Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3132382e302f32342d3234203d3e203233363739.roa
File:                     34332e3233302e3132382e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          +v2Sn9D6B0SiX2X5em0xq2oJE875a1R7yOQJKDLW8nk=
Subject key identifier:   D0:65:4D:14:75:A3:D5:F0:FF:CB:2C:5D:65:37:15:DD:B1:B9:55:CC
Certificate issuer:       /CN=084550E9619FF5ABD20864D9A6383053B59BF91E
Certificate serial:       6DE54D70D405875F2EEF189C4CB57787E6C4CBD1
Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3132382e302f32342d3234203d3e203233363739.roa
Signing time:             Tue 09 Jul 2024 18:00:01 +0000
ROA not before:           Tue 09 Jul 2024 17:55:01 +0000
ROA not after:            Tue 08 Jul 2025 18:00:01 +0000
asID:                     23679
IP address blocks:        43.230.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl
                          rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:e5:4d:70:d4:05:87:5f:2e:ef:18:9c:4c:b5:77:87:e6:c4:cb:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E
        Validity
            Not Before: Jul  9 17:55:01 2024 GMT
            Not After : Jul  8 18:00:01 2025 GMT
        Subject: CN=D0654D1475A3D5F0FFCB2C5D653715DDB1B955CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:83:d6:48:3c:33:cc:42:16:1b:92:51:00:4b:
                    0e:c9:6b:1d:1c:b3:33:cc:25:6c:86:22:8f:6b:09:
                    6a:7d:27:60:35:3d:d9:dd:d8:f4:c6:ad:84:dd:27:
                    5f:12:73:dd:ce:9a:04:fe:d8:16:b9:47:49:55:68:
                    8e:3d:ba:63:f9:88:26:d7:25:4b:b8:5b:e3:cc:ae:
                    47:0b:87:b4:2c:21:37:04:5f:e6:4f:28:a3:e0:19:
                    2b:fc:2b:38:2e:ca:e3:9b:98:95:71:6f:13:78:99:
                    c2:61:58:c3:a1:9f:cf:d9:b8:14:5f:1d:b9:9e:56:
                    a3:0b:ed:0e:60:9b:06:38:5a:90:68:43:88:60:9d:
                    ca:39:68:de:64:c5:7f:0c:78:c1:15:8f:ee:56:1f:
                    1c:06:6a:7c:71:a8:93:9e:3b:01:0e:86:b2:2a:6a:
                    a5:2d:d3:c8:7d:02:c2:30:e5:60:5c:a2:0c:ed:6b:
                    c3:dc:81:9b:1f:43:5f:29:8e:aa:cd:e7:30:d2:8e:
                    b9:0a:2e:b5:ec:4f:a6:c1:7c:f4:9a:0c:ee:1a:c7:
                    4d:ce:3f:30:e2:56:b0:eb:d8:0c:e2:3e:94:68:67:
                    e7:de:36:4b:9e:30:b4:6f:76:7a:d0:50:21:97:75:
                    37:d1:8d:f0:e2:9b:7c:83:3c:5f:f9:61:cd:6e:42:
                    9c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:65:4D:14:75:A3:D5:F0:FF:CB:2C:5D:65:37:15:DD:B1:B9:55:CC
            X509v3 Authority Key Identifier:
                keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3132382e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.230.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:68:5a:0b:dc:43:fb:b6:1d:96:1b:f0:87:10:f9:55:c8:a8:
         ab:50:40:88:7c:98:bf:a4:21:38:ee:e9:11:7a:92:02:66:86:
         34:70:9f:e2:09:88:a0:13:75:45:74:89:8a:31:db:f5:28:c4:
         60:b7:9b:6b:ce:a3:5c:b5:b9:29:4f:42:ad:83:33:47:43:41:
         67:fe:d0:11:af:3c:83:68:c3:6d:5a:5a:69:c8:ea:e3:52:96:
         ab:7a:39:d9:04:87:8e:53:5f:38:b7:8b:c7:20:6f:15:87:45:
         fb:d2:51:80:82:07:ab:48:a6:d0:aa:58:9f:03:97:96:ca:3c:
         9e:51:e4:50:6b:92:d2:ad:42:07:61:a2:a8:ff:9e:15:2a:1f:
         97:bb:3b:e7:73:ed:d6:5a:25:bf:f4:23:ac:02:1e:a7:73:3c:
         1e:f5:ce:2b:02:f7:be:c4:a2:b4:be:ed:72:b1:15:b6:07:22:
         cb:a1:f9:cb:05:40:c8:53:5b:da:63:7b:ed:86:53:72:7c:5e:
         e8:2d:dc:31:38:6b:82:4a:1c:2d:0b:92:91:42:8a:61:bb:2c:
         35:d4:fc:6b:bd:cb:38:b6:fe:df:ce:23:79:e8:74:33:77:fd:
         91:5c:76:19:0c:e0:21:dd:47:23:37:e3:77:76:fe:aa:ed:6e:
         a0:6f:bf:86
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUbeVNcNQFh18u7xicTLV3h+bEy9EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg0NTUwRTk2MTlGRjVBQkQyMDg2NEQ5QTYzODMwNTNC
NTlCRjkxRTAeFw0yNDA3MDkxNzU1MDFaFw0yNTA3MDgxODAwMDFaMDMxMTAvBgNV
BAMTKEQwNjU0RDE0NzVBM0Q1RjBGRkNCMkM1RDY1MzcxNUREQjFCOTU1Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8g9ZIPDPMQhYbklEASw7Jax0c
szPMJWyGIo9rCWp9J2A1Pdnd2PTGrYTdJ18Sc93OmgT+2Ba5R0lVaI49umP5iCbX
JUu4W+PMrkcLh7QsITcEX+ZPKKPgGSv8KzguyuObmJVxbxN4mcJhWMOhn8/ZuBRf
HbmeVqML7Q5gmwY4WpBoQ4hgnco5aN5kxX8MeMEVj+5WHxwGanxxqJOeOwEOhrIq
aqUt08h9AsIw5WBcogzta8PcgZsfQ18pjqrN5zDSjrkKLrXsT6bBfPSaDO4ax03O
PzDiVrDr2AziPpRoZ+feNkueMLRvdnrQUCGXdTfRjfDim3yDPF/5Yc1uQpxLAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU0GVNFHWj1fD/yyxdZTcV3bG5VcwwHwYDVR0j
BBgwFoAUCEVQ6WGf9avSCGTZpjgwU7Wb+R4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MTE0MTdjMC0zN2JiLTQ0NmQtODdmMi1kODE4NDE3OGMxNDkvMC8wODQ1NTBFOTYx
OUZGNUFCRDIwODY0RDlBNjM4MzA1M0I1OUJGOTFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDg0NTUwRTk2MTlGRjVBQkQyMDg2NEQ5QTYzODMwNTNCNTlC
RjkxRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxMTQxN2MwLTM3YmItNDQ2ZC04
N2YyLWQ4MTg0MTc4YzE0OS8wLzM0MzMyZTMyMzMzMDJlMzEzMjM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACvmgDANBgkqhkiG
9w0BAQsFAAOCAQEAgGhaC9xD+7YdlhvwhxD5Vcioq1BAiHyYv6QhOO7pEXqSAmaG
NHCf4gmIoBN1RXSJijHb9SjEYLeba86jXLW5KU9CrYMzR0NBZ/7QEa88g2jDbVpa
acjq41KWq3o52QSHjlNfOLeLxyBvFYdF+9JRgIIHq0im0KpYnwOXlso8nlHkUGuS
0q1CB2GiqP+eFSofl7s753Pt1lolv/QjrAIep3M8HvXOKwL3vsSitL7tcrEVtgci
y6H5ywVAyFNb2mN77YZTcnxe6C3cMThrgkocLQuSkUKKYbssNdT8a73LOLb+384j
eeh0M3f9kVx2GQzgId1HIzfjd3b+qu1uoG+/hg==
-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:31 2024 by rpki-client on console-fra.rpki-client.org