Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3230322e3137392e3139302e302f32342d3234203d3e203338373530.roa
File:                     3230322e3137392e3139302e302f32342d3234203d3e203338373530.roa (raw, json)
Hash identifier:          LCsoLknUnU7G3Bc9jFbXSlpNBFmtmkPh2RKSBWWrYSk=
Subject key identifier:   68:72:C7:FC:33:4A:47:5B:D3:11:C9:33:38:06:B5:CF:04:EB:BE:CC
Certificate issuer:       /CN=D55BE8217A22212F977BD95B41F7C9EE9DE3201B
Certificate serial:       670B6827F2CA436E4AE2E8C641499569A552C45B
Authority key identifier: D5:5B:E8:21:7A:22:21:2F:97:7B:D9:5B:41:F7:C9:EE:9D:E3:20:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3230322e3137392e3139302e302f32342d3234203d3e203338373530.roa
Signing time:             Mon 11 Dec 2023 07:47:18 +0000
ROA not before:           Mon 11 Dec 2023 07:42:18 +0000
ROA not after:            Mon 09 Dec 2024 07:47:18 +0000
asID:                     38750
IP address blocks:        202.179.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl
                          rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 07:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:0b:68:27:f2:ca:43:6e:4a:e2:e8:c6:41:49:95:69:a5:52:c4:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55BE8217A22212F977BD95B41F7C9EE9DE3201B
        Validity
            Not Before: Dec 11 07:42:18 2023 GMT
            Not After : Dec  9 07:47:18 2024 GMT
        Subject: CN=6872C7FC334A475BD311C9333806B5CF04EBBECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:4c:cf:9b:59:d4:51:d7:77:85:1a:b6:c1:
                    2a:ac:ed:72:91:91:2c:5b:6a:c5:50:ae:37:58:be:
                    ad:99:88:d7:03:f6:ac:7c:79:c7:91:92:03:86:91:
                    e3:fb:3d:d7:c9:d1:64:58:df:8d:d7:86:1d:b8:b9:
                    0d:9d:5c:b3:e0:2c:54:df:69:dc:b0:33:d5:8f:c3:
                    43:cf:57:59:66:30:45:54:6d:40:d5:99:e1:6b:5f:
                    ad:61:6f:50:d9:f5:4e:a1:3a:dd:48:f7:6b:0d:73:
                    4c:12:8f:16:b2:f3:0e:e8:74:e3:c3:cb:b6:8d:fe:
                    66:47:fa:b0:eb:2d:86:42:5e:16:c4:fa:02:3a:2f:
                    0c:4d:1d:5b:11:4b:a3:e8:75:dc:f5:d3:c7:9d:4f:
                    24:40:eb:cc:6f:23:e3:4c:03:48:5b:cb:98:26:a6:
                    f6:c3:6e:74:e9:cf:f8:04:ee:07:03:82:0d:3a:0e:
                    ec:e9:b5:d0:00:83:6f:a7:56:74:07:ce:ea:29:2a:
                    88:43:d4:b8:c6:d3:39:66:6d:51:26:ec:46:77:99:
                    77:1f:c0:24:c7:67:a9:39:08:17:33:0b:72:61:26:
                    15:5b:43:44:f0:3c:08:5f:28:3c:39:a0:1d:a5:ed:
                    57:10:65:fd:a8:0f:87:0a:b1:bd:44:61:ca:59:9e:
                    ac:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:72:C7:FC:33:4A:47:5B:D3:11:C9:33:38:06:B5:CF:04:EB:BE:CC
            X509v3 Authority Key Identifier:
                keyid:D5:5B:E8:21:7A:22:21:2F:97:7B:D9:5B:41:F7:C9:EE:9D:E3:20:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D55BE8217A22212F977BD95B41F7C9EE9DE3201B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70f5cfdb-7987-4351-bc2e-66c24f49f440/0/3230322e3137392e3139302e302f32342d3234203d3e203338373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.179.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:43:c6:e9:65:61:0a:5f:db:21:5d:d0:67:3e:62:a4:d1:4c:
         f0:1c:75:fd:1b:05:d5:f6:26:f1:35:8a:ea:ae:be:13:d5:94:
         e4:73:68:a8:fa:91:4f:b5:75:e4:ea:78:f5:28:d0:38:ee:9b:
         bb:4f:f8:c4:2a:20:34:ab:da:f6:67:aa:7d:70:cb:2d:91:09:
         6d:b6:da:84:1b:63:21:2d:f5:08:a6:72:b8:84:ec:a1:50:ba:
         82:2f:d1:81:0a:8f:fe:f3:0d:ff:ca:ff:7f:b2:8f:16:db:ab:
         9b:82:6c:d6:cf:ca:79:7e:5b:06:ad:93:2d:73:24:6c:be:d0:
         1b:b8:f8:b5:5d:11:14:1e:0a:07:e8:52:18:46:c2:3a:14:38:
         70:fb:da:31:7c:c9:09:b4:cf:d8:77:54:45:ef:44:6f:18:4c:
         de:3c:ed:1d:5e:97:26:9b:63:5a:62:47:65:08:39:c2:da:7b:
         af:66:96:e4:aa:9f:62:6a:52:06:26:b1:35:6e:20:91:85:d7:
         4a:ca:64:7f:27:3b:8f:64:f1:c7:92:e0:b1:b4:1f:a3:db:9e:
         4a:40:96:e4:f3:0d:c1:57:ce:c8:7f:c3:fe:b7:79:2b:b5:8b:
         b2:af:e7:42:97:61:a6:34:ee:4f:f2:57:86:98:ac:df:5f:cc:
         84:3e:66:4e
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUZwtoJ/LKQ25K4ujGQUmVaaVSxFswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU1QkU4MjE3QTIyMjEyRjk3N0JEOTVCNDFGN0M5RUU5
REUzMjAxQjAeFw0yMzEyMTEwNzQyMThaFw0yNDEyMDkwNzQ3MThaMDMxMTAvBgNV
BAMTKDY4NzJDN0ZDMzM0QTQ3NUJEMzExQzkzMzM4MDZCNUNGMDRFQkJFQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCAkzPm1nUUdd3hRq2wSqs7XKR
kSxbasVQrjdYvq2ZiNcD9qx8eceRkgOGkeP7PdfJ0WRY343Xhh24uQ2dXLPgLFTf
adywM9WPw0PPV1lmMEVUbUDVmeFrX61hb1DZ9U6hOt1I92sNc0wSjxay8w7odOPD
y7aN/mZH+rDrLYZCXhbE+gI6LwxNHVsRS6Poddz108edTyRA68xvI+NMA0hby5gm
pvbDbnTpz/gE7gcDgg06DuzptdAAg2+nVnQHzuopKohD1LjG0zlmbVEm7EZ3mXcf
wCTHZ6k5CBczC3JhJhVbQ0TwPAhfKDw5oB2l7VcQZf2oD4cKsb1EYcpZnqzZAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUaHLH/DNKR1vTEckzOAa1zwTrvswwHwYDVR0j
BBgwFoAU1VvoIXoiIS+Xe9lbQffJ7p3jIBswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
MGY1Y2ZkYi03OTg3LTQzNTEtYmMyZS02NmMyNGY0OWY0NDAvMC9ENTVCRTgyMTdB
MjIyMTJGOTc3QkQ5NUI0MUY3QzlFRTlERTMyMDFCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDU1QkU4MjE3QTIyMjEyRjk3N0JEOTVCNDFGN0M5RUU5REUz
MjAxQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcwZjVjZmRiLTc5ODctNDM1MS1i
YzJlLTY2YzI0ZjQ5ZjQ0MC8wLzMyMzAzMjJlMzEzNzM5MmUzMTM5MzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzczNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyrO+MA0GCSqG
SIb3DQEBCwUAA4IBAQBVQ8bpZWEKX9shXdBnPmKk0UzwHHX9GwXV9ibxNYrqrr4T
1ZTkc2io+pFPtXXk6nj1KNA47pu7T/jEKiA0q9r2Z6p9cMstkQltttqEG2MhLfUI
pnK4hOyhULqCL9GBCo/+8w3/yv9/so8W26ubgmzWz8p5flsGrZMtcyRsvtAbuPi1
XREUHgoH6FIYRsI6FDhw+9oxfMkJtM/Yd1RF70RvGEzePO0dXpcmm2NaYkdlCDnC
2nuvZpbkqp9ialIGJrE1biCRhddKymR/JzuPZPHHkuCxtB+j255KQJbk8w3BV87I
f8P+t3krtYuyr+dCl2GmNO5P8leGmKzfX8yEPmZO
-----END CERTIFICATE-----
Generated at Fri May 31 08:37:56 2024 by rpki-client on console-fra.rpki-client.org