Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e302e302f32332d3234203d3e2034343334.roa
File:                     3230322e3135342e302e302f32332d3234203d3e2034343334.roa (raw, json)
Hash identifier:          7k08mpAnQMaSEFu9nMJ1BOImDUaqNss7dNE8OLDNJhY=
Subject key identifier:   6F:6B:5C:AA:CC:4A:E5:9C:17:84:C5:F1:5B:76:C5:6F:76:5C:52:2A
Certificate issuer:       /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
Certificate serial:       39863F79C38889BC10640440F57DEBC0C4FBFC71
Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e302e302f32332d3234203d3e2034343334.roa
Signing time:             Wed 20 Sep 2023 11:00:44 +0000
ROA not before:           Wed 20 Sep 2023 10:55:44 +0000
ROA not after:            Wed 18 Sep 2024 11:00:44 +0000
asID:                     4434
IP address blocks:        202.154.0.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl
                          rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 07:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:86:3f:79:c3:88:89:bc:10:64:04:40:f5:7d:eb:c0:c4:fb:fc:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
        Validity
            Not Before: Sep 20 10:55:44 2023 GMT
            Not After : Sep 18 11:00:44 2024 GMT
        Subject: CN=6F6B5CAACC4AE59C1784C5F15B76C56F765C522A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:11:d1:c1:00:b1:40:19:ac:62:d7:16:ed:60:
                    a5:8b:97:71:15:67:41:da:31:59:51:2d:2a:34:9d:
                    82:dd:78:a8:cc:9c:09:82:16:06:f5:b3:a7:48:f6:
                    a4:83:a8:07:54:47:8f:25:ba:0a:0f:fb:e6:41:af:
                    cd:32:d7:75:7d:ce:7b:f6:d4:0d:6e:8a:25:cf:71:
                    f4:1c:b1:16:47:00:c7:17:08:d3:fc:82:22:cb:2d:
                    10:6a:11:ae:b3:53:e8:ce:53:eb:d6:70:94:98:50:
                    00:db:26:f2:bd:d8:b6:bd:f5:ef:3a:d7:5d:61:e1:
                    e9:76:9c:59:4d:2b:87:d8:5c:54:c3:1c:e3:ec:72:
                    e2:4a:d4:f5:5e:49:f8:02:61:c7:e4:f2:db:f9:cd:
                    71:db:ae:d3:f6:a1:62:b0:83:50:62:5c:30:1c:09:
                    26:01:41:4e:1e:98:da:06:ce:e3:21:6f:0f:91:b9:
                    b1:30:11:9a:76:cd:0f:1e:f8:41:ad:c0:fd:4e:cb:
                    e5:63:80:1e:1a:a4:dd:5e:a8:98:8b:de:25:38:d1:
                    3d:83:cd:0a:ce:fb:0f:26:eb:a6:ef:2d:08:ac:6d:
                    c4:6e:31:cf:cf:ce:ca:26:c0:cd:8f:55:4d:d6:b4:
                    bd:fc:5e:4d:0d:34:15:10:1e:15:e1:42:39:75:f9:
                    e9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6B:5C:AA:CC:4A:E5:9C:17:84:C5:F1:5B:76:C5:6F:76:5C:52:2A
            X509v3 Authority Key Identifier:
                keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e302e302f32332d3234203d3e2034343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.154.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:b4:81:4a:a2:05:6d:32:e6:89:6f:9d:24:3a:fd:35:57:3f:
         22:c9:56:93:bd:33:40:47:51:02:5b:aa:eb:17:bc:09:1e:14:
         b5:5d:01:6c:ba:f1:b3:2e:67:b4:38:fe:d6:8e:38:35:16:6c:
         eb:f1:00:ff:2f:3b:d0:75:4d:7b:5d:c0:81:3c:20:6b:02:07:
         db:ad:13:27:78:9c:bd:ea:6a:01:85:f7:20:95:bd:6d:da:5e:
         12:8f:54:ac:da:e6:8c:d1:df:45:82:39:9c:9a:e7:09:31:5e:
         2d:e8:00:ed:0c:97:72:99:71:ba:96:bf:ee:bf:f1:d4:87:9e:
         1a:97:92:d8:40:8d:dc:db:6c:03:e1:b1:ee:df:ed:d5:c6:17:
         e4:ee:51:fc:c8:ea:f1:eb:93:14:02:5f:4d:61:29:7b:1d:b7:
         48:b2:40:b2:ce:42:25:f0:38:73:67:33:f2:09:8e:ec:51:87:
         ce:84:73:d2:93:a0:3c:ff:7e:1d:ae:5a:8e:4d:ce:58:b0:c6:
         0c:e1:6b:b6:d8:c5:f6:ba:19:d2:39:50:d8:e8:24:f9:dc:d5:
         ed:ab:17:44:08:f3:bb:ed:7f:43:fb:a3:ff:f8:04:2f:c6:67:
         be:db:5f:d1:36:46:c1:c5:39:bd:e1:c9:67:60:77:40:ed:d5:
         ea:65:12:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 14:21:50 2024 by rpki-client on console-ams.rpki-client.org