Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3230332e3139302e3234362e302f32342d3234203d3e203234323131.roa
File:                     3230332e3139302e3234362e302f32342d3234203d3e203234323131.roa (raw, json)
Hash identifier:          BXTLDxrw+GYZQ/FJd7HLi2uEqO0SbSnJeB5mRS0/eiA=
Subject key identifier:   07:DF:97:07:57:76:F3:82:D4:DF:61:30:62:5F:0A:BD:90:BD:80:FA
Certificate issuer:       /CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B
Certificate serial:       66C6F5A887F8389E03A1204F0A90AC20D52B0BDA
Authority key identifier: DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3230332e3139302e3234362e302f32342d3234203d3e203234323131.roa
Signing time:             Fri 22 Dec 2023 10:00:00 +0000
ROA not before:           Fri 22 Dec 2023 09:55:00 +0000
ROA not after:            Fri 20 Dec 2024 10:00:00 +0000
asID:                     24211
IP address blocks:        203.190.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl
                          rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 19:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c6:f5:a8:87:f8:38:9e:03:a1:20:4f:0a:90:ac:20:d5:2b:0b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B
        Validity
            Not Before: Dec 22 09:55:00 2023 GMT
            Not After : Dec 20 10:00:00 2024 GMT
        Subject: CN=07DF97075776F382D4DF6130625F0ABD90BD80FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b2:c2:bb:81:1f:b4:81:48:3d:21:fc:d6:a9:
                    4f:56:96:af:ac:c6:90:6e:ad:c0:a2:b9:84:b5:4e:
                    2d:f7:89:35:0e:33:00:91:a8:50:1c:04:cc:f7:27:
                    5c:3f:57:6c:ee:b1:2e:84:aa:e5:a9:62:e6:b5:33:
                    c6:1d:17:ff:6b:43:73:49:06:96:5f:57:37:51:57:
                    c8:ee:a9:16:95:46:e7:e2:00:0e:ea:2d:5b:19:3d:
                    bc:82:23:a8:66:09:23:7b:3d:3b:e7:4b:7c:d3:a4:
                    85:88:6b:19:18:b6:0c:f1:ec:e0:eb:c3:5b:37:5a:
                    3f:46:8d:1e:d4:e6:01:5d:6c:b8:e7:f2:7c:59:b5:
                    76:12:27:bc:ca:c2:7f:a2:57:85:45:26:3a:14:f5:
                    18:08:9f:5c:6a:c0:69:02:48:a2:18:87:64:a4:14:
                    d2:f0:d3:ae:e9:8d:6d:14:54:ad:96:8f:ec:e2:5d:
                    ce:c5:cd:19:0e:a7:46:0c:77:4c:e7:41:fd:ff:09:
                    3d:39:87:c8:83:6d:f4:95:ad:b4:da:05:03:53:78:
                    70:9a:df:31:b5:b9:b8:9c:02:6b:3d:34:e5:7f:6e:
                    ed:cf:fc:bb:63:11:41:46:cd:6a:37:e8:af:08:90:
                    97:ec:29:97:91:e2:17:21:8c:5f:5b:09:05:38:15:
                    b9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DF:97:07:57:76:F3:82:D4:DF:61:30:62:5F:0A:BD:90:BD:80:FA
            X509v3 Authority Key Identifier:
                keyid:DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/3230332e3139302e3234362e302f32342d3234203d3e203234323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.190.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:78:7c:1a:1a:31:67:46:10:d1:5e:b3:bc:fa:1e:90:8d:08:
         d9:76:92:c8:1e:39:17:59:c0:b5:e8:27:9c:ed:bb:66:2c:cb:
         18:8e:fb:b2:f5:da:a2:21:1c:36:ea:cf:70:68:e0:0f:7e:44:
         87:c5:17:fd:14:0f:f9:c8:b3:c3:42:16:a1:0a:9e:cb:ba:bd:
         57:d7:ca:58:f1:c4:c5:c5:bc:97:9e:8e:10:1e:e9:a3:05:32:
         5f:64:13:b2:0e:7d:9d:f5:f8:a6:03:19:4f:36:1b:9a:3e:6a:
         c5:f0:95:ee:2b:8d:75:37:86:5d:c1:ae:d9:32:f9:8a:bc:eb:
         9f:cf:ca:98:f9:7c:8e:14:e5:6f:7c:77:28:b4:7d:c9:bc:ed:
         5c:78:e3:93:31:71:7c:83:fd:d3:5d:05:e7:f7:f8:53:ab:3c:
         a3:1b:96:f0:c9:d5:12:1f:b8:fb:c7:cd:1b:c2:52:eb:0a:b4:
         ea:3c:f0:72:01:17:16:a8:9c:c0:67:28:e9:17:bd:19:83:db:
         db:1a:b5:67:ab:97:9b:f4:90:50:27:1e:1b:b5:a6:d2:a4:1b:
         70:a3:b9:c2:31:fe:da:f3:eb:cd:1c:9e:61:36:96:75:c9:73:
         24:c3:76:da:5c:8c:bb:c0:72:ed:4b:c6:cb:0f:d4:dc:87:e1:
         ec:6e:1a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 13:32:23 2024 by rpki-client on console-ams.rpki-client.org