Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e32322e302f32332d3234203d3e2034343334.roa
File:                     3230322e3135342e32322e302f32332d3234203d3e2034343334.roa (raw, json)
Hash identifier:          aWnyzaUi2YWm0/9k+1InGKrtNulHpnTiBYYdZtr1BKg=
Subject key identifier:   34:D7:66:22:21:77:28:1F:44:F4:79:DD:6F:16:CA:0B:29:5C:0E:3F
Certificate issuer:       /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
Certificate serial:       51F4B04CDF6D5ED1EFF856B76E27E24C223255DD
Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e32322e302f32332d3234203d3e2034343334.roa
Signing time:             Wed 20 Sep 2023 11:00:43 +0000
ROA not before:           Wed 20 Sep 2023 10:55:43 +0000
ROA not after:            Wed 18 Sep 2024 11:00:43 +0000
asID:                     4434
IP address blocks:        202.154.22.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl
                          rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 07:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:f4:b0:4c:df:6d:5e:d1:ef:f8:56:b7:6e:27:e2:4c:22:32:55:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
        Validity
            Not Before: Sep 20 10:55:43 2023 GMT
            Not After : Sep 18 11:00:43 2024 GMT
        Subject: CN=34D766222177281F44F479DD6F16CA0B295C0E3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b6:9d:a5:00:eb:cf:36:b8:ee:37:1e:ed:b2:
                    ed:8d:93:43:12:e2:b2:40:7d:2a:9e:b1:eb:2a:55:
                    39:31:d2:87:4a:9d:97:7a:14:8f:61:5b:83:eb:0d:
                    12:57:67:2a:6b:0a:84:97:da:be:0b:2c:46:ea:7a:
                    b4:d2:92:bc:d6:2c:27:a0:53:85:54:a2:46:0b:81:
                    74:fd:8d:92:dd:3e:ed:50:77:14:6a:1b:ed:37:0c:
                    5c:5f:34:af:74:ff:72:df:e9:9f:0c:4b:fa:c5:38:
                    d7:18:d3:55:0e:e1:2b:0b:2d:67:d7:de:d0:08:f9:
                    b6:ce:ad:7a:70:b8:cd:21:26:8a:26:c1:d4:c3:ae:
                    ad:8c:cf:62:bc:a2:7f:f2:f3:6a:d4:5f:76:93:35:
                    f4:ce:21:bc:5a:d3:df:8b:9e:22:e0:7e:94:e4:ec:
                    ee:a2:02:00:1b:5c:39:53:08:2e:fc:70:75:20:eb:
                    c5:04:4e:90:97:b0:eb:89:5f:2c:84:24:0e:8a:90:
                    2a:2d:9e:45:ec:95:29:ab:8a:df:ef:24:42:91:77:
                    05:d7:72:13:8b:34:44:39:39:aa:96:8b:b0:58:39:
                    a0:1e:bf:3f:0b:25:51:ac:85:11:1f:bc:59:49:06:
                    ac:fe:b7:ee:1b:23:5d:df:fa:ad:a8:55:3f:2d:7f:
                    c8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D7:66:22:21:77:28:1F:44:F4:79:DD:6F:16:CA:0B:29:5C:0E:3F
            X509v3 Authority Key Identifier:
                keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e32322e302f32332d3234203d3e2034343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.154.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:aa:b5:8c:1f:03:06:db:21:5b:5f:ea:7a:d9:c6:4f:59:3c:
         73:b4:b8:9d:27:f7:5f:3a:bf:1e:d0:49:c4:98:a7:bd:73:2e:
         f1:a8:b5:85:14:ad:c9:2d:54:86:87:61:ed:9f:7b:aa:cf:09:
         d1:05:ec:75:97:40:b9:6f:db:05:e9:67:f0:f3:d2:a6:59:03:
         7a:f5:05:9d:93:4f:70:f6:5f:de:05:9c:be:86:e9:18:29:7a:
         5a:85:a6:52:ba:42:9b:f5:3b:6a:3d:18:57:fe:4a:9b:6d:a7:
         69:bd:0b:57:b4:34:43:c1:27:29:8d:1d:cf:78:51:fb:20:ab:
         12:75:f6:ae:81:64:69:40:c9:42:ca:84:6c:2f:8f:0f:39:a4:
         52:d4:2b:86:e7:a6:35:6c:a3:a6:ab:35:0e:41:62:a9:30:03:
         78:86:ac:3a:44:bd:1a:b6:e5:a4:9a:91:a0:f5:74:00:a3:e4:
         c8:1d:db:0d:46:66:d6:8f:c3:fc:1f:d6:8f:44:97:5d:e8:96:
         fa:7d:31:2a:b4:f7:d4:d8:de:41:fb:43:ab:2d:ab:f1:58:09:
         4d:a8:b4:19:b0:2d:00:ef:6b:c2:3e:9c:52:ae:2e:10:7b:cb:
         c8:88:cd:47:f9:89:21:f7:f8:91:23:16:08:5c:42:64:ab:08:
         aa:c4:6f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 14:21:50 2024 by rpki-client on console-ams.rpki-client.org