Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e32382e302f32332d3234203d3e2034343334.roa
File:                     3230322e3135342e32382e302f32332d3234203d3e2034343334.roa (raw, json)
Hash identifier:          67Kf5m1Uqz2iwgIUG8oxVb/kPy0j5J/0laGOn3RhxEI=
Subject key identifier:   7C:F5:ED:2E:9E:BE:DC:27:2E:D3:5D:30:50:2B:36:01:8C:10:48:EB
Certificate issuer:       /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
Certificate serial:       30420B904EFA7A10D75E5C2B6CC3123E10135C
Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e32382e302f32332d3234203d3e2034343334.roa
Signing time:             Wed 20 Sep 2023 11:00:45 +0000
ROA not before:           Wed 20 Sep 2023 10:55:45 +0000
ROA not after:            Wed 18 Sep 2024 11:00:45 +0000
asID:                     4434
IP address blocks:        202.154.28.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl
                          rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 07:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:42:0b:90:4e:fa:7a:10:d7:5e:5c:2b:6c:c3:12:3e:10:13:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
        Validity
            Not Before: Sep 20 10:55:45 2023 GMT
            Not After : Sep 18 11:00:45 2024 GMT
        Subject: CN=7CF5ED2E9EBEDC272ED35D30502B36018C1048EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:26:e4:9f:a7:61:26:6c:e4:ce:97:e0:2a:d2:
                    8e:ab:11:8b:3c:8a:5d:36:ab:d5:95:d9:e2:fd:94:
                    03:b9:15:4a:2b:38:6e:6c:99:4f:9f:03:77:e9:7f:
                    ca:41:18:45:11:b7:73:9a:a4:47:5a:04:72:a6:af:
                    e2:9d:3b:e8:0e:42:da:61:11:9c:43:b5:18:54:0b:
                    cc:36:b5:08:7a:39:0e:c5:27:c0:64:16:49:e3:17:
                    36:46:73:da:cb:97:1a:32:8b:57:73:c3:c8:aa:48:
                    8b:21:60:9a:18:1f:b9:f2:a2:5b:e1:53:ed:90:36:
                    1a:2f:2a:2c:8f:72:dc:cd:51:ef:e0:aa:21:e4:a3:
                    5f:ed:6b:9c:c4:1d:db:3e:9b:01:d4:de:00:a7:79:
                    7a:6b:cb:f8:31:de:91:e9:17:53:42:df:09:7f:9e:
                    f8:74:32:10:93:ae:43:7e:71:55:75:a7:c3:1a:d2:
                    26:4e:b2:cb:7e:5f:9c:73:84:50:c2:20:41:6d:5f:
                    63:5f:55:4b:6d:ee:1e:23:4d:0c:30:c5:c6:44:cf:
                    67:81:0f:73:28:27:1a:b0:de:4c:d2:ec:e7:54:18:
                    04:97:ab:ed:cd:10:4a:3b:54:03:81:a6:01:71:08:
                    59:ee:ca:bb:0e:57:94:c6:6a:c0:74:a9:43:58:cb:
                    bd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F5:ED:2E:9E:BE:DC:27:2E:D3:5D:30:50:2B:36:01:8C:10:48:EB
            X509v3 Authority Key Identifier:
                keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e32382e302f32332d3234203d3e2034343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.154.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:22:50:10:9f:a6:e0:06:36:4f:5f:2b:ed:ee:3b:13:04:aa:
         1a:cc:d8:6a:01:4f:eb:aa:a3:23:f7:71:95:ca:28:a8:13:07:
         49:a1:66:e4:f2:b1:d4:a7:25:58:20:76:76:bb:38:4f:7c:c1:
         a0:15:5a:ff:2b:cb:5a:97:41:da:04:9c:e1:58:7e:8d:26:69:
         57:fa:32:3c:9d:41:d3:e4:37:b1:d9:63:71:1e:3e:21:b2:39:
         42:4d:f3:df:ac:84:02:58:c3:27:e1:fc:da:1a:38:73:5d:68:
         76:e0:24:fc:87:9e:fa:d7:4e:ad:cc:92:8f:83:bf:e4:6e:2f:
         65:b8:79:7d:04:bd:3a:be:a1:e0:19:cd:8c:c7:32:42:f6:94:
         04:10:b8:34:48:c5:ca:4a:83:e7:c8:82:1b:0d:fe:71:97:db:
         db:5b:7f:46:ee:4c:dc:70:01:b2:8a:72:9a:1d:27:43:4c:35:
         b6:6c:54:bf:a6:bd:7d:f8:96:aa:6d:b7:be:76:58:c0:98:45:
         76:f2:b0:7a:46:9e:4a:11:76:0f:a7:9c:dc:3d:98:1a:31:ec:
         c8:cd:64:fc:2c:04:64:04:bc:1d:d2:c7:f1:31:61:ea:55:df:
         f8:ce:64:c4:8f:30:09:63:9c:9d:99:ca:45:2d:33:3f:2c:5c:
         40:07:9c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 14:21:50 2024 by rpki-client on console-ams.rpki-client.org