Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3133302e302f32342d3234203d3e203233363739.roa
File:                     34332e3233302e3133302e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          IJ+zc6K/dFfGn6MlddaU98wJJqtXcBPPzdnjZVOh3dc=
Subject key identifier:   82:8D:44:5E:E5:F5:9E:6E:82:30:31:71:74:18:0E:3C:67:10:75:21
Certificate issuer:       /CN=084550E9619FF5ABD20864D9A6383053B59BF91E
Certificate serial:       540F4930E1A31B97123426F53181646BBB0FAB72
Authority key identifier: 08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3133302e302f32342d3234203d3e203233363739.roa
Signing time:             Tue 13 Aug 2024 05:17:12 +0000
ROA not before:           Tue 13 Aug 2024 05:12:12 +0000
ROA not after:            Tue 12 Aug 2025 05:17:12 +0000
asID:                     23679
IP address blocks:        43.230.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl
                          rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:0f:49:30:e1:a3:1b:97:12:34:26:f5:31:81:64:6b:bb:0f:ab:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084550E9619FF5ABD20864D9A6383053B59BF91E
        Validity
            Not Before: Aug 13 05:12:12 2024 GMT
            Not After : Aug 12 05:17:12 2025 GMT
        Subject: CN=828D445EE5F59E6E8230317174180E3C67107521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:1d:d3:4e:59:3f:14:20:1f:2b:68:94:1a:fd:
                    20:7e:12:76:20:7c:88:b2:15:bc:84:f1:6c:f2:63:
                    01:0a:c4:aa:29:7e:54:aa:b9:eb:48:dd:0c:09:93:
                    53:61:1e:5f:97:36:03:49:54:25:9b:16:0a:3b:0f:
                    31:12:8c:80:52:3d:00:d4:92:5e:0c:c9:09:71:74:
                    96:17:ef:94:ac:d8:35:58:35:fb:33:4b:f5:93:d7:
                    fa:df:be:60:48:fb:be:3b:70:54:54:44:e9:c6:06:
                    7c:a8:9b:48:14:eb:12:7e:64:28:a3:a2:1b:5d:43:
                    95:24:e3:d8:fc:d2:58:89:92:4a:45:b7:da:42:1b:
                    87:7b:82:9e:ab:fd:a0:19:92:2d:c8:99:c5:28:10:
                    c0:23:32:c8:2b:83:2d:d7:a9:11:44:38:e2:04:77:
                    37:ef:f8:04:de:e9:79:3b:9f:dd:84:22:4c:dc:3e:
                    b7:dc:29:d0:4b:c5:a0:5d:d0:22:ca:9b:73:44:b2:
                    df:3a:c0:1a:11:53:bc:c3:bf:fd:de:af:d0:2d:c8:
                    86:c1:3f:0e:73:30:b4:b5:ee:61:52:ce:91:69:f4:
                    83:51:2e:1d:56:88:eb:56:f9:3e:a1:51:94:3e:30:
                    93:87:ad:a7:6b:30:3e:08:b8:52:02:fa:49:5b:9c:
                    c1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8D:44:5E:E5:F5:9E:6E:82:30:31:71:74:18:0E:3C:67:10:75:21
            X509v3 Authority Key Identifier:
                keyid:08:45:50:E9:61:9F:F5:AB:D2:08:64:D9:A6:38:30:53:B5:9B:F9:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/084550E9619FF5ABD20864D9A6383053B59BF91E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/084550E9619FF5ABD20864D9A6383053B59BF91E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/911417c0-37bb-446d-87f2-d8184178c149/0/34332e3233302e3133302e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.230.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:92:42:5d:ac:b6:f4:57:6c:81:2f:c1:39:07:0a:d1:36:85:
         50:fd:e7:ae:0f:24:1a:aa:eb:d8:dc:50:b9:c8:1f:05:03:c0:
         a7:09:08:97:e9:d2:32:91:10:0c:e1:8b:52:2e:74:12:2f:80:
         a8:07:91:92:20:75:5e:da:de:e0:65:39:1b:5d:fd:af:6a:4d:
         ad:bd:09:96:5d:cd:b7:5a:ff:0b:ba:f2:ac:3d:21:11:43:69:
         3c:56:ac:87:60:50:23:3c:f2:20:1b:59:dc:87:80:aa:21:a7:
         3d:92:e3:27:5b:56:b8:0b:12:7b:96:d0:18:95:fd:d2:f8:c5:
         f6:89:cc:4a:82:a6:80:94:2f:04:71:28:23:43:f2:c4:a2:c1:
         d2:e2:c2:c4:32:1a:2d:38:a5:bd:ef:1a:e5:73:93:29:56:bd:
         1a:b4:67:76:51:00:48:1a:b0:d2:f0:12:47:39:68:a9:67:ed:
         95:ce:e5:63:8f:80:a8:04:39:11:38:2e:cc:0c:7d:17:4a:97:
         d4:18:76:78:d4:bd:92:10:a9:53:1a:59:bd:0a:63:c2:c2:1e:
         67:38:ea:1c:d3:6f:83:1b:c1:41:a5:bb:ac:34:46:65:d2:98:
         7b:5d:20:38:19:51:4d:73:47:0f:af:d8:e0:89:68:52:7d:d0:
         0d:86:7e:3c
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUVA9JMOGjG5cSNCb1MYFka7sPq3IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDg0NTUwRTk2MTlGRjVBQkQyMDg2NEQ5QTYzODMwNTNC
NTlCRjkxRTAeFw0yNDA4MTMwNTEyMTJaFw0yNTA4MTIwNTE3MTJaMDMxMTAvBgNV
BAMTKDgyOEQ0NDVFRTVGNTlFNkU4MjMwMzE3MTc0MTgwRTNDNjcxMDc1MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9HdNOWT8UIB8raJQa/SB+EnYg
fIiyFbyE8WzyYwEKxKopflSquetI3QwJk1NhHl+XNgNJVCWbFgo7DzESjIBSPQDU
kl4MyQlxdJYX75Ss2DVYNfszS/WT1/rfvmBI+747cFRUROnGBnyom0gU6xJ+ZCij
ohtdQ5Uk49j80liJkkpFt9pCG4d7gp6r/aAZki3ImcUoEMAjMsgrgy3XqRFEOOIE
dzfv+ATe6Xk7n92EIkzcPrfcKdBLxaBd0CLKm3NEst86wBoRU7zDv/3er9AtyIbB
Pw5zMLS17mFSzpFp9INRLh1WiOtW+T6hUZQ+MJOHradrMD4IuFIC+klbnMEPAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUgo1EXuX1nm6CMDFxdBgOPGcQdSEwHwYDVR0j
BBgwFoAUCEVQ6WGf9avSCGTZpjgwU7Wb+R4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MTE0MTdjMC0zN2JiLTQ0NmQtODdmMi1kODE4NDE3OGMxNDkvMC8wODQ1NTBFOTYx
OUZGNUFCRDIwODY0RDlBNjM4MzA1M0I1OUJGOTFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDg0NTUwRTk2MTlGRjVBQkQyMDg2NEQ5QTYzODMwNTNCNTlC
RjkxRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxMTQxN2MwLTM3YmItNDQ2ZC04
N2YyLWQ4MTg0MTc4YzE0OS8wLzM0MzMyZTMyMzMzMDJlMzEzMzMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACvmgjANBgkqhkiG
9w0BAQsFAAOCAQEAf5JCXay29FdsgS/BOQcK0TaFUP3nrg8kGqrr2NxQucgfBQPA
pwkIl+nSMpEQDOGLUi50Ei+AqAeRkiB1Xtre4GU5G139r2pNrb0Jll3Nt1r/C7ry
rD0hEUNpPFash2BQIzzyIBtZ3IeAqiGnPZLjJ1tWuAsSe5bQGJX90vjF9onMSoKm
gJQvBHEoI0PyxKLB0uLCxDIaLTilve8a5XOTKVa9GrRndlEASBqw0vASRzloqWft
lc7lY4+AqAQ5ETguzAx9F0qX1Bh2eNS9khCpUxpZvQpjwsIeZzjqHNNvgxvBQaW7
rDRGZdKYe10gOBlRTXNHD6/Y4IloUn3QDYZ+PA==
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:14 2024 by rpki-client on console-ams.rpki-client.org