Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e35372e31372e302f32342d3234203d3e2039333431.roa
File:                     3230322e35372e31372e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          Q2rXrXCI2eJuCRWTx6dBWRhkj7Ml3GSs4OfWCZHWFMg=
Subject key identifier:   B1:A7:D3:13:23:C3:41:E6:FE:24:B8:38:A3:38:E3:94:AD:3F:FD:6E
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       0264D507E12DF20431C465277097B050C17D6EDC
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e35372e31372e302f32342d3234203d3e2039333431.roa
Signing time:             Mon 16 Oct 2023 04:29:41 +0000
ROA not before:           Mon 16 Oct 2023 04:24:41 +0000
ROA not after:            Mon 14 Oct 2024 04:29:41 +0000
asID:                     9341
IP address blocks:        202.57.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 03:19:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:64:d5:07:e1:2d:f2:04:31:c4:65:27:70:97:b0:50:c1:7d:6e:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Oct 16 04:24:41 2023 GMT
            Not After : Oct 14 04:29:41 2024 GMT
        Subject: CN=B1A7D31323C341E6FE24B838A338E394AD3FFD6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4e:fd:ac:4c:af:83:4b:26:48:d9:10:fb:3c:
                    ad:0f:0c:53:0b:75:35:0b:97:9a:ca:8d:fd:fc:2c:
                    3b:10:e6:57:df:10:35:82:6c:b3:2a:e5:0a:4f:c1:
                    21:46:0a:e5:cb:18:91:5a:78:86:90:fc:bc:69:60:
                    31:50:87:ae:ec:b7:6a:33:da:a4:80:41:c6:55:61:
                    0e:0d:06:b1:a8:c6:a3:5d:80:5e:74:c4:ae:a5:25:
                    a0:bd:9f:03:c1:65:e3:b6:43:9f:09:2c:c2:b0:34:
                    77:d6:fa:6c:f2:67:85:f6:17:d2:a2:ee:4d:80:f7:
                    67:a4:95:2b:c3:67:b6:f8:27:0e:1e:75:1b:87:15:
                    98:05:1e:11:92:2c:4d:0d:47:38:91:e8:80:a0:0a:
                    3c:d4:fe:89:26:e7:1c:04:5c:21:7c:6a:e6:19:a7:
                    da:f8:96:10:54:b4:94:73:d7:13:9f:16:27:9a:d8:
                    cf:44:ba:c4:7f:33:9c:4d:63:6d:52:c6:08:d6:ba:
                    2f:a7:6d:73:13:d9:e8:5c:ee:0e:74:43:e4:1f:68:
                    1c:0c:aa:7d:f4:7f:0d:cc:8c:09:ca:7f:e7:9a:33:
                    b4:44:a6:fc:41:c1:12:36:88:2d:51:e7:28:df:82:
                    f8:2a:77:21:87:53:47:89:ed:6e:b0:cf:57:30:44:
                    40:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A7:D3:13:23:C3:41:E6:FE:24:B8:38:A3:38:E3:94:AD:3F:FD:6E
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e35372e31372e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.57.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:9c:78:01:95:87:64:66:ca:bb:6e:ca:fb:4f:32:d4:78:24:
         4e:45:59:f2:b3:e2:3f:ed:32:5d:22:08:a2:e3:72:bf:ae:b6:
         9a:d6:50:01:3b:89:55:60:98:5d:ba:38:82:06:b0:c5:18:c5:
         36:16:56:6f:b6:36:d1:c6:c9:19:22:2d:d8:b9:2a:97:e2:1d:
         28:3f:f5:aa:ae:35:98:5a:77:5d:9b:6a:08:99:0b:55:69:37:
         09:d5:e1:95:b2:03:95:89:94:ba:14:b5:d0:b9:a3:e0:e9:18:
         84:85:f6:a4:ec:e8:74:51:7f:7d:0f:70:59:be:9d:5d:60:92:
         20:c3:5c:ad:ef:0f:df:12:94:03:15:bf:d7:5b:2b:32:56:a5:
         28:3f:fa:0e:46:69:30:75:c5:50:76:da:7e:93:18:5a:eb:e5:
         c3:c4:b1:79:6a:0a:93:a6:58:a5:cf:bf:e0:9a:c7:66:b4:6f:
         97:21:51:8d:74:0a:c4:68:2a:d5:74:ce:68:dd:44:71:83:28:
         88:34:37:28:0b:53:ef:35:28:2b:4a:6d:26:b7:b0:71:9c:35:
         aa:76:66:2a:c7:db:79:03:48:bc:0c:d5:1a:b2:5d:6d:5f:fe:
         ac:01:37:ec:17:c8:e4:95:c6:bb:62:91:d3:9d:db:17:c0:23:
         35:07:22:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 22:12:28 2024 by rpki-client on console-fra.rpki-client.org