Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa
File:                     3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa (raw, json)
Hash identifier:          bEXjgt5oe/QCk1NlQcPsjuArMBUfj88EZpYXft80tYY=
Subject key identifier:   B8:84:3F:83:0A:0E:2C:F0:A1:1F:71:98:F1:EB:B5:2F:1D:2D:A6:4B
Certificate issuer:       /CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
Certificate serial:       319EBC753A7E70132DD8D6A1A6B4AC5CB4978424
Authority key identifier: 16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa
Signing time:             Thu 24 Oct 2024 01:00:02 +0000
ROA not before:           Thu 24 Oct 2024 00:55:02 +0000
ROA not after:            Thu 23 Oct 2025 01:00:02 +0000
asID:                     17910
IP address blocks:        202.127.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl
                          rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:9e:bc:75:3a:7e:70:13:2d:d8:d6:a1:a6:b4:ac:5c:b4:97:84:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
        Validity
            Not Before: Oct 24 00:55:02 2024 GMT
            Not After : Oct 23 01:00:02 2025 GMT
        Subject: CN=B8843F830A0E2CF0A11F7198F1EBB52F1D2DA64B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:86:84:24:1f:44:0b:31:07:34:a2:95:93:18:
                    0c:04:50:bb:6a:19:21:55:0d:80:58:97:a8:7a:d8:
                    03:db:f6:53:0a:81:af:0e:eb:1d:c2:90:03:c5:a6:
                    5a:f7:7c:49:3a:39:48:73:05:45:d0:ee:61:28:66:
                    e0:ee:40:b9:8b:ab:bb:c3:de:06:84:e4:e1:7e:e1:
                    32:2c:14:72:ee:2b:4b:d1:77:ab:0c:a4:93:83:69:
                    0d:40:ac:af:75:05:13:20:e4:42:6a:45:e3:0f:d7:
                    40:6e:7a:6f:5f:2c:b6:4c:ae:dc:fe:b5:9c:32:bb:
                    01:46:3f:21:88:cd:17:38:d9:e9:cb:44:da:c9:11:
                    4b:c4:e9:04:92:03:62:40:ff:e1:40:dc:68:e9:a4:
                    49:18:56:60:1b:f8:06:2d:a4:05:c2:7d:bf:61:41:
                    fb:02:e0:1b:68:02:43:42:5e:b2:73:1c:25:07:e9:
                    99:59:6f:3b:42:91:a5:ad:7f:2f:b6:4d:95:d8:61:
                    79:eb:47:8a:a9:59:6d:36:14:19:10:60:32:12:06:
                    b8:bf:d0:c2:ed:b1:7b:8f:f8:7d:5f:89:44:bd:b7:
                    6b:f0:18:6b:6f:e5:f6:45:79:0e:e7:2e:db:68:56:
                    af:78:13:16:07:58:8f:09:79:34:be:34:1e:c8:e1:
                    4c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:84:3F:83:0A:0E:2C:F0:A1:1F:71:98:F1:EB:B5:2F:1D:2D:A6:4B
            X509v3 Authority Key Identifier:
                keyid:16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e3130302e302f32342d3234203d3e203137393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.127.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:1d:79:e4:1b:41:9c:de:49:0e:36:a1:2f:4f:a1:bb:e5:7b:
         1e:1f:e1:87:ca:2b:59:c8:af:c4:3d:52:46:f7:09:50:95:7d:
         19:b7:c4:28:f8:0e:09:44:cd:c2:93:3f:09:a2:50:da:c8:1a:
         d0:a4:16:e3:00:55:10:6f:f9:6e:e8:fa:b8:8e:87:6b:62:36:
         2a:2a:30:cb:fd:ba:2f:e6:5e:15:eb:2a:59:d1:bc:f6:90:58:
         eb:39:30:d4:79:81:de:7f:7c:a3:40:c0:d3:99:5f:4e:fb:9a:
         b3:6c:7e:6c:6e:b9:cb:79:22:12:8a:88:11:0b:67:ae:b9:6a:
         c1:ac:23:39:2a:0a:78:78:89:84:4e:17:71:8b:89:97:b1:4e:
         c9:a7:43:db:f3:b8:62:58:45:39:81:4b:0a:32:1a:66:5a:96:
         a3:f9:8c:7b:cd:99:48:fd:07:21:9a:be:87:21:83:d0:69:6f:
         9b:0a:30:e5:a6:2c:a5:13:5d:fe:07:4d:28:8f:25:ef:df:c6:
         b3:15:f4:80:bf:6c:e8:2a:c1:24:32:3c:01:3c:5c:4b:ae:d6:
         f1:64:af:36:30:1c:97:ea:d8:93:da:f1:10:47:30:c6:76:06:
         32:b8:b9:9c:4a:0f:a6:ae:da:b9:10:af:55:43:35:8a:6d:05:
         5b:d5:a5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org