Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/3230332e3132332e36322e302f32342d3234203d3e203338373535.roa
File:                     3230332e3132332e36322e302f32342d3234203d3e203338373535.roa (raw, json)
Hash identifier:          jQnjcD09zdciZtR813IMGvy4lK93eqWOtX5t9dz1Ldg=
Subject key identifier:   F3:91:83:52:38:F2:60:77:5F:C0:A2:F9:BC:33:D5:FF:BE:49:10:77
Certificate issuer:       /CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7
Certificate serial:       7494F69A0A8FFC524611FA4776740281367B8C38
Authority key identifier: 9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/3230332e3132332e36322e302f32342d3234203d3e203338373535.roa
Signing time:             Thu 01 Aug 2024 11:23:15 +0000
ROA not before:           Thu 01 Aug 2024 11:18:15 +0000
ROA not after:            Thu 31 Jul 2025 11:23:15 +0000
asID:                     38755
IP address blocks:        203.123.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl
                          rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:94:f6:9a:0a:8f:fc:52:46:11:fa:47:76:74:02:81:36:7b:8c:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F61990183B8D1048CDFE62E9616C3A9D01B15C7
        Validity
            Not Before: Aug  1 11:18:15 2024 GMT
            Not After : Jul 31 11:23:15 2025 GMT
        Subject: CN=F391835238F260775FC0A2F9BC33D5FFBE491077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fd:41:e2:a0:2e:88:5f:14:ac:a7:9c:a2:2a:
                    41:89:31:ca:76:90:89:8e:7e:b4:68:37:d4:21:26:
                    5f:9f:80:4a:47:c7:9d:0e:1f:2c:4b:5f:10:cd:00:
                    df:7f:5d:28:35:74:52:2c:c2:53:eb:57:e9:98:83:
                    9c:d0:de:a8:69:ed:7c:b1:73:93:6f:e9:a2:2c:24:
                    00:57:35:7c:ba:9e:02:b3:a1:68:dd:b5:d9:13:ef:
                    fb:98:af:f1:86:f6:a7:c9:cf:b2:74:c7:73:fe:a4:
                    bd:f7:b8:6b:44:92:8a:b9:5a:37:ee:59:80:a1:47:
                    26:80:f5:47:d7:12:b7:9d:62:36:ac:f9:a0:8c:68:
                    cc:79:2e:78:75:5a:f2:d9:be:6b:50:c9:8d:fb:8a:
                    b8:fc:5d:3f:b0:89:3c:ee:73:fd:74:04:17:fa:e1:
                    fa:6a:42:d0:e8:e6:1d:3d:63:98:9d:5f:01:a2:ed:
                    3f:d3:30:82:80:b8:6d:9c:74:a2:f3:24:15:f0:1c:
                    a2:f4:81:3d:6e:4d:77:ad:5e:d4:51:b1:6f:6b:40:
                    c0:7e:9e:6a:7f:b6:41:03:e1:17:34:6a:52:98:c6:
                    ce:15:f7:2a:99:6e:f6:de:36:67:78:7e:ee:59:6a:
                    2f:52:78:64:cd:d3:b4:08:6b:ae:81:8e:46:b4:81:
                    b1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:91:83:52:38:F2:60:77:5F:C0:A2:F9:BC:33:D5:FF:BE:49:10:77
            X509v3 Authority Key Identifier:
                keyid:9F:61:99:01:83:B8:D1:04:8C:DF:E6:2E:96:16:C3:A9:D0:1B:15:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F61990183B8D1048CDFE62E9616C3A9D01B15C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ab3902b-7459-4854-a5f5-09f15d8c87d3/0/3230332e3132332e36322e302f32342d3234203d3e203338373535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.123.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:ea:ba:b0:58:3a:e0:fe:37:38:51:87:63:6a:72:de:d0:68:
         60:82:43:6e:63:f7:0a:f2:cb:c4:6f:b2:68:0c:d5:d3:41:d1:
         be:27:e1:f4:b3:95:87:6c:63:70:95:ce:91:bd:da:80:76:b6:
         8e:82:b4:22:5b:a3:c1:d7:fe:b0:8b:c1:1f:0c:91:11:f0:99:
         79:d9:d1:71:fd:d4:68:9f:1b:51:5e:62:ce:22:92:0c:d1:9a:
         09:47:55:7e:51:4b:6a:f9:57:14:e2:13:40:35:8d:4a:dc:33:
         fc:0a:ea:00:01:14:cd:b5:d9:99:b1:b3:9b:46:1c:90:15:a2:
         46:15:6f:c0:d5:68:fb:10:9a:9e:33:5a:c2:ed:a1:ba:40:f9:
         fb:91:be:be:a9:1b:6d:6d:9d:85:75:0a:e0:8e:67:1f:13:8b:
         79:21:29:91:4a:88:13:03:13:14:7b:8c:65:e7:57:0c:5b:65:
         64:69:39:42:f8:60:c4:ac:26:d4:bd:1d:c2:80:d9:90:98:07:
         18:bb:30:7c:40:78:1c:c6:16:6a:22:15:34:20:ab:81:fc:62:
         1a:e6:3f:b3:d2:1b:10:2d:16:48:a7:94:26:86:46:80:fc:d6:
         70:0b:fe:0b:81:b8:a9:b5:3d:f2:68:02:8f:66:cd:b8:c4:de:
         60:31:58:fd
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUdJT2mgqP/FJGEfpHdnQCgTZ7jDgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlE
MDFCMTVDNzAeFw0yNDA4MDExMTE4MTVaFw0yNTA3MzExMTIzMTVaMDMxMTAvBgNV
BAMTKEYzOTE4MzUyMzhGMjYwNzc1RkMwQTJGOUJDMzNENUZGQkU0OTEwNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK/UHioC6IXxSsp5yiKkGJMcp2
kImOfrRoN9QhJl+fgEpHx50OHyxLXxDNAN9/XSg1dFIswlPrV+mYg5zQ3qhp7Xyx
c5Nv6aIsJABXNXy6ngKzoWjdtdkT7/uYr/GG9qfJz7J0x3P+pL33uGtEkoq5Wjfu
WYChRyaA9UfXEredYjas+aCMaMx5Lnh1WvLZvmtQyY37irj8XT+wiTzuc/10BBf6
4fpqQtDo5h09Y5idXwGi7T/TMIKAuG2cdKLzJBXwHKL0gT1uTXetXtRRsW9rQMB+
nmp/tkED4Rc0alKYxs4V9yqZbvbeNmd4fu5Zai9SeGTN07QIa66Bjka0gbGVAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU85GDUjjyYHdfwKL5vDPV/75JEHcwHwYDVR0j
BBgwFoAUn2GZAYO40QSM3+YulhbDqdAbFccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
YWIzOTAyYi03NDU5LTQ4NTQtYTVmNS0wOWYxNWQ4Yzg3ZDMvMC85RjYxOTkwMTgz
QjhEMTA0OENERkU2MkU5NjE2QzNBOUQwMUIxNUM3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUY2MTk5MDE4M0I4RDEwNDhDREZFNjJFOTYxNkMzQTlEMDFC
MTVDNy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlhYjM5MDJiLTc0NTktNDg1NC1h
NWY1LTA5ZjE1ZDhjODdkMy8wLzMyMzAzMzJlMzEzMjMzMmUzNjMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM3MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMt7PjANBgkqhkiG
9w0BAQsFAAOCAQEAQuq6sFg64P43OFGHY2py3tBoYIJDbmP3CvLLxG+yaAzV00HR
vifh9LOVh2xjcJXOkb3agHa2joK0Ilujwdf+sIvBHwyREfCZednRcf3UaJ8bUV5i
ziKSDNGaCUdVflFLavlXFOITQDWNStwz/ArqAAEUzbXZmbGzm0YckBWiRhVvwNVo
+xCanjNawu2hukD5+5G+vqkbbW2dhXUK4I5nHxOLeSEpkUqIEwMTFHuMZedXDFtl
ZGk5QvhgxKwm1L0dwoDZkJgHGLswfEB4HMYWaiIVNCCrgfxiGuY/s9IbEC0WSKeU
JoZGgPzWcAv+C4G4qbU98mgCj2bNuMTeYDFY/Q==
-----END CERTIFICATE-----
Generated at Sun Nov 24 07:10:01 2024 by rpki-client on console-ams.rpki-client.org