Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e32362e302f32332d3234203d3e2034343334.roa
File:                     3230322e3135342e32362e302f32332d3234203d3e2034343334.roa (raw, json)
Hash identifier:          eHBOZxC5cGuj7vVpiuPGAIeJ4wjY8DUdtoNEafNZRg4=
Subject key identifier:   5E:FB:27:15:0E:17:C1:2C:D4:E4:77:32:E9:25:97:52:C3:32:C8:58
Certificate issuer:       /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
Certificate serial:       0937E7078D3232EED6F25448C4B3DD44F9B2E6B3
Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e32362e302f32332d3234203d3e2034343334.roa
Signing time:             Wed 20 Sep 2023 11:00:45 +0000
ROA not before:           Wed 20 Sep 2023 10:55:45 +0000
ROA not after:            Wed 18 Sep 2024 11:00:45 +0000
asID:                     4434
IP address blocks:        202.154.26.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl
                          rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 07:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:37:e7:07:8d:32:32:ee:d6:f2:54:48:c4:b3:dd:44:f9:b2:e6:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
        Validity
            Not Before: Sep 20 10:55:45 2023 GMT
            Not After : Sep 18 11:00:45 2024 GMT
        Subject: CN=5EFB27150E17C12CD4E47732E9259752C332C858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:81:6d:e4:89:f3:f6:d8:d2:b9:c8:ba:45:90:
                    86:5d:36:16:f2:30:de:eb:0d:b8:7f:55:83:c2:d3:
                    ca:aa:de:4f:f1:e1:93:f6:7d:40:39:ef:bc:60:ad:
                    15:3a:96:2f:97:f9:5b:4d:2e:bd:78:02:94:70:ca:
                    f1:e0:af:c5:6a:ca:e4:ca:03:5c:a4:b3:44:96:6c:
                    b7:db:8c:8c:46:1f:c2:66:f6:7e:60:85:4c:3c:95:
                    07:fa:c4:ea:37:89:9f:d5:93:9f:5b:0e:48:70:b9:
                    4c:47:ca:3a:ac:37:05:c2:95:2a:56:1f:bc:ab:e5:
                    1a:74:d9:ad:78:86:8c:80:65:4a:e6:51:28:f4:6e:
                    5c:76:76:3d:dd:a6:eb:f1:81:35:23:5a:f1:ec:7d:
                    15:b8:07:89:dd:9e:5a:4c:9a:a3:76:c8:ab:47:f3:
                    f1:4f:24:32:89:da:52:28:c0:6a:67:e5:e4:48:69:
                    f8:b2:69:6b:8a:27:c4:ae:d0:af:c2:19:bc:31:77:
                    fb:cd:3e:05:57:61:fd:d5:a9:d9:6e:82:76:20:fc:
                    d8:c5:b2:58:cb:15:19:c5:f1:15:f5:82:8f:4f:78:
                    73:84:df:94:c5:7f:b9:e1:52:62:fc:d9:b7:e4:e2:
                    d8:a0:ef:c2:3b:c6:25:3d:f0:d8:7d:00:a8:5e:f8:
                    f1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:FB:27:15:0E:17:C1:2C:D4:E4:77:32:E9:25:97:52:C3:32:C8:58
            X509v3 Authority Key Identifier:
                keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e32362e302f32332d3234203d3e2034343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.154.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:01:41:3c:06:85:6f:4d:8b:24:51:60:17:19:49:2c:6e:8c:
         f1:0d:37:85:ba:bb:a8:4d:3a:ac:9b:62:25:28:87:bf:f4:ee:
         62:6f:4f:b3:e0:54:32:9a:6b:39:d6:b0:00:56:7b:41:be:ae:
         1f:de:21:de:12:f8:e5:b9:8a:8b:27:a3:33:f9:95:8e:58:26:
         ab:09:77:36:8a:ee:3a:fa:81:ef:b5:a3:ac:f4:0e:81:0b:3f:
         00:14:73:df:a8:fe:ab:41:a4:87:0c:0d:45:cf:d5:36:14:ce:
         90:c6:9f:f3:98:b1:2b:02:a6:af:9e:83:b7:38:26:1d:e4:d9:
         a8:69:bd:f2:e5:87:bc:17:b6:85:91:65:f8:eb:97:82:b2:19:
         07:63:63:9a:aa:82:18:a9:1d:b4:19:0f:00:2b:4c:e5:ac:98:
         58:a6:5f:f0:af:db:0a:d9:fd:46:58:71:43:c2:33:6c:b8:69:
         af:69:00:b3:59:68:f4:16:86:e0:71:98:d3:7c:b0:ec:35:50:
         4d:69:fa:1e:41:79:06:30:df:d0:fb:db:f4:e3:7c:94:03:09:
         ce:a8:a5:90:89:74:b0:a8:35:1f:e1:90:12:bd:7a:5a:8f:23:
         f6:05:59:49:aa:76:f3:7e:50:6d:fb:62:b0:1a:64:85:b2:29:
         b1:24:c1:7d
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUCTfnB40yMu7W8lRIxLPdRPmy5rMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5
QUU5MjdGNjAeFw0yMzA5MjAxMDU1NDVaFw0yNDA5MTgxMTAwNDVaMDMxMTAvBgNV
BAMTKDVFRkIyNzE1MEUxN0MxMkNENEU0NzczMkU5MjU5NzUyQzMzMkM4NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9gW3kifP22NK5yLpFkIZdNhby
MN7rDbh/VYPC08qq3k/x4ZP2fUA577xgrRU6li+X+VtNLr14ApRwyvHgr8VqyuTK
A1yks0SWbLfbjIxGH8Jm9n5ghUw8lQf6xOo3iZ/Vk59bDkhwuUxHyjqsNwXClSpW
H7yr5Rp02a14hoyAZUrmUSj0blx2dj3dpuvxgTUjWvHsfRW4B4ndnlpMmqN2yKtH
8/FPJDKJ2lIowGpn5eRIafiyaWuKJ8Su0K/CGbwxd/vNPgVXYf3VqdlugnYg/NjF
sljLFRnF8RX1go9PeHOE35TFf7nhUmL82bfk4tig78I7xiU98Nh9AKhe+PH7AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUXvsnFQ4XwSzU5Hcy6SWXUsMyyFgwHwYDVR0j
BBgwFoAUEPAPrm8Lk6vclWKKzjw8GJrpJ/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YzBjMTRhOS0zYTc3LTQ5ZTItOTE5NC00OGQwOTEzNDU4YjIvMC8xMEYwMEZBRTZG
MEI5M0FCREM5NTYyOEFDRTNDM0MxODlBRTkyN0Y2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5QUU5
MjdGNi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjMGMxNGE5LTNhNzctNDllMi05
MTk0LTQ4ZDA5MTM0NThiMi8wLzMyMzAzMjJlMzEzNTM0MmUzMjM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzQzNDMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKmhowDQYJKoZIhvcN
AQELBQADggEBACMBQTwGhW9NiyRRYBcZSSxujPENN4W6u6hNOqybYiUoh7/07mJv
T7PgVDKaaznWsABWe0G+rh/eId4S+OW5iosnozP5lY5YJqsJdzaK7jr6ge+1o6z0
DoELPwAUc9+o/qtBpIcMDUXP1TYUzpDGn/OYsSsCpq+eg7c4Jh3k2ahpvfLlh7wX
toWRZfjrl4KyGQdjY5qqghipHbQZDwArTOWsmFimX/Cv2wrZ/UZYcUPCM2y4aa9p
ALNZaPQWhuBxmNN8sOw1UE1p+h5BeQYw39D72/TjfJQDCc6opZCJdLCoNR/hkBK9
elqPI/YFWUmqdvN+UG37YrAaZIWyKbEkwX0=
-----END CERTIFICATE-----
Generated at Sat Jun 22 13:58:56 2024 by rpki-client on console-fra.rpki-client.org