Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37362e302f32342d3234203d3e203137363731.roa
File:                     3230322e34372e37362e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier:          JryeZCc8Rd2dE/fZIEgbaU3GAf6gEuiMFiC+cKgh9aY=
Subject key identifier:   14:A1:A2:49:D3:DB:60:39:17:08:2F:AE:D9:00:F5:FD:55:23:86:3B
Certificate issuer:       /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial:       4374374EF988B497B7F45813BD1584C8FABC31B4
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37362e302f32342d3234203d3e203137363731.roa
Signing time:             Sat 15 Jun 2024 12:01:51 +0000
ROA not before:           Sat 15 Jun 2024 11:56:51 +0000
ROA not after:            Sat 14 Jun 2025 12:01:51 +0000
asID:                     17671
IP address blocks:        202.47.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
                          rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:74:37:4e:f9:88:b4:97:b7:f4:58:13:bd:15:84:c8:fa:bc:31:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
        Validity
            Not Before: Jun 15 11:56:51 2024 GMT
            Not After : Jun 14 12:01:51 2025 GMT
        Subject: CN=14A1A249D3DB603917082FAED900F5FD5523863B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:69:75:d2:c9:10:e5:74:48:2c:b7:bd:68:36:
                    59:13:6c:4b:3d:81:a0:fc:19:d1:85:96:f6:2d:d9:
                    37:80:de:8a:09:f9:10:c2:b3:a1:46:85:e1:48:2b:
                    d4:ef:f2:a0:2f:3c:70:ac:b8:d3:d4:4c:02:10:44:
                    24:c7:b9:77:69:79:ff:f7:a6:43:ea:64:84:0f:f7:
                    b1:50:13:37:b2:2b:b6:f2:5e:72:16:46:65:29:03:
                    0b:a4:ee:f1:e9:08:48:2e:69:c8:d2:aa:70:13:5e:
                    80:31:79:8a:f4:ba:c3:71:c1:8a:b0:ea:39:8b:d6:
                    31:49:74:bb:d7:6d:ab:82:39:89:93:53:42:f4:9b:
                    ea:e9:23:47:53:8f:3a:66:46:3b:8b:7b:15:79:f8:
                    c4:d8:65:05:55:a5:54:05:fe:17:53:70:df:3d:fc:
                    61:56:ea:47:bf:93:af:78:26:be:73:4a:87:e2:18:
                    9d:d7:c4:94:4d:40:ea:97:68:3f:d8:26:31:36:81:
                    d2:05:4d:14:31:ed:e8:77:18:a8:dc:9f:2f:3a:ff:
                    4c:3e:e5:b0:7f:4f:11:2a:dd:71:7b:47:7f:18:41:
                    44:1a:03:23:12:63:57:2b:f3:1d:f5:22:49:2e:62:
                    3a:c6:ef:20:a0:65:79:b8:5b:85:1f:12:94:9b:61:
                    35:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A1:A2:49:D3:DB:60:39:17:08:2F:AE:D9:00:F5:FD:55:23:86:3B
            X509v3 Authority Key Identifier:
                keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3230322e34372e37362e302f32342d3234203d3e203137363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.47.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:4c:5c:68:e4:1f:57:39:a4:04:93:59:40:33:13:63:fa:85:
         72:6b:1f:46:00:07:bb:61:6f:cf:8b:d3:7f:75:8f:54:88:53:
         af:ca:39:c4:64:4b:9f:a8:37:e0:df:6e:61:19:60:13:2e:69:
         82:cc:db:6a:2d:9e:9e:2d:9f:4a:1b:61:01:dd:37:b9:0f:a8:
         ec:4a:15:8e:b3:6b:c0:e2:b7:a0:4e:d9:72:d5:2f:44:9a:83:
         1a:bf:84:8f:76:a1:18:bb:84:e1:b0:55:c0:d5:47:ef:5c:d3:
         ff:2f:c0:f6:22:6b:4c:79:51:7c:60:fc:31:51:7c:fb:cd:05:
         35:9b:1f:bb:5a:02:99:79:7a:0a:f5:f4:7f:44:86:54:a4:94:
         a4:f1:f9:83:17:d5:30:f0:a9:81:46:7c:e2:ef:50:e3:52:08:
         66:d1:26:f3:52:c8:50:16:39:98:82:ec:70:d4:0f:a4:e3:8f:
         9c:65:e8:05:cb:42:c8:7c:ae:2f:2c:d7:c4:50:58:06:3a:0a:
         83:90:c0:1e:4f:19:64:43:79:d0:87:a5:f7:b1:fc:36:48:31:
         6a:34:38:05:01:f6:a6:ec:74:7b:e4:50:e8:b6:22:b9:fe:3d:
         e9:44:1b:5d:f6:42:9a:69:26:b2:f9:0e:a9:e5:53:d0:3b:cc:
         c5:ff:72:ad
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUQ3Q3TvmItJe39FgTvRWEyPq8MbQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw
NTY0QUIyNTAeFw0yNDA2MTUxMTU2NTFaFw0yNTA2MTQxMjAxNTFaMDMxMTAvBgNV
BAMTKDE0QTFBMjQ5RDNEQjYwMzkxNzA4MkZBRUQ5MDBGNUZENTUyMzg2M0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0aXXSyRDldEgst71oNlkTbEs9
gaD8GdGFlvYt2TeA3ooJ+RDCs6FGheFIK9Tv8qAvPHCsuNPUTAIQRCTHuXdpef/3
pkPqZIQP97FQEzeyK7byXnIWRmUpAwuk7vHpCEguacjSqnATXoAxeYr0usNxwYqw
6jmL1jFJdLvXbauCOYmTU0L0m+rpI0dTjzpmRjuLexV5+MTYZQVVpVQF/hdTcN89
/GFW6ke/k694Jr5zSofiGJ3XxJRNQOqXaD/YJjE2gdIFTRQx7eh3GKjcny86/0w+
5bB/TxEq3XF7R38YQUQaAyMSY1cr8x31IkkuYjrG7yCgZXm4W4UfEpSbYTWvAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUFKGiSdPbYDkXCC+u2QD1/VUjhjswHwYDVR0j
BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND
RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0
QUIyNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h
YWM4LTIyMGVhZDBiNTRlMi8wLzMyMzAzMjJlMzQzNzJlMzczNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzczNjM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKL0wwDQYJKoZIhvcN
AQELBQADggEBADFMXGjkH1c5pASTWUAzE2P6hXJrH0YAB7thb8+L0391j1SIU6/K
OcRkS5+oN+DfbmEZYBMuaYLM22otnp4tn0obYQHdN7kPqOxKFY6za8Dit6BO2XLV
L0Sagxq/hI92oRi7hOGwVcDVR+9c0/8vwPYia0x5UXxg/DFRfPvNBTWbH7taApl5
egr19H9EhlSklKTx+YMX1TDwqYFGfOLvUONSCGbRJvNSyFAWOZiC7HDUD6Tjj5xl
6AXLQsh8ri8s18RQWAY6CoOQwB5PGWRDedCHpfex/DZIMWo0OAUB9qbsdHvkUOi2
Irn+PelEG132QpppJrL5DqnlU9A7zMX/cq0=
-----END CERTIFICATE-----
Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org