Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3232312e302f32342d3234203d3e203338313432.roa
File:                     3231302e35372e3232312e302f32342d3234203d3e203338313432.roa (raw, json)
Hash identifier:          Q4L5Bzc5PAgnS3en5iCGkdfsYZiseb5S267daUQcEZ0=
Subject key identifier:   05:53:58:A1:5E:7B:7E:D5:38:D5:B7:B4:C7:A7:DB:FD:5F:FB:83:50
Certificate issuer:       /CN=29A4AE587F980E73A344FD1ED55C47566E609511
Certificate serial:       766D11735C1804A0F409D5CBDECA4D41DD758739
Authority key identifier: 29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3232312e302f32342d3234203d3e203338313432.roa
Signing time:             Mon 21 Oct 2024 13:00:03 +0000
ROA not before:           Mon 21 Oct 2024 12:55:03 +0000
ROA not after:            Mon 20 Oct 2025 13:00:03 +0000
asID:                     38142
IP address blocks:        210.57.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl
                          rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:6d:11:73:5c:18:04:a0:f4:09:d5:cb:de:ca:4d:41:dd:75:87:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29A4AE587F980E73A344FD1ED55C47566E609511
        Validity
            Not Before: Oct 21 12:55:03 2024 GMT
            Not After : Oct 20 13:00:03 2025 GMT
        Subject: CN=055358A15E7B7ED538D5B7B4C7A7DBFD5FFB8350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:07:75:c8:0e:6f:8a:cb:d7:44:59:f6:c0:0b:
                    ed:9a:e7:17:46:9f:a7:9c:45:b1:33:0f:95:47:d9:
                    66:65:c1:8a:49:54:43:37:6a:a8:8d:d3:dd:db:cd:
                    b3:51:da:4c:74:99:01:ea:96:ea:d7:ff:79:a8:28:
                    d6:83:10:32:db:f8:84:5a:5f:c6:6b:68:b7:01:5f:
                    3a:e7:dd:d9:e4:bc:c3:39:0f:a4:14:a5:a1:4a:a3:
                    18:c7:49:a0:db:41:f3:07:d3:cc:bb:e0:d2:86:8f:
                    13:db:59:a4:23:e6:ec:a6:ad:a9:33:b0:a6:af:2b:
                    47:cd:3b:be:c1:2f:33:58:7e:21:ff:8c:b6:2d:5c:
                    53:bc:cc:b8:91:55:e0:1b:66:bd:d8:34:05:66:c8:
                    9c:59:84:9b:71:de:1a:ec:6a:16:1a:cf:81:c5:2f:
                    d7:d2:60:20:fb:ac:0f:3c:39:79:65:1a:6c:eb:fc:
                    fe:63:70:c5:4f:6a:b7:da:b7:1e:d7:43:3f:63:df:
                    fb:8d:e6:dd:db:07:d2:60:8e:c3:5c:0d:62:dc:e3:
                    29:9d:98:2d:11:63:53:73:fe:9c:37:a5:da:1d:0b:
                    76:7a:7a:bf:1c:23:83:1a:66:72:5b:c7:a5:48:dc:
                    db:62:7e:4f:43:04:bf:03:f0:f0:69:5f:c7:2f:74:
                    44:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:53:58:A1:5E:7B:7E:D5:38:D5:B7:B4:C7:A7:DB:FD:5F:FB:83:50
            X509v3 Authority Key Identifier:
                keyid:29:A4:AE:58:7F:98:0E:73:A3:44:FD:1E:D5:5C:47:56:6E:60:95:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/29A4AE587F980E73A344FD1ED55C47566E609511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/29A4AE587F980E73A344FD1ED55C47566E609511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/608b2959-1c25-46a0-89d1-f77d5c474691/0/3231302e35372e3232312e302f32342d3234203d3e203338313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.57.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:7b:0c:ae:f6:a7:48:c5:d0:41:fd:53:bf:ff:35:4c:c7:cc:
         92:ea:0b:e4:84:4c:7b:cd:7e:88:96:29:7b:dd:35:48:30:b0:
         3b:e0:3f:bb:4d:8b:28:3b:ea:ff:19:43:23:28:2c:96:c2:b9:
         1e:c7:2f:2c:f4:e1:90:fb:38:13:57:f9:d6:61:c0:75:86:c3:
         d3:23:d2:82:50:4a:03:2f:11:54:13:b9:4c:20:93:89:ff:68:
         7c:1a:07:7a:e3:c6:bb:0b:12:f9:81:b4:5e:3b:14:b4:48:0f:
         4c:86:a7:46:fc:94:4a:52:7d:d5:8c:07:a1:17:39:20:f6:2a:
         65:12:ae:30:ea:09:39:ac:55:99:d5:1f:d8:f5:93:6c:c1:66:
         65:42:bd:61:71:fa:b5:37:f9:2a:81:29:e8:09:6e:0f:e6:f9:
         db:8d:8f:98:dd:2a:28:8f:2a:66:90:ca:5c:30:f3:f6:b3:6b:
         8d:95:6b:6c:7b:ab:9c:51:82:ed:82:b7:97:eb:ef:e0:72:02:
         94:0e:d2:85:50:54:4b:a6:91:ff:8f:23:d7:b0:dc:87:e6:14:
         45:59:e6:74:15:1a:42:37:74:ba:fc:e7:4f:6f:89:e7:86:6b:
         bc:ed:e5:80:8a:72:10:a5:c1:dd:a0:5e:72:d7:39:e0:79:17:
         e6:66:50:7d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUdm0Rc1wYBKD0CdXL3spNQd11hzkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2
RTYwOTUxMTAeFw0yNDEwMjExMjU1MDNaFw0yNTEwMjAxMzAwMDNaMDMxMTAvBgNV
BAMTKDA1NTM1OEExNUU3QjdFRDUzOEQ1QjdCNEM3QTdEQkZENUZGQjgzNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSB3XIDm+Ky9dEWfbAC+2a5xdG
n6ecRbEzD5VH2WZlwYpJVEM3aqiN093bzbNR2kx0mQHqlurX/3moKNaDEDLb+IRa
X8ZraLcBXzrn3dnkvMM5D6QUpaFKoxjHSaDbQfMH08y74NKGjxPbWaQj5uymrakz
sKavK0fNO77BLzNYfiH/jLYtXFO8zLiRVeAbZr3YNAVmyJxZhJtx3hrsahYaz4HF
L9fSYCD7rA88OXllGmzr/P5jcMVParfatx7XQz9j3/uN5t3bB9JgjsNcDWLc4ymd
mC0RY1Nz/pw3pdodC3Z6er8cI4MaZnJbx6VI3Ntifk9DBL8D8PBpX8cvdESDAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUBVNYoV57ftU41be0x6fb/V/7g1AwHwYDVR0j
BBgwFoAUKaSuWH+YDnOjRP0e1VxHVm5glREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MDhiMjk1OS0xYzI1LTQ2YTAtODlkMS1mNzdkNWM0NzQ2OTEvMC8yOUE0QUU1ODdG
OTgwRTczQTM0NEZEMUVENTVDNDc1NjZFNjA5NTExLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjlBNEFFNTg3Rjk4MEU3M0EzNDRGRDFFRDU1QzQ3NTY2RTYw
OTUxMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYwOGIyOTU5LTFjMjUtNDZhMC04
OWQxLWY3N2Q1YzQ3NDY5MS8wLzMyMzEzMDJlMzUzNzJlMzIzMjMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODMxMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANI53TANBgkqhkiG
9w0BAQsFAAOCAQEAQHsMrvanSMXQQf1Tv/81TMfMkuoL5IRMe81+iJYpe901SDCw
O+A/u02LKDvq/xlDIygslsK5HscvLPThkPs4E1f51mHAdYbD0yPSglBKAy8RVBO5
TCCTif9ofBoHeuPGuwsS+YG0XjsUtEgPTIanRvyUSlJ91YwHoRc5IPYqZRKuMOoJ
OaxVmdUf2PWTbMFmZUK9YXH6tTf5KoEp6AluD+b5242PmN0qKI8qZpDKXDDz9rNr
jZVrbHurnFGC7YK3l+vv4HIClA7ShVBUS6aR/48j17Dch+YURVnmdBUaQjd0uvzn
T2+J54ZrvO3lgIpyEKXB3aBectc54HkX5mZQfQ==
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:14 2024 by rpki-client on console-ams.rpki-client.org