Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36352e302f32342d3234203d3e20313431303833.roa
File:                     3230322e34372e36352e302f32342d3234203d3e20313431303833.roa (raw, json)
Hash identifier:          1eioSWn2KmSTzq8oYAH7AK+QaRN6bCbCO7UDsdTwSls=
Subject key identifier:   CC:FB:30:E2:01:96:CD:F7:D2:85:32:FF:D0:65:49:63:63:57:E3:A2
Certificate issuer:       /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial:       4605AB3F70A84B51564A6004BCA8317D928DA3A2
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36352e302f32342d3234203d3e20313431303833.roa
Signing time:             Wed 11 Sep 2024 07:44:07 +0000
ROA not before:           Wed 11 Sep 2024 07:39:07 +0000
ROA not after:            Wed 10 Sep 2025 07:44:07 +0000
asID:                     141083
IP address blocks:        202.47.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
                          rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 18:05:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:05:ab:3f:70:a8:4b:51:56:4a:60:04:bc:a8:31:7d:92:8d:a3:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
        Validity
            Not Before: Sep 11 07:39:07 2024 GMT
            Not After : Sep 10 07:44:07 2025 GMT
        Subject: CN=CCFB30E20196CDF7D28532FFD06549636357E3A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d7:f2:e0:ef:54:ea:66:70:3f:a2:2c:74:92:
                    85:68:90:c8:84:98:1e:3a:14:da:78:79:89:ba:cd:
                    fc:e2:72:2b:5b:66:72:c4:7a:75:c8:94:86:7c:d4:
                    6a:a3:ea:6f:b5:64:eb:41:c6:cd:c5:41:5d:d7:fc:
                    05:50:c3:85:12:57:4e:dd:f2:fb:81:81:f4:4f:c9:
                    d9:f6:e2:46:07:3a:2a:61:2b:e8:17:79:1b:cc:2d:
                    ca:d3:35:4a:9f:de:58:60:44:a2:ea:1b:29:fe:87:
                    f1:7a:0c:de:7e:2b:63:96:37:0c:81:2e:b2:76:1a:
                    6b:c5:b3:c4:00:0b:b0:26:1c:e4:be:52:27:f5:ff:
                    11:df:44:2c:45:71:ff:ae:46:be:12:d3:9e:f1:a9:
                    d3:dd:75:5a:e2:52:36:c1:4a:b8:0a:6f:c1:65:78:
                    24:17:5d:ae:07:31:32:92:76:72:00:bd:43:55:d9:
                    16:61:4a:b4:85:df:4f:d2:3b:bd:0d:90:b5:4f:f1:
                    03:73:ed:71:6a:cf:f7:ca:61:60:7e:31:7a:f0:9b:
                    02:13:db:04:f4:a3:1c:7b:fb:fa:35:36:e2:90:16:
                    14:a3:bf:a3:08:ab:27:95:66:4d:8a:c6:a1:39:60:
                    85:10:25:3d:c8:ed:cc:fc:2d:d8:84:5b:1b:c5:f2:
                    9c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FB:30:E2:01:96:CD:F7:D2:85:32:FF:D0:65:49:63:63:57:E3:A2
            X509v3 Authority Key Identifier:
                keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e36352e302f32342d3234203d3e20313431303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.47.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:56:f0:fa:e4:54:79:35:c8:42:89:62:92:ec:38:da:b8:8e:
         20:e0:48:2b:03:e0:8d:92:e1:68:3c:9b:2c:00:6a:3e:c3:3c:
         08:46:23:dd:c9:2f:bb:32:88:ac:13:9f:f3:5f:4f:92:bb:11:
         80:0f:af:ef:18:2c:e3:66:48:b7:b6:8b:d8:7d:99:c9:25:bc:
         a1:96:59:f5:cb:c1:35:84:75:63:81:b9:74:b8:12:b9:c8:92:
         63:6f:f5:cd:cf:9d:f8:c5:bb:22:23:73:4e:23:cc:bf:aa:1d:
         42:e6:89:ec:e4:18:1c:26:8b:46:14:98:a3:a6:5d:6d:6c:51:
         11:24:0c:9b:c9:d3:0d:0d:6e:fe:be:db:ad:a2:9b:48:31:f1:
         58:e8:38:a1:33:a3:c7:df:74:01:4f:04:54:28:56:df:6c:01:
         54:ce:7c:01:33:4a:a6:6f:cb:3b:85:17:53:f4:ab:35:d5:fd:
         2d:2c:aa:d1:93:5d:87:56:bb:25:1f:3b:6a:f1:6d:d4:7f:a4:
         23:ab:b1:b9:82:fc:de:62:97:b1:7c:18:99:72:12:2b:41:24:
         b0:b6:d9:2a:18:57:3b:cd:f4:60:4f:ee:b2:da:31:ad:d8:0f:
         0e:28:20:c7:8e:9e:2e:3f:ab:a4:1b:7d:31:3f:d4:b2:e6:f5:
         05:c4:aa:c0
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIURgWrP3CoS1FWSmAEvKgxfZKNo6IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw
NTY0QUIyNTAeFw0yNDA5MTEwNzM5MDdaFw0yNTA5MTAwNzQ0MDdaMDMxMTAvBgNV
BAMTKENDRkIzMEUyMDE5NkNERjdEMjg1MzJGRkQwNjU0OTYzNjM1N0UzQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC51/Lg71TqZnA/oix0koVokMiE
mB46FNp4eYm6zfzicitbZnLEenXIlIZ81Gqj6m+1ZOtBxs3FQV3X/AVQw4USV07d
8vuBgfRPydn24kYHOiphK+gXeRvMLcrTNUqf3lhgRKLqGyn+h/F6DN5+K2OWNwyB
LrJ2GmvFs8QAC7AmHOS+Uif1/xHfRCxFcf+uRr4S057xqdPddVriUjbBSrgKb8Fl
eCQXXa4HMTKSdnIAvUNV2RZhSrSF30/SO70NkLVP8QNz7XFqz/fKYWB+MXrwmwIT
2wT0oxx7+/o1NuKQFhSjv6MIqyeVZk2KxqE5YIUQJT3I7cz8LdiEWxvF8pzBAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUzPsw4gGWzffShTL/0GVJY2NX46IwHwYDVR0j
BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND
RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0
QUIyNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h
YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzQzNzJlMzYzNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzQzMTMwMzgzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMovQTANBgkqhkiG
9w0BAQsFAAOCAQEAlFbw+uRUeTXIQolikuw42riOIOBIKwPgjZLhaDybLABqPsM8
CEYj3ckvuzKIrBOf819PkrsRgA+v7xgs42ZIt7aL2H2ZySW8oZZZ9cvBNYR1Y4G5
dLgSuciSY2/1zc+d+MW7IiNzTiPMv6odQuaJ7OQYHCaLRhSYo6ZdbWxRESQMm8nT
DQ1u/r7braKbSDHxWOg4oTOjx990AU8EVChW32wBVM58ATNKpm/LO4UXU/SrNdX9
LSyq0ZNdh1a7JR87avFt1H+kI6uxuYL83mKXsXwYmXISK0EksLbZKhhXO830YE/u
stoxrdgPDiggx46eLj+rpBt9MT/Usub1BcSqwA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-ams.rpki-client.org