Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230312e302f32342d3234203d3e203138313533.roa
File:                     3230322e37322e3230312e302f32342d3234203d3e203138313533.roa (raw, json)
Hash identifier:          H8iPsC0j4tEPSrqGkn++qpzDL6XNvlmhQEwazgG7NhI=
Subject key identifier:   A7:99:B9:A3:1A:7A:B9:7D:99:10:A1:B7:CF:19:72:56:17:96:0B:7E
Certificate issuer:       /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Certificate serial:       56B64EFC63F625055A624629B171A4C5B06B1E70
Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230312e302f32342d3234203d3e203138313533.roa
Signing time:             Mon 01 Jul 2024 01:03:54 +0000
ROA not before:           Mon 01 Jul 2024 00:58:54 +0000
ROA not after:            Mon 30 Jun 2025 01:03:54 +0000
asID:                     18153
IP address blocks:        202.72.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl
                          rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b6:4e:fc:63:f6:25:05:5a:62:46:29:b1:71:a4:c5:b0:6b:1e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
        Validity
            Not Before: Jul  1 00:58:54 2024 GMT
            Not After : Jun 30 01:03:54 2025 GMT
        Subject: CN=A799B9A31A7AB97D9910A1B7CF19725617960B7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:17:7f:6a:eb:d3:fe:af:4b:eb:6a:9c:cb:77:
                    4a:fd:c7:c1:bb:77:eb:51:84:d2:af:f2:41:dc:d9:
                    ac:16:c6:b0:ff:a1:32:9c:14:3d:90:f2:9d:9f:0f:
                    aa:75:e5:05:61:7a:0f:8f:5b:b6:42:af:96:4f:bc:
                    06:78:e7:52:f4:14:f3:ad:76:0d:b6:53:46:4d:f9:
                    5e:71:b2:28:09:43:74:3a:1c:50:2b:e1:75:a1:9b:
                    79:0d:2c:09:b5:00:9b:69:b5:10:e4:43:36:9e:97:
                    c0:c5:fc:fe:2a:19:99:01:c9:bf:c1:4d:14:7c:e1:
                    87:2b:9f:40:fb:a4:24:4a:44:97:87:bf:33:f9:17:
                    80:9b:f0:5f:4d:b3:d5:5d:49:26:46:33:23:22:35:
                    ea:fb:fc:3c:fd:75:3d:55:f4:7f:c8:24:2a:06:3c:
                    59:66:c7:ca:da:ba:c3:8b:e1:f3:a3:e5:65:68:8e:
                    74:aa:bd:f7:5d:de:d4:30:8b:7f:75:69:69:14:4e:
                    ec:d4:8c:ca:f3:35:7f:4a:08:0a:d1:c1:94:f5:4e:
                    e1:8f:1c:98:4c:fe:f0:b0:b1:1a:4a:d7:61:cd:1d:
                    fa:c1:8d:d6:ed:1c:2b:c9:4e:46:29:c5:64:90:70:
                    69:25:f0:53:7b:ac:60:9e:93:d5:15:4e:d3:3a:40:
                    6c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:99:B9:A3:1A:7A:B9:7D:99:10:A1:B7:CF:19:72:56:17:96:0B:7E
            X509v3 Authority Key Identifier:
                keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230312e302f32342d3234203d3e203138313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.72.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:77:a7:07:1b:61:d6:39:b1:f3:0f:17:e6:8f:c8:e4:f1:b4:
         6d:3e:7a:a8:09:83:2f:5b:fa:2a:7a:2e:0e:2a:99:0f:ec:30:
         34:7c:da:9f:8b:81:95:77:41:2c:09:eb:96:d2:58:f2:eb:29:
         e1:53:72:d2:27:18:4d:c6:d0:3e:96:5b:19:60:5f:12:eb:57:
         2b:98:f3:bc:79:2d:0d:fb:5d:51:d2:9f:22:2a:98:4c:29:76:
         bd:a1:8b:6b:5c:f6:22:5d:d5:19:76:cc:74:4c:99:34:3b:35:
         5d:f8:ab:1f:87:db:28:9f:9a:cc:6f:3c:89:11:6e:94:ec:5e:
         87:ad:82:df:f9:f0:a6:85:c2:bf:e2:81:95:51:0d:66:8b:0e:
         2e:40:88:43:56:58:69:8a:14:e8:6a:68:84:cd:b6:b6:49:54:
         e1:bb:9f:53:ae:5f:74:2d:00:95:95:70:47:0e:a3:da:6f:96:
         a0:77:9b:0a:c9:1f:d4:ed:43:54:eb:68:1f:d2:e7:26:ba:32:
         c2:fd:e4:b1:56:be:5c:9a:4d:2f:cd:5e:89:53:7c:15:63:7c:
         0b:74:ff:76:bb:d4:82:93:15:ec:91:41:de:5e:6a:0a:22:13:
         38:7c:7c:e2:ee:7f:2a:d1:43:8c:11:a4:4b:47:9a:84:6a:63:
         58:26:d3:4d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUVrZO/GP2JQVaYkYpsXGkxbBrHnAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVERTY0REJDNDA5ODg4MUYxMUI3MDEyM0RGNTE0RDM4
Rjc4ODFFRTAeFw0yNDA3MDEwMDU4NTRaFw0yNTA2MzAwMTAzNTRaMDMxMTAvBgNV
BAMTKEE3OTlCOUEzMUE3QUI5N0Q5OTEwQTFCN0NGMTk3MjU2MTc5NjBCN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwF39q69P+r0vrapzLd0r9x8G7
d+tRhNKv8kHc2awWxrD/oTKcFD2Q8p2fD6p15QVheg+PW7ZCr5ZPvAZ451L0FPOt
dg22U0ZN+V5xsigJQ3Q6HFAr4XWhm3kNLAm1AJtptRDkQzael8DF/P4qGZkByb/B
TRR84Ycrn0D7pCRKRJeHvzP5F4Cb8F9Ns9VdSSZGMyMiNer7/Dz9dT1V9H/IJCoG
PFlmx8rausOL4fOj5WVojnSqvfdd3tQwi391aWkUTuzUjMrzNX9KCArRwZT1TuGP
HJhM/vCwsRpK12HNHfrBjdbtHCvJTkYpxWSQcGkl8FN7rGCek9UVTtM6QGy3AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUp5m5oxp6uX2ZEKG3zxlyVheWC34wHwYDVR0j
BBgwFoAUnt5k28QJiIHxG3ASPfUU0494ge4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
OWFjYjRhOC03ODA0LTQ1MjYtODRkMi04NjliOTFhNjcxOWQvMC85RURFNjREQkM0
MDk4ODgxRjExQjcwMTIzREY1MTREMzhGNzg4MUVFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUVERTY0REJDNDA5ODg4MUYxMUI3MDEyM0RGNTE0RDM4Rjc4
ODFFRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY5YWNiNGE4LTc4MDQtNDUyNi04
NGQyLTg2OWI5MWE2NzE5ZC8wLzMyMzAzMjJlMzczMjJlMzIzMDMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzODMxMzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpIyTANBgkqhkiG
9w0BAQsFAAOCAQEAfHenBxth1jmx8w8X5o/I5PG0bT56qAmDL1v6KnouDiqZD+ww
NHzan4uBlXdBLAnrltJY8usp4VNy0icYTcbQPpZbGWBfEutXK5jzvHktDftdUdKf
IiqYTCl2vaGLa1z2Il3VGXbMdEyZNDs1XfirH4fbKJ+azG88iRFulOxeh62C3/nw
poXCv+KBlVENZosOLkCIQ1ZYaYoU6GpohM22tklU4bufU65fdC0AlZVwRw6j2m+W
oHebCskf1O1DVOtoH9LnJroywv3ksVa+XJpNL81eiVN8FWN8C3T/drvUgpMV7JFB
3l5qCiITOHx84u5/KtFDjBGkS0eahGpjWCbTTQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:57 2024 by rpki-client on console-fra.rpki-client.org