Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e3136322e3230382e302f32302d3234203d3e2039333431.roa
File:                     3230322e3136322e3230382e302f32302d3234203d3e2039333431.roa (raw, json)
Hash identifier:          X6KKM+lcIc4qVnTPoKV0grWhH5CLYvDoo8B4sfy5UoY=
Subject key identifier:   44:DF:4B:5B:19:68:70:98:31:8F:D9:FB:24:D2:73:F0:D6:17:98:DA
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       500EE5A55CA62241862B5FAC2E9EF53B066EB60B
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e3136322e3230382e302f32302d3234203d3e2039333431.roa
Signing time:             Tue 23 Apr 2024 03:00:01 +0000
ROA not before:           Tue 23 Apr 2024 02:55:01 +0000
ROA not after:            Tue 22 Apr 2025 03:00:01 +0000
asID:                     9341
IP address blocks:        202.162.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:0e:e5:a5:5c:a6:22:41:86:2b:5f:ac:2e:9e:f5:3b:06:6e:b6:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Apr 23 02:55:01 2024 GMT
            Not After : Apr 22 03:00:01 2025 GMT
        Subject: CN=44DF4B5B19687098318FD9FB24D273F0D61798DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8a:54:21:2b:a4:c2:ac:1e:74:0c:24:8f:13:
                    0c:f6:a4:29:79:ae:04:1e:8e:43:9b:97:e8:41:93:
                    cc:5c:db:82:ca:f1:8c:b6:cf:5d:ea:fd:3e:c0:cc:
                    7b:df:d4:63:b7:34:31:2b:25:99:e1:67:96:eb:af:
                    e4:f2:ba:25:ca:5d:5b:3f:d6:26:86:44:bc:ef:af:
                    1b:f9:a5:9b:46:3e:2d:0c:77:b4:02:94:38:b3:2d:
                    6e:57:ac:aa:d7:96:ba:cd:3e:0d:1a:6d:3c:be:73:
                    d0:00:4c:3d:d4:c5:a9:06:90:6e:3a:6d:85:3b:a7:
                    0e:23:49:e5:59:ed:21:3b:da:14:e9:33:71:2e:2d:
                    3c:e3:3c:3d:48:f9:7c:30:a4:a4:61:ab:f4:78:51:
                    63:f0:00:0e:55:91:3a:db:8c:11:40:46:40:13:81:
                    9a:ab:a8:f9:cf:44:7e:6e:5a:37:12:4a:ef:2b:7b:
                    39:ff:55:ae:6a:57:63:2a:f5:df:2b:6c:63:87:6e:
                    78:7c:5a:bb:0c:eb:04:67:79:ec:f8:5f:e5:86:11:
                    91:a4:4a:00:c1:96:de:95:18:a5:2a:96:0a:d8:43:
                    c0:26:d1:be:05:68:71:2d:28:2d:a7:d8:c5:d1:7e:
                    83:76:8b:58:ea:98:dc:1c:cc:e5:0e:f3:d8:d6:66:
                    7c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DF:4B:5B:19:68:70:98:31:8F:D9:FB:24:D2:73:F0:D6:17:98:DA
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e3136322e3230382e302f32302d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.162.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         01:bd:11:de:7e:4d:7b:c9:5f:e2:37:7c:c8:17:80:47:14:d0:
         1d:f9:dc:49:15:9a:bb:1f:4c:4f:15:23:2f:06:6f:a0:60:58:
         f9:1e:bb:16:77:71:67:8d:89:73:d3:1c:17:16:3a:79:f9:1b:
         71:da:e8:45:8a:86:06:37:9f:40:1b:d5:84:f1:13:ab:e4:29:
         2f:5d:91:5a:64:bb:d0:26:00:11:51:9c:e5:e3:cd:f6:6e:ac:
         be:3a:6b:9f:03:3c:18:0b:16:fd:c6:2b:3d:89:2c:5a:0d:d4:
         f9:5e:e5:b8:61:15:64:cc:c4:c7:d0:1d:33:52:57:e9:a1:a6:
         45:c5:97:ef:fd:e9:5a:5c:cd:d8:8d:e3:e2:21:62:3b:90:15:
         d7:62:f5:00:80:36:c4:de:66:df:e4:82:f8:52:00:d4:7a:05:
         22:45:38:aa:2d:30:83:9a:e9:77:f8:39:ec:ed:b2:d7:e7:66:
         37:50:8e:b7:ff:e7:85:1a:ab:e3:9e:b2:6d:8b:c5:ea:6c:aa:
         42:c7:84:04:4c:42:57:7c:57:87:3e:0c:e4:84:38:47:2c:08:
         e5:2a:d0:92:19:e5:de:db:b3:61:bd:c7:88:de:9c:6a:56:d4:
         33:1e:72:dc:c8:7f:8a:8f:83:71:dc:57:d9:c9:d4:f4:d4:e0:
         0f:6a:5a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:17 2024 by rpki-client on console-ams.rpki-client.org