cd:b6:e2:48:a7:09:8f:2d:dd:c9:a6:57:
                    f4:76:fa:50:a6:f0:5a:92:a8:df:4d:c9:2f:c9:05:
                    9b:22:42:40:f8:df:f7:eb:54:98:71:38:56:dc:be:
                    b8:f7:ee:50:cc:84:4c:11:8c:ab:a5:a9:4f:21:74:
                    2e:7f:18:b0:e0:ba:52:8c:2d:9f:c6:78:9d:6d:84:
                    69:8b:74:2c:48:6f:52:d6:71:1b:59:4d:7e:52:db:
                    e6:46:38:44:3f:ed:ac:b9:e0:8d:33:71:ee:94:a1:
                    a5:98:e7:ac:8d:31:1d:25:45:38:dc:04:3d:b0:59:
                    a0:0a:0d:82:28:45:0c:9b:86:61:1e:20:eb:5a:b7:
                    84:ce:8a:36:58:73:5b:21:1b:48:9c:25:24:cb:2f:
                    08:c8:9c:16:bd:dc:2b:39:f8:28:e8:03:30:3e:69:
                    97:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3F:60:AD:EC:3A:CC:59:23:CD:91:84:17:E6:E7:FF:B2:8E:0B:C7
            X509v3 Authority Key Identifier:
                keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3230322e31302e34302e302f32342d3234203d3e203538343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:93:fe:9c:93:ed:05:f2:f5:cd:1f:b8:cf:76:0f:61:7d:f4:
         82:a8:b8:b5:8a:33:a6:29:5d:f6:46:bc:06:72:be:e2:5e:b9:
         b7:74:83:38:a2:05:0c:99:8a:5a:ea:13:fc:0c:da:f1:8b:48:
         1c:30:3c:4d:d9:57:a4:df:9d:56:8e:46:70:97:ef:2f:cd:03:
         64:0d:42:3b:09:28:27:d6:a8:97:76:6e:e1:2a:50:5e:be:c5:
         2f:13:77:72:87:2b:c0:15:3b:04:f0:a5:c7:5e:84:a2:ca:c1:
         24:72:b7:97:03:3f:c3:93:27:8b:6f:07:96:12:47:02:18:e0:
         3f:f5:b5:60:e0:64:62:20:9f:c9:2f:3f:31:2a:18:ab:b7:78:
         9c:b0:f5:32:2c:81:ac:c9:43:16:90:f9:71:6c:84:66:83:f1:
         36:84:20:c3:4f:ca:af:5c:c6:68:5a:c9:e1:c2:0f:49:c2:15:
         1c:67:e3:b1:6e:14:b0:df:e9:0c:22:83:96:52:2b:a5:fe:a9:
         a4:15:5d:97:35:ea:ec:b7:a9:94:c7:3c:b7:18:a1:32:68:eb:
         9c:60:8d:7e:5a:f7:13:2b:ee:19:85:4d:a8:6d:d7:27:5f:58:
         2e:09:5b:ce:fc:74:bd:cd:84:64:6a:ad:5c:40:1a:9a:a1:2c:
         1b:ee:45:f8
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUQHylzrBnusjBav0isQi7Yo0mppgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5
MkFBQkU2RTAeFw0yNDA0MTEwOTU3MDJaFw0yNTA0MTAxMDAyMDJaMDMxMTAvBgNV
BAMTKDBCM0Y2MEFERUMzQUNDNTkyM0NEOTE4NDE3RTZFN0ZGQjI4RTBCQzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOs/Jrgqlr+w5keevLJal31lun
rEJ5NFusVxOOr1F3k7Ad/lBX6rQA57djljQgjzj/e8PFCGHDTHmNYYHX6P8yqBKE
DGkUniI23qRj5/MnUIPBULccCAqd9J/Fqs224kinCY8t3cmmV/R2+lCm8FqSqN9N
yS/JBZsiQkD43/frVJhxOFbcvrj37lDMhEwRjKulqU8hdC5/GLDgulKMLZ/GeJ1t
hGmLdCxIb1LWcRtZTX5S2+ZGOEQ/7ay54I0zce6UoaWY56yNMR0lRTjcBD2wWaAK
DYIoRQybhmEeIOtat4TOijZYc1shG0icJSTLLwjInBa93Cs5+CjoAzA+aZcrAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUCz9grew6zFkjzZGEF+bn/7KOC8cwHwYDVR0j
BBgwFoAUtvEyIyFBLv0EGmwsCyl6EJKqvm4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZDhmMDYwZi1lNGIzLTRhNGUtOTdmZC1mNjFhYjE3ZGVlZWQvMC9CNkYxMzIyMzIx
NDEyRUZEMDQxQTZDMkMwQjI5N0ExMDkyQUFCRTZFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5MkFB
QkU2RS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05
N2ZkLWY2MWFiMTdkZWVlZC8wLzMyMzAzMjJlMzEzMDJlMzQzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM1MzgzNDM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKCigwDQYJKoZIhvcN
AQELBQADggEBAMGT/pyT7QXy9c0fuM92D2F99IKouLWKM6YpXfZGvAZyvuJeubd0
gziiBQyZilrqE/wM2vGLSBwwPE3ZV6TfnVaORnCX7y/NA2QNQjsJKCfWqJd2buEq
UF6+xS8Td3KHK8AVOwTwpcdehKLKwSRyt5cDP8OTJ4tvB5YSRwIY4D/1tWDgZGIg
n8kvPzEqGKu3eJyw9TIsgazJQxaQ+XFshGaD8TaEIMNPyq9cxmhayeHCD0nCFRxn
47FuFLDf6Qwig5ZSK6X+qaQVXZc16uy3qZTHPLcYoTJo65xgjX5a9xMr7hmFTaht
1ydfWC4JW878dL3NhGRqrVxAGpqhLBvuRfg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:32 2024 by rpki-client on console-ams.rpki-client.org