Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e382e302f32332d3234203d3e2034343334.roa
File:                     3230322e3135342e382e302f32332d3234203d3e2034343334.roa (raw, json)
Hash identifier:          YhAhm32sqjcQ0B0pIY0d6mlWiIzrUCyTV/cVxgo8g6s=
Subject key identifier:   3F:CE:86:51:CF:98:48:86:47:7A:2D:FF:8F:F7:D0:99:02:23:7E:31
Certificate issuer:       /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
Certificate serial:       785484311C22B45A192560102BC81BA61AE73BC5
Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e382e302f32332d3234203d3e2034343334.roa
Signing time:             Wed 20 Sep 2023 11:00:43 +0000
ROA not before:           Wed 20 Sep 2023 10:55:43 +0000
ROA not after:            Wed 18 Sep 2024 11:00:43 +0000
asID:                     4434
IP address blocks:        202.154.8.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl
                          rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 07:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:54:84:31:1c:22:b4:5a:19:25:60:10:2b:c8:1b:a6:1a:e7:3b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
        Validity
            Not Before: Sep 20 10:55:43 2023 GMT
            Not After : Sep 18 11:00:43 2024 GMT
        Subject: CN=3FCE8651CF984886477A2DFF8FF7D09902237E31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ec:7c:fa:0a:7a:1e:5a:49:03:8d:d1:82:4c:
                    23:d9:6c:a3:85:9e:3c:76:63:5b:d6:1e:1a:21:4c:
                    f7:bf:cf:76:f9:b1:80:fb:83:42:1d:14:23:00:58:
                    7d:fa:35:f7:2b:e8:11:da:33:2f:26:ff:b6:bf:fd:
                    8f:f8:aa:f0:54:9b:25:c4:c6:47:b9:7a:90:7f:ec:
                    18:bf:b3:aa:01:de:73:4a:82:00:88:ec:1d:68:4c:
                    9a:d9:da:28:e4:91:80:30:76:3d:31:4a:11:2c:80:
                    7c:6d:1f:90:b2:03:f6:9b:ae:ab:fe:25:51:83:f0:
                    f0:ec:3d:5e:a2:34:91:5d:3b:a0:26:27:18:a6:0a:
                    46:6c:9d:f7:93:21:0b:45:d3:9d:cb:46:05:8f:f1:
                    39:7f:b9:37:0f:73:14:ac:9d:31:ab:8f:ce:e8:58:
                    d7:65:25:2d:fb:f0:88:0a:6a:42:bf:be:41:7b:e8:
                    cc:4d:9e:3c:0f:b1:25:b0:e5:0d:2e:a8:7e:21:9a:
                    68:e8:ff:8f:c6:11:23:d5:2a:9f:0e:c3:76:b5:2e:
                    13:56:16:f1:1e:43:d6:bc:f1:e5:09:65:29:1d:86:
                    fa:d9:57:32:0d:8f:c8:28:91:b6:b5:50:dc:87:d8:
                    01:5f:4c:d7:f6:73:be:5d:a4:df:10:c0:8e:20:7b:
                    7f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CE:86:51:CF:98:48:86:47:7A:2D:FF:8F:F7:D0:99:02:23:7E:31
            X509v3 Authority Key Identifier:
                keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e382e302f32332d3234203d3e2034343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.154.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:9d:f9:97:be:12:ae:12:46:63:34:20:52:c5:f8:00:b7:3e:
         e5:95:a1:c1:5d:4f:94:d5:10:ea:8c:a3:f7:2b:7e:16:2c:8c:
         b8:bf:72:38:97:d5:c8:ad:89:17:4c:07:b1:d5:50:7d:5c:7d:
         aa:e2:03:10:a4:0c:82:e8:5f:75:f8:44:aa:42:ce:07:b8:16:
         b1:74:a6:0f:28:d8:09:d8:8f:54:0a:1a:00:bc:02:44:fe:0e:
         b9:1d:e4:0a:8a:ce:84:11:e5:5e:11:3d:d0:f3:8d:86:a1:a2:
         61:fd:09:5b:bb:23:50:67:c6:c9:e2:2c:72:a4:b3:46:cb:6a:
         7c:23:70:06:a5:78:82:2a:05:59:59:5c:ec:bc:49:4a:84:bb:
         bb:ef:b0:30:9c:25:50:98:8a:ab:77:4b:10:86:74:ee:64:87:
         31:5d:3b:61:c8:52:17:87:6e:eb:d2:9a:26:57:30:4c:e2:c1:
         45:a5:27:dd:75:ac:ec:8b:3e:77:30:e4:ee:a7:b3:23:4c:c3:
         42:7a:76:03:75:f5:80:29:09:3d:4b:73:ae:7a:93:00:4c:26:
         99:4f:87:f7:99:b5:85:89:1e:83:a7:eb:b5:8d:13:35:61:10:
         0f:d1:30:3a:00:b6:d5:6d:b3:80:f3:b8:58:47:0c:11:b7:db:
         d2:c9:5f:e9
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUeFSEMRwitFoZJWAQK8gbphrnO8UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5
QUU5MjdGNjAeFw0yMzA5MjAxMDU1NDNaFw0yNDA5MTgxMTAwNDNaMDMxMTAvBgNV
BAMTKDNGQ0U4NjUxQ0Y5ODQ4ODY0NzdBMkRGRjhGRjdEMDk5MDIyMzdFMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC87Hz6CnoeWkkDjdGCTCPZbKOF
njx2Y1vWHhohTPe/z3b5sYD7g0IdFCMAWH36Nfcr6BHaMy8m/7a//Y/4qvBUmyXE
xke5epB/7Bi/s6oB3nNKggCI7B1oTJrZ2ijkkYAwdj0xShEsgHxtH5CyA/abrqv+
JVGD8PDsPV6iNJFdO6AmJximCkZsnfeTIQtF053LRgWP8Tl/uTcPcxSsnTGrj87o
WNdlJS378IgKakK/vkF76MxNnjwPsSWw5Q0uqH4hmmjo/4/GESPVKp8Ow3a1LhNW
FvEeQ9a88eUJZSkdhvrZVzINj8gokba1UNyH2AFfTNf2c75dpN8QwI4ge3/TAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUP86GUc+YSIZHei3/j/fQmQIjfjEwHwYDVR0j
BBgwFoAUEPAPrm8Lk6vclWKKzjw8GJrpJ/YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YzBjMTRhOS0zYTc3LTQ5ZTItOTE5NC00OGQwOTEzNDU4YjIvMC8xMEYwMEZBRTZG
MEI5M0FCREM5NTYyOEFDRTNDM0MxODlBRTkyN0Y2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTBGMDBGQUU2RjBCOTNBQkRDOTU2MjhBQ0UzQzNDMTg5QUU5
MjdGNi5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWMwYzE0YTktM2E3Ny00OWUyLTkx
OTQtNDhkMDkxMzQ1OGIyLzAvMzIzMDMyMmUzMTM1MzQyZTM4MmUzMDJmMzIzMzJk
MzIzNDIwM2QzZTIwMzQzNDMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHKmggwDQYJKoZIhvcNAQEL
BQADggEBAFWd+Ze+Eq4SRmM0IFLF+AC3PuWVocFdT5TVEOqMo/crfhYsjLi/cjiX
1citiRdMB7HVUH1cfariAxCkDILoX3X4RKpCzge4FrF0pg8o2AnYj1QKGgC8AkT+
Drkd5AqKzoQR5V4RPdDzjYahomH9CVu7I1BnxsniLHKks0bLanwjcAaleIIqBVlZ
XOy8SUqEu7vvsDCcJVCYiqt3SxCGdO5khzFdO2HIUheHbuvSmiZXMEziwUWlJ911
rOyLPncw5O6nsyNMw0J6dgN19YApCT1Lc656kwBMJplPh/eZtYWJHoOn67WNEzVh
EA/RMDoAttVts4DzuFhHDBG329LJX+k=
-----END CERTIFICATE-----
Generated at Sat Jun 22 13:58:56 2024 by rpki-client on console-fra.rpki-client.org