Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37312e302f32342d3234203d3e203137363731.roa
File:                     3230322e34372e37312e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier:          U+vWDG5EkI+RvlZqR7A2sOKrrgDu6Nv5ZdwzqBhUc7U=
Subject key identifier:   68:C6:8F:DC:11:5F:55:D0:8B:E3:49:7C:A9:DE:AD:BB:F7:AD:49:59
Certificate issuer:       /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial:       0ACBC7094AF1D531E07DF685D737CEA02D933000
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37312e302f32342d3234203d3e203137363731.roa
Signing time:             Sat 15 Jun 2024 12:01:53 +0000
ROA not before:           Sat 15 Jun 2024 11:56:53 +0000
ROA not after:            Sat 14 Jun 2025 12:01:53 +0000
asID:                     17671
IP address blocks:        202.47.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
                          rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:cb:c7:09:4a:f1:d5:31:e0:7d:f6:85:d7:37:ce:a0:2d:93:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
        Validity
            Not Before: Jun 15 11:56:53 2024 GMT
            Not After : Jun 14 12:01:53 2025 GMT
        Subject: CN=68C68FDC115F55D08BE3497CA9DEADBBF7AD4959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:77:7d:ae:7d:34:ac:ad:63:3f:65:ad:2e:b7:
                    ff:60:0f:22:9a:bd:e3:8f:8f:39:68:f2:ef:13:3f:
                    ca:2d:72:17:b2:5d:db:22:e9:f2:88:ef:4d:42:14:
                    90:33:11:dd:71:84:37:92:75:5d:69:64:b7:08:af:
                    a2:6a:65:b9:66:05:b5:69:a2:8e:c8:26:2d:2d:94:
                    d8:d5:73:b4:80:03:84:a5:99:80:7f:83:1e:bb:54:
                    79:86:b9:5c:48:df:a7:78:a4:cf:70:19:aa:33:35:
                    5e:4a:2f:f3:86:5b:36:c0:b9:13:3f:bf:87:28:54:
                    96:01:a0:01:d2:7e:a7:74:5e:2d:01:5a:cf:36:b0:
                    ac:35:7c:e2:5e:6a:8d:09:ff:d0:df:ed:c7:1a:c7:
                    d0:fb:71:f9:91:1c:ca:4e:3b:0b:84:dc:8a:5b:e5:
                    25:39:cb:ad:7d:c5:9e:1c:37:4a:e7:04:e5:52:e1:
                    7f:03:52:70:b0:8b:bc:07:82:f2:d9:4b:40:9e:b6:
                    2f:6b:58:a3:f4:a4:8e:ec:bd:94:0d:a0:8b:8d:c7:
                    24:61:2a:57:f5:85:8a:9e:88:19:7e:e3:6a:58:da:
                    59:59:e3:32:5c:db:68:69:3a:fe:f1:31:a6:22:da:
                    6f:17:2c:84:00:a4:05:97:14:4e:9d:6e:15:d5:8e:
                    a8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C6:8F:DC:11:5F:55:D0:8B:E3:49:7C:A9:DE:AD:BB:F7:AD:49:59
            X509v3 Authority Key Identifier:
                keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37312e302f32342d3234203d3e203137363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.47.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:f7:11:00:92:e9:de:5f:43:e7:d2:a5:59:f1:03:66:4e:13:
         3d:ce:79:06:07:43:84:4f:70:9b:37:bd:ed:9b:23:1b:b1:cf:
         96:ee:df:4f:a9:18:ee:a0:3d:8b:c3:8b:bc:a4:3c:f4:e8:13:
         2f:fa:1b:98:51:4e:e1:fe:fd:38:59:55:f3:40:22:50:be:a7:
         3c:cc:14:a3:54:b2:26:1e:57:ee:d9:ef:13:ab:f4:ff:3a:39:
         3f:3f:13:ca:80:5a:1f:b6:a5:7b:68:00:f4:d1:70:08:05:89:
         00:9c:9b:df:52:2f:76:ed:42:95:bf:9a:41:4f:50:a3:3a:cf:
         f1:b3:b3:2e:53:1f:39:6f:d7:76:f8:b4:97:b5:b1:69:05:94:
         30:79:15:6d:3a:ef:40:9d:41:e1:43:92:30:2a:23:c1:08:8c:
         7e:83:ea:87:81:12:13:89:25:5c:71:65:d5:81:0d:db:38:c7:
         7c:74:72:9d:fd:84:7e:ac:c4:4f:4b:6c:81:19:55:aa:32:9d:
         39:f6:db:17:46:93:f5:5d:3e:11:bd:60:af:d5:59:88:19:f0:
         67:23:73:3b:52:29:13:a2:eb:72:9e:13:1c:24:10:1b:f9:74:
         16:de:6f:cf:d6:07:81:2d:ca:5d:6a:0e:e9:4c:df:ab:62:48:
         57:4c:e2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org