Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230342e302f32332d3233203d3e203538353532.roa
File:                     3230322e37322e3230342e302f32332d3233203d3e203538353532.roa (raw, json)
Hash identifier:          84NHgJQYjlJ/pmSiSulvDHOQRv5wUGvBGEJEJ98qS5M=
Subject key identifier:   08:7B:19:EE:04:9D:66:C4:3D:41:EF:22:84:DE:08:4C:96:4B:9B:E0
Certificate issuer:       /CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
Certificate serial:       74F74AEB2933270EDF729E9850D43B356D446A68
Authority key identifier: 9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230342e302f32332d3233203d3e203538353532.roa
Signing time:             Mon 01 Jul 2024 01:03:53 +0000
ROA not before:           Mon 01 Jul 2024 00:58:53 +0000
ROA not after:            Mon 30 Jun 2025 01:03:53 +0000
asID:                     58552
IP address blocks:        202.72.204.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl
                          rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f7:4a:eb:29:33:27:0e:df:72:9e:98:50:d4:3b:35:6d:44:6a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9EDE64DBC4098881F11B70123DF514D38F7881EE
        Validity
            Not Before: Jul  1 00:58:53 2024 GMT
            Not After : Jun 30 01:03:53 2025 GMT
        Subject: CN=087B19EE049D66C43D41EF2284DE084C964B9BE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:75:72:10:66:ce:a1:33:1a:65:b2:5e:04:c7:
                    16:e8:99:78:fb:a5:43:34:aa:2b:c0:b5:e7:f1:43:
                    ac:bb:ea:92:4d:48:9d:6a:36:fd:10:f2:e7:7a:23:
                    b7:b7:b2:31:3e:2d:c3:04:41:61:ca:65:92:b6:15:
                    0e:6c:ed:53:d0:3d:a9:04:b6:7a:f8:99:79:4e:2e:
                    66:dd:b3:83:70:08:dc:91:36:c8:45:af:a2:3d:c5:
                    71:77:de:2c:30:80:1e:72:1d:1e:65:d2:6b:6d:b3:
                    6e:0e:d4:99:6f:01:07:c7:b7:da:5f:9d:7b:a7:2f:
                    fe:7d:c5:f7:81:7e:80:0b:15:6e:73:78:eb:c7:c7:
                    f2:e6:01:02:70:7e:02:39:0b:50:56:2d:00:48:26:
                    0f:d0:5c:98:2b:52:8e:14:86:79:a5:8c:73:7d:08:
                    c9:52:34:98:f3:76:dc:df:db:fc:38:38:12:87:25:
                    50:4d:12:e6:a2:2e:00:c1:a8:6d:e4:85:66:ee:44:
                    ab:87:b7:b8:ac:c0:e1:15:f7:bd:08:8d:9b:27:e7:
                    13:84:73:10:af:ec:db:a3:f9:d0:81:5e:65:60:a7:
                    c8:f0:8b:51:6b:3c:3c:3a:8b:3e:25:06:af:98:d2:
                    67:25:25:fa:dc:4d:a2:32:ac:c0:0a:b9:cc:43:0c:
                    e8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:7B:19:EE:04:9D:66:C4:3D:41:EF:22:84:DE:08:4C:96:4B:9B:E0
            X509v3 Authority Key Identifier:
                keyid:9E:DE:64:DB:C4:09:88:81:F1:1B:70:12:3D:F5:14:D3:8F:78:81:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/9EDE64DBC4098881F11B70123DF514D38F7881EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9EDE64DBC4098881F11B70123DF514D38F7881EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/69acb4a8-7804-4526-84d2-869b91a6719d/0/3230322e37322e3230342e302f32332d3233203d3e203538353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.72.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:d2:0a:08:2c:12:dc:b2:27:ed:d1:b3:f6:9d:be:37:f6:d9:
         e8:90:4f:21:b3:84:5b:2e:9a:e3:0a:65:32:ed:ae:0e:16:1c:
         9e:e3:00:c2:f5:7f:79:ed:07:7e:a3:e2:da:ba:a5:2c:55:40:
         1c:25:d6:20:33:ea:1c:46:9a:3a:5f:ce:a7:4d:85:ef:67:8c:
         62:47:05:e7:89:47:5d:de:75:7e:52:dd:c0:97:4f:35:6c:27:
         f0:b5:fe:a2:91:c8:e9:98:5a:a1:b9:6a:a8:80:78:2b:a0:4e:
         53:2e:50:56:17:77:33:0a:a6:d4:d7:be:cd:3b:a0:be:3e:45:
         3c:b4:a0:b0:b5:60:47:8e:51:75:10:80:5b:a7:51:c0:4a:6b:
         2b:2c:f5:e6:e0:d6:78:f6:be:ac:70:f4:53:89:9d:c4:07:28:
         0a:02:a5:1b:3c:7f:ce:03:c0:9f:a2:b2:a4:5a:f1:49:17:c1:
         8d:05:98:9c:55:bb:88:79:ba:29:f6:81:0b:26:86:98:61:8b:
         75:29:01:fb:f1:1d:a9:8d:0a:ae:c2:a5:17:78:69:6e:bd:1a:
         7e:c7:bc:b7:34:1f:d0:e5:df:99:c2:d3:f0:f5:4c:31:32:32:
         50:9c:a6:f6:6e:71:b0:dd:f5:49:b0:6d:17:15:05:24:27:71:
         f5:c7:3b:0c
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUdPdK6ykzJw7fcp6YUNQ7NW1EamgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUVERTY0REJDNDA5ODg4MUYxMUI3MDEyM0RGNTE0RDM4
Rjc4ODFFRTAeFw0yNDA3MDEwMDU4NTNaFw0yNTA2MzAwMTAzNTNaMDMxMTAvBgNV
BAMTKDA4N0IxOUVFMDQ5RDY2QzQzRDQxRUYyMjg0REUwODRDOTY0QjlCRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDadXIQZs6hMxplsl4ExxbomXj7
pUM0qivAtefxQ6y76pJNSJ1qNv0Q8ud6I7e3sjE+LcMEQWHKZZK2FQ5s7VPQPakE
tnr4mXlOLmbds4NwCNyRNshFr6I9xXF33iwwgB5yHR5l0mtts24O1JlvAQfHt9pf
nXunL/59xfeBfoALFW5zeOvHx/LmAQJwfgI5C1BWLQBIJg/QXJgrUo4UhnmljHN9
CMlSNJjzdtzf2/w4OBKHJVBNEuaiLgDBqG3khWbuRKuHt7iswOEV970IjZsn5xOE
cxCv7Nuj+dCBXmVgp8jwi1FrPDw6iz4lBq+Y0mclJfrcTaIyrMAKucxDDOibAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUCHsZ7gSdZsQ9Qe8ihN4ITJZLm+AwHwYDVR0j
BBgwFoAUnt5k28QJiIHxG3ASPfUU0494ge4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
OWFjYjRhOC03ODA0LTQ1MjYtODRkMi04NjliOTFhNjcxOWQvMC85RURFNjREQkM0
MDk4ODgxRjExQjcwMTIzREY1MTREMzhGNzg4MUVFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUVERTY0REJDNDA5ODg4MUYxMUI3MDEyM0RGNTE0RDM4Rjc4
ODFFRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY5YWNiNGE4LTc4MDQtNDUyNi04
NGQyLTg2OWI5MWE2NzE5ZC8wLzMyMzAzMjJlMzczMjJlMzIzMDM0MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzUzODM1MzUzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcpIzDANBgkqhkiG
9w0BAQsFAAOCAQEAw9IKCCwS3LIn7dGz9p2+N/bZ6JBPIbOEWy6a4wplMu2uDhYc
nuMAwvV/ee0HfqPi2rqlLFVAHCXWIDPqHEaaOl/Op02F72eMYkcF54lHXd51flLd
wJdPNWwn8LX+opHI6ZhaoblqqIB4K6BOUy5QVhd3Mwqm1Ne+zTugvj5FPLSgsLVg
R45RdRCAW6dRwEprKyz15uDWePa+rHD0U4mdxAcoCgKlGzx/zgPAn6KypFrxSRfB
jQWYnFW7iHm6KfaBCyaGmGGLdSkB+/EdqY0KrsKlF3hpbr0afse8tzQf0OXfmcLT
8PVMMTIyUJym9m5xsN31SbBtFxUFJCdx9cc7DA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:57 2024 by rpki-client on console-fra.rpki-client.org