Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31302e302f32342d3234203d3e2034343334.roa
File:                     3230322e3135342e31302e302f32342d3234203d3e2034343334.roa (raw, json)
Hash identifier:          1CxrlDgznqMEF6vHLJsmazvR8CwihGC65v7y9k2P2hs=
Subject key identifier:   41:89:8A:DE:E4:7A:D4:99:F7:29:FC:97:01:B1:EA:EF:99:70:3B:E6
Certificate issuer:       /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
Certificate serial:       2275187C4E36FCED146FEAB6065DC94ED2104E05
Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31302e302f32342d3234203d3e2034343334.roa
Signing time:             Wed 20 Sep 2023 11:00:43 +0000
ROA not before:           Wed 20 Sep 2023 10:55:43 +0000
ROA not after:            Wed 18 Sep 2024 11:00:43 +0000
asID:                     4434
IP address blocks:        202.154.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl
                          rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 07:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:75:18:7c:4e:36:fc:ed:14:6f:ea:b6:06:5d:c9:4e:d2:10:4e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
        Validity
            Not Before: Sep 20 10:55:43 2023 GMT
            Not After : Sep 18 11:00:43 2024 GMT
        Subject: CN=41898ADEE47AD499F729FC9701B1EAEF99703BE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:9b:0c:58:45:bb:f6:51:d8:0d:37:41:ae:5f:
                    34:ff:69:45:82:00:0f:c9:11:57:28:a8:27:c0:07:
                    59:e5:70:db:cf:19:0f:68:3f:57:36:d1:a4:eb:1f:
                    97:ad:0f:7f:d9:c5:2c:06:cf:e2:f3:c7:70:1a:cf:
                    c6:74:62:86:1d:2c:f2:60:5d:bf:92:90:a8:ca:c9:
                    a5:fc:d5:c9:90:85:a0:aa:35:73:bf:4f:df:ba:b8:
                    43:d6:92:53:b2:0f:eb:fc:c2:bf:2c:c1:dc:84:ca:
                    f7:49:6e:67:c1:b8:cc:6e:a0:42:26:d8:a6:88:cc:
                    89:7c:a4:02:06:79:15:05:67:6a:86:01:5f:5a:38:
                    7a:18:4f:c1:d8:38:99:7a:57:b7:8b:e2:37:3a:ae:
                    c6:33:c9:b4:54:93:98:b4:1a:2d:f3:25:6d:99:2d:
                    d6:fc:94:45:87:c7:3c:4d:e4:4a:07:8e:c3:71:c1:
                    bd:6b:fe:ce:9a:20:49:b8:31:91:8b:54:e6:05:29:
                    9d:f6:fb:de:e7:e8:67:c2:a3:a0:52:c6:82:7b:0a:
                    ba:c5:46:2b:47:06:5f:4e:69:d1:c3:26:5f:b8:bb:
                    5c:5a:05:ae:12:c9:79:ae:11:d5:48:27:ce:2e:20:
                    d7:ac:cc:65:b0:e8:d4:6e:68:03:32:a9:f3:6b:3e:
                    58:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:89:8A:DE:E4:7A:D4:99:F7:29:FC:97:01:B1:EA:EF:99:70:3B:E6
            X509v3 Authority Key Identifier:
                keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31302e302f32342d3234203d3e2034343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.154.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:d8:ad:d7:90:49:60:1d:13:3f:9b:7e:d8:d2:9a:14:8c:33:
         7b:cf:1d:0b:24:2a:7a:6f:30:e0:10:1a:74:fb:21:ad:c8:a3:
         dc:91:2c:c6:1c:6a:4e:f9:6b:f6:aa:36:15:4c:ae:d1:d6:0e:
         75:d8:e2:29:e6:b1:f0:9c:6c:0b:7f:c4:28:b8:c4:6a:77:25:
         23:4b:a4:dc:31:e0:16:71:c3:0f:d7:89:a2:83:6f:26:e4:5f:
         96:4a:47:55:4c:08:26:46:0d:92:ed:ac:c6:4c:09:2c:02:69:
         e8:fd:69:d7:3c:b6:f5:35:30:34:11:2a:22:76:42:10:17:6f:
         5f:79:4d:9b:3a:94:71:07:93:4f:f8:4a:81:9d:70:52:59:df:
         b8:28:58:c7:54:54:d2:40:05:77:0b:3f:20:6a:63:95:1a:64:
         14:53:bd:1c:b3:f2:9e:74:22:9d:cc:5b:a0:59:c2:14:92:3e:
         76:00:cb:7b:64:3e:e7:aa:21:27:55:60:f9:f9:d9:50:59:0d:
         aa:55:3c:ad:c3:d7:df:f3:24:b0:80:56:9f:76:40:d5:4e:7c:
         2b:d1:47:1c:91:72:07:42:fa:49:5c:6f:59:86:91:3a:3b:34:
         95:96:8a:8b:75:57:06:67:0a:b8:1b:b8:6a:5c:05:23:ba:ba:
         06:44:74:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 13:58:56 2024 by rpki-client on console-fra.rpki-client.org