Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/3230322e302e3130372e302f32342d3234203d3e203535363937.roa
File:                     3230322e302e3130372e302f32342d3234203d3e203535363937.roa (raw, json)
Hash identifier:          bC+0Z62TsXox0BhLKEbD9PTYzVzwTZf1PzCwwCjZ6/s=
Subject key identifier:   63:84:CB:7B:84:ED:B7:F8:25:BD:CC:57:65:74:E7:6E:55:1F:CD:5F
Certificate issuer:       /CN=1FA59BCEE428AFC03264229113A5539024697A14
Certificate serial:       1D43A9CBD2A856D750771E8C4264489303DDE3CE
Authority key identifier: 1F:A5:9B:CE:E4:28:AF:C0:32:64:22:91:13:A5:53:90:24:69:7A:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/3230322e302e3130372e302f32342d3234203d3e203535363937.roa
Signing time:             Mon 01 Jul 2024 01:04:17 +0000
ROA not before:           Mon 01 Jul 2024 00:59:17 +0000
ROA not after:            Mon 30 Jun 2025 01:04:17 +0000
asID:                     55697
IP address blocks:        202.0.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.crl
                          rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:43:a9:cb:d2:a8:56:d7:50:77:1e:8c:42:64:48:93:03:dd:e3:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FA59BCEE428AFC03264229113A5539024697A14
        Validity
            Not Before: Jul  1 00:59:17 2024 GMT
            Not After : Jun 30 01:04:17 2025 GMT
        Subject: CN=6384CB7B84EDB7F825BDCC576574E76E551FCD5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6f:bd:13:93:7d:26:8d:3e:8f:3e:b7:b2:6b:
                    2b:ce:0e:9c:62:83:02:6d:fa:17:07:03:70:f9:4b:
                    b7:7b:90:59:d1:6d:ae:af:d2:ac:c0:07:f8:7a:8b:
                    8a:ec:24:47:a1:eb:38:ea:76:78:1a:38:5b:d1:ec:
                    ea:2f:f2:9d:59:10:29:2b:23:9c:68:02:33:ad:19:
                    9a:59:45:99:92:9d:1f:a1:7e:ea:b3:9f:36:ed:05:
                    e1:38:2a:c6:24:a7:0d:8c:45:3d:c6:b6:ab:b5:d8:
                    f2:df:d3:27:2a:48:c0:a2:01:33:e7:b9:f4:00:1e:
                    9c:ec:7b:4f:5d:9c:b1:a7:52:af:45:c9:ae:1d:59:
                    bd:98:19:4a:a0:85:48:75:cb:9e:3b:d8:61:84:93:
                    e1:c6:14:1a:0c:6d:b6:60:c8:de:7b:00:0d:77:75:
                    ee:16:5d:16:50:4d:1f:b6:ac:2e:f5:01:35:89:34:
                    df:6b:d1:99:96:8a:0d:8b:03:3b:59:49:8b:7b:b1:
                    65:87:f5:54:45:23:b1:1f:bd:73:c1:ed:0c:f5:3a:
                    a1:e6:10:f7:e5:53:4b:1b:f0:bf:39:de:85:41:69:
                    50:3d:0e:f5:4d:25:31:77:1f:9d:d1:e4:e2:e5:90:
                    3e:b9:fa:94:4b:4d:0b:e3:e9:53:64:f2:2a:d2:6f:
                    81:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:84:CB:7B:84:ED:B7:F8:25:BD:CC:57:65:74:E7:6E:55:1F:CD:5F
            X509v3 Authority Key Identifier:
                keyid:1F:A5:9B:CE:E4:28:AF:C0:32:64:22:91:13:A5:53:90:24:69:7A:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/1FA59BCEE428AFC03264229113A5539024697A14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FA59BCEE428AFC03264229113A5539024697A14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60442043-244e-4b87-b00c-e57f4871d0ef/0/3230322e302e3130372e302f32342d3234203d3e203535363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.0.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:27:ff:9c:c8:e2:5a:87:95:f0:1e:f6:c1:c5:1e:5d:ba:e1:
         60:33:7f:59:57:3a:91:f5:85:09:50:53:49:27:13:9e:a4:f7:
         52:51:80:b0:85:83:75:3b:cd:e2:9f:f7:1d:82:4c:a5:1b:f6:
         43:0b:fd:36:95:02:94:8f:d3:2d:42:c7:a8:05:e5:13:74:8f:
         7f:f7:8d:38:af:41:c7:66:aa:3f:ec:ee:7b:fb:ce:73:0a:0b:
         82:7c:41:95:16:39:ec:c1:7d:13:5b:73:1c:be:96:f0:b8:cf:
         be:00:71:78:f4:c7:53:94:d2:35:bb:b6:cc:b7:58:77:44:1a:
         10:ee:61:68:a1:36:e7:06:06:24:b1:66:b1:75:28:12:02:64:
         a0:e2:65:96:96:ac:c2:21:c8:a4:55:bc:82:c0:59:ea:ce:6b:
         37:d3:e5:93:89:2f:75:ce:63:f4:d6:0e:7b:9c:33:15:94:6d:
         60:fc:64:73:0f:fb:e9:45:ff:b9:0c:2d:b7:3e:3b:c7:b6:c5:
         cb:b7:de:8a:6f:1d:dd:5d:55:2c:1f:e8:0e:ae:0a:db:e1:7b:
         f2:06:28:21:50:8c:33:4d:e7:64:70:28:c5:46:67:58:aa:ec:
         3b:a0:da:d1:9f:fe:6e:dd:32:7a:c3:75:d7:74:06:e0:6d:5c:
         82:29:e3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:54 2024 by rpki-client on console-fra.rpki-client.org