Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e39362e302f32342d3234203d3e203137393130.roa
File:                     3230322e3132372e39362e302f32342d3234203d3e203137393130.roa (raw, json)
Hash identifier:          C106cMZ7nVpbdEo6RtpPPocV8QkCM3iy9iSeYnPa1lI=
Subject key identifier:   A4:72:AD:E2:BF:BF:E5:F8:B4:E1:85:0D:27:41:28:6C:DD:06:7A:CD
Certificate issuer:       /CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
Certificate serial:       1CE99AD190F344570F334118B72C27CD925F43C8
Authority key identifier: 16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e39362e302f32342d3234203d3e203137393130.roa
Signing time:             Thu 24 Oct 2024 01:00:02 +0000
ROA not before:           Thu 24 Oct 2024 00:55:02 +0000
ROA not after:            Thu 23 Oct 2025 01:00:02 +0000
asID:                     17910
IP address blocks:        202.127.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl
                          rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e9:9a:d1:90:f3:44:57:0f:33:41:18:b7:2c:27:cd:92:5f:43:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1635F5E419798341BDC615D4E1C6AE340C34BEED
        Validity
            Not Before: Oct 24 00:55:02 2024 GMT
            Not After : Oct 23 01:00:02 2025 GMT
        Subject: CN=A472ADE2BFBFE5F8B4E1850D2741286CDD067ACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2c:9e:18:bc:a0:90:0f:4e:b4:d0:03:94:4b:
                    75:99:d1:d3:61:c7:16:e9:36:fb:bf:a9:65:e3:92:
                    33:0f:f7:2a:c1:cc:c8:75:12:8e:4d:da:b0:f2:79:
                    7c:7b:b3:1c:d1:52:ee:20:a2:90:23:b8:37:67:f0:
                    81:2e:fa:ef:d9:db:81:e5:84:6b:d0:59:09:b1:62:
                    87:48:f0:22:5f:57:21:f1:a5:85:b2:09:6b:d3:fb:
                    fe:2d:78:ef:b0:c9:e8:f7:60:28:56:ea:f8:28:3c:
                    be:0d:06:87:cf:44:c4:cb:f5:c0:12:1a:94:d0:8e:
                    44:63:7d:ae:cb:42:d2:7d:41:9b:e6:d1:bb:d2:f1:
                    d7:40:0a:70:9e:2f:cc:e3:5c:58:5c:75:43:d9:df:
                    a5:43:d3:2d:a8:36:6c:bf:6b:81:59:14:9c:cd:78:
                    05:da:83:88:6f:45:e4:c3:0e:ec:4f:a6:37:59:9c:
                    d9:9e:e3:b0:65:17:f3:6d:58:96:66:0a:38:d3:f2:
                    4d:28:87:8f:cb:39:a4:fa:34:b3:88:b5:e5:2b:35:
                    d8:c0:a3:97:a9:bd:d5:74:6f:d8:bb:2d:3f:a2:3a:
                    d9:dc:42:40:7a:77:bf:66:ff:a9:e4:90:07:7d:93:
                    2c:9f:e2:2d:e1:c2:06:dc:3d:72:bf:e8:8a:6c:22:
                    34:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:72:AD:E2:BF:BF:E5:F8:B4:E1:85:0D:27:41:28:6C:DD:06:7A:CD
            X509v3 Authority Key Identifier:
                keyid:16:35:F5:E4:19:79:83:41:BD:C6:15:D4:E1:C6:AE:34:0C:34:BE:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/1635F5E419798341BDC615D4E1C6AE340C34BEED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1635F5E419798341BDC615D4E1C6AE340C34BEED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86450032-5492-4a5a-943f-bdb473341233/0/3230322e3132372e39362e302f32342d3234203d3e203137393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.127.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:2d:bc:e6:9b:23:34:24:4c:39:1d:a5:38:19:eb:b2:74:82:
         71:da:a2:a1:7f:be:39:da:56:15:8e:fa:1b:cc:6e:9f:62:3c:
         62:81:99:d4:a1:80:e8:cc:cc:cf:06:e7:f2:12:a8:66:7c:f3:
         85:10:fd:ea:55:df:65:d5:c2:ad:8f:53:82:1e:b7:94:7a:0e:
         9c:90:5d:a4:33:ed:67:aa:fe:01:5d:8a:13:58:c3:d5:9a:bc:
         28:12:a3:89:78:c5:a8:26:16:fa:eb:9c:ad:31:9e:fc:c8:c0:
         9b:18:d3:d6:2b:12:16:31:60:e8:4b:71:a5:71:9b:5c:e1:9e:
         1a:08:90:4e:ba:be:b2:9a:76:ce:0c:d4:a2:1d:39:f3:cb:7e:
         4d:98:e9:6f:99:59:8c:9f:9c:3b:de:86:57:f1:8f:78:ed:4f:
         4e:92:a1:a3:ec:c5:6f:df:1a:0c:69:ec:88:7e:e5:ac:36:f2:
         41:81:22:0a:4d:b0:21:a3:08:42:94:00:d8:87:34:f0:52:fe:
         ac:74:dc:83:dd:9d:7d:f7:2b:ed:2c:f8:e0:d7:f2:c1:f1:36:
         e9:6e:8c:27:f1:4a:ee:f9:c7:0b:dc:6d:d9:6a:5c:e0:a7:ab:
         e2:79:5f:29:37:89:ba:8d:0a:7c:63:9e:0c:7b:3e:60:32:0d:
         5d:d0:08:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:42 2024 by rpki-client on console-fra.rpki-client.org