Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37372e302f32342d3234203d3e203233363935.roa
File:                     3230322e3137332e37372e302f32342d3234203d3e203233363935.roa (raw, json)
Hash identifier:          3Ne496vjbfG9KlK/LqKPIj6I7cF9lmQT0A8f4SKPiXE=
Subject key identifier:   05:7D:53:6E:C6:91:D5:EE:52:44:D2:81:B0:F4:52:98:0E:9A:BC:4C
Certificate issuer:       /CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C
Certificate serial:       5E48215E1DBAE9951AD55369C3EB4F3216269C7E
Authority key identifier: 41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37372e302f32342d3234203d3e203233363935.roa
Signing time:             Tue 17 Oct 2023 15:56:41 +0000
ROA not before:           Tue 17 Oct 2023 15:51:41 +0000
ROA not after:            Tue 15 Oct 2024 15:56:41 +0000
asID:                     23695
IP address blocks:        202.173.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl
                          rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 03:19:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:48:21:5e:1d:ba:e9:95:1a:d5:53:69:c3:eb:4f:32:16:26:9c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41E09326F68CE0113635EACAF4E37394AE4E2D8C
        Validity
            Not Before: Oct 17 15:51:41 2023 GMT
            Not After : Oct 15 15:56:41 2024 GMT
        Subject: CN=057D536EC691D5EE5244D281B0F452980E9ABC4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:48:f0:f5:7f:57:df:ce:91:fa:8c:7e:af:c0:
                    32:dd:88:83:62:5c:17:81:f1:cb:9e:27:db:a8:39:
                    5f:46:08:af:38:91:0b:ba:d6:c9:e6:5f:cc:b5:6c:
                    be:0b:15:6b:56:18:7d:46:94:32:cc:ee:d1:97:f5:
                    b2:52:87:39:85:88:83:13:27:5f:00:ca:b9:d2:4c:
                    1b:c5:d0:f2:59:bd:d1:ab:a6:cb:6b:4a:80:2c:7f:
                    ce:9b:3b:4f:c3:7b:99:0e:3e:c6:10:9b:d8:00:19:
                    af:d3:e5:32:31:e0:f5:96:ab:7f:30:5c:be:6c:ae:
                    d7:a5:54:1f:12:3e:74:54:b0:f6:5a:bc:aa:38:34:
                    ba:6c:63:03:2d:51:9d:b0:4b:41:aa:0e:36:a4:08:
                    45:cf:ca:20:73:13:80:53:57:e5:a1:98:72:75:6a:
                    b8:a5:ad:df:e5:81:04:2a:02:89:e2:a5:cc:bc:7c:
                    de:aa:dd:32:b8:7e:25:50:2d:61:a6:18:07:6f:8a:
                    2a:7b:58:88:7b:c2:35:9c:19:fd:5b:f0:b2:cf:81:
                    41:b8:6b:77:e3:20:59:c6:f5:6b:05:1c:7f:64:b6:
                    81:0e:c0:9f:05:74:84:11:af:ff:d6:3f:c2:1a:67:
                    c0:66:28:7f:c5:86:d1:de:01:64:1c:58:62:2d:9e:
                    35:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7D:53:6E:C6:91:D5:EE:52:44:D2:81:B0:F4:52:98:0E:9A:BC:4C
            X509v3 Authority Key Identifier:
                keyid:41:E0:93:26:F6:8C:E0:11:36:35:EA:CA:F4:E3:73:94:AE:4E:2D:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/41E09326F68CE0113635EACAF4E37394AE4E2D8C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41E09326F68CE0113635EACAF4E37394AE4E2D8C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6f0f2bd9-42ae-449a-8d57-b26da04d7ee1/0/3230322e3137332e37372e302f32342d3234203d3e203233363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.173.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:ef:b9:c7:b1:b5:92:42:3b:b0:51:d9:de:b6:0b:63:08:ae:
         31:89:60:2e:69:a2:19:1d:8b:09:2b:b5:87:96:cf:72:1d:f5:
         71:b7:fb:06:24:9a:82:85:05:2b:7e:67:9e:0b:08:bc:ab:ed:
         9e:8a:74:18:e3:3b:75:79:68:06:b4:cb:3a:d3:26:01:48:ce:
         88:4b:aa:a2:35:bc:b9:fa:20:bf:4e:4c:1b:76:d8:31:2f:9f:
         39:f6:f4:24:28:6d:27:09:25:47:2f:72:e4:6a:6a:64:d3:b5:
         64:fe:b7:84:15:15:bc:ed:0d:46:ed:00:c9:34:37:15:a9:ff:
         43:1f:0e:ff:79:2c:8a:42:7b:58:9e:cf:91:5a:b4:5c:01:93:
         47:86:03:4c:f6:18:60:e5:7e:48:77:16:51:9a:62:dd:22:ba:
         ba:55:6f:30:ce:f2:94:5d:93:b9:48:ca:ca:ea:5e:e3:67:ed:
         ee:74:1a:1d:6f:91:7a:1f:7e:f0:f2:2a:d1:66:b8:86:fc:e2:
         8a:94:25:ec:30:bc:b0:46:85:d8:be:db:6b:2a:92:42:8e:6d:
         ba:b2:17:07:54:8b:ac:75:9f:f1:5d:b5:78:ba:e9:77:0f:ae:
         cd:2c:99:88:26:a0:6f:0c:26:0e:9e:59:6a:f5:98:5b:6e:84:
         a1:3f:dc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 22:12:28 2024 by rpki-client on console-fra.rpki-client.org