Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS9462.roa
File:                     AS9462.roa (raw, json)
Hash identifier:          GjwP+1lrlLCrgopbmUGsaIwgvJvWnOoFIoKs6NeduXs=
Subject key identifier:   0E:B8:19:EB:91:00:A1:B2:8D:C4:F9:E9:F9:E6:E2:1F:4C:0C:7B:2B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1B4FD7C785350582A332D6AF867B29ABB9B3F875
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS9462.roa
Signing time:             Mon 12 Feb 2024 05:42:46 +0000
ROA not before:           Mon 12 Feb 2024 05:37:46 +0000
ROA not after:            Mon 10 Feb 2025 05:42:46 +0000
asID:                     9462
IP address blocks:        202.10.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 May 2024 03:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:4f:d7:c7:85:35:05:82:a3:32:d6:af:86:7b:29:ab:b9:b3:f8:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 12 05:37:46 2024 GMT
            Not After : Feb 10 05:42:46 2025 GMT
        Subject: CN=0EB819EB9100A1B28DC4F9E9F9E6E21F4C0C7B2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:10:0a:3c:76:b2:0b:9b:31:31:61:12:94:aa:
                    c5:a5:10:f3:2c:cc:cb:20:ba:35:b8:b8:db:cf:1b:
                    80:93:fa:6b:90:54:dd:78:2e:22:1e:da:97:54:6c:
                    01:7d:94:a0:cd:4a:54:7f:78:81:b6:cd:ba:cf:65:
                    02:18:5d:d4:5d:e5:33:f4:c3:81:48:b9:f2:68:18:
                    05:78:14:f3:69:07:7d:1f:35:ca:30:59:57:4d:3b:
                    79:92:90:78:31:aa:a4:21:74:fa:e8:e0:78:90:bc:
                    38:19:d3:0f:56:5c:14:cd:5c:91:61:c2:90:9c:23:
                    e0:42:7b:d7:85:f2:29:2b:77:a9:e3:c2:7b:9c:af:
                    7f:38:8a:93:62:43:df:0e:11:f9:98:53:65:89:ff:
                    16:36:99:17:15:ea:1a:6f:50:3a:43:84:55:33:33:
                    6b:93:e8:b5:a1:10:ef:8f:e8:32:e3:cc:9b:65:fa:
                    1c:a4:ce:65:be:18:c1:b7:5e:83:0a:3e:91:86:d1:
                    fe:cf:65:a9:6d:43:c2:fc:d6:67:61:b7:40:a1:5d:
                    92:7e:ec:09:79:33:fc:d6:a8:37:58:62:ca:87:16:
                    d9:9a:13:73:28:18:4d:41:c5:1b:9d:7d:b2:90:d4:
                    99:20:9b:48:1e:94:f6:46:a8:ca:70:f1:20:ad:13:
                    07:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B8:19:EB:91:00:A1:B2:8D:C4:F9:E9:F9:E6:E2:1F:4C:0C:7B:2B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS9462.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.10.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:8d:c4:d7:22:5e:1e:16:25:44:44:fb:5d:ec:0f:a8:8d:1a:
         a0:78:9b:82:7c:ff:8a:d8:be:c7:8b:b6:bd:82:72:fe:91:92:
         3e:06:0c:9b:fa:9a:94:1d:6d:74:5f:67:67:de:e3:47:60:ee:
         85:a7:e4:9f:eb:20:70:6c:5a:6b:3c:7f:65:d8:8c:ec:6a:54:
         e6:ff:f7:da:9e:65:d2:76:f2:a0:94:96:61:fd:33:04:a8:02:
         70:02:00:5b:8e:4f:bb:99:e7:1c:a3:18:ab:25:2f:7d:63:f1:
         7d:84:05:e8:0c:2f:0c:4b:f6:bf:ff:52:f3:fd:23:6d:5c:25:
         4d:62:23:a6:bd:63:74:96:88:84:fa:4e:0f:f0:ff:9d:5d:9e:
         22:d7:ec:58:5c:3a:b9:14:d6:5d:f1:4a:e2:62:70:83:4c:26:
         77:c2:72:3c:06:dc:94:af:84:3f:f4:ab:8f:44:03:5c:0e:40:
         79:58:e5:b3:e5:67:3a:43:a2:74:93:03:5f:41:1c:10:f5:89:
         06:1e:34:30:b4:2b:40:77:0f:00:a5:91:73:a2:6c:c1:a9:3f:
         86:87:2b:fb:e0:b2:70:b2:b4:a0:78:65:4c:17:b3:de:6d:48:
         ac:5d:aa:6e:a5:95:43:ae:97:35:a0:3f:cc:71:c7:09:2f:09:
         d1:ba:d6:ea
-----BEGIN CERTIFICATE-----
MIIE2zCCA8OgAwIBAgIUG0/Xx4U1BYKjMtavhnspq7mz+HUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIxMjA1Mzc0NloX
DTI1MDIxMDA1NDI0NlowMzExMC8GA1UEAxMoMEVCODE5RUI5MTAwQTFCMjhEQzRG
OUU5RjlFNkUyMUY0QzBDN0IyQjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANQQCjx2sgubMTFhEpSqxaUQ8yzMyyC6Nbi4288bgJP6a5BU3XguIh7al1Rs
AX2UoM1KVH94gbbNus9lAhhd1F3lM/TDgUi58mgYBXgU82kHfR81yjBZV007eZKQ
eDGqpCF0+ujgeJC8OBnTD1ZcFM1ckWHCkJwj4EJ714XyKSt3qePCe5yvfziKk2JD
3w4R+ZhTZYn/FjaZFxXqGm9QOkOEVTMza5PotaEQ74/oMuPMm2X6HKTOZb4Ywbde
gwo+kYbR/s9lqW1DwvzWZ2G3QKFdkn7sCXkz/NaoN1hiyocW2ZoTcygYTUHFG519
spDUmSCbSB6U9kaoynDxIK0TB5UCAwEAAaOCAc4wggHKMB0GA1UdDgQWBBQOuBnr
kQChso3E+en55uIfTAx7KzAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFIGCCsGAQUFBwELBEYwRDBCBggrBgEFBQcwC4Y2cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzk0NjIucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADKCjkwDQYJKoZIhvcNAQELBQADggEBAJSNxNciXh4WJURE+13sD6iN
GqB4m4J8/4rYvseLtr2Ccv6Rkj4GDJv6mpQdbXRfZ2fe40dg7oWn5J/rIHBsWms8
f2XYjOxqVOb/99qeZdJ28qCUlmH9MwSoAnACAFuOT7uZ5xyjGKslL31j8X2EBegM
LwxL9r//UvP9I21cJU1iI6a9Y3SWiIT6Tg/w/51dniLX7FhcOrkU1l3xSuJicINM
JnfCcjwG3JSvhD/0q49EA1wOQHlY5bPlZzpDonSTA19BHBD1iQYeNDC0K0B3DwCl
kXOibMGpP4aHK/vgsnCytKB4ZUwXs95tSKxdqm6llUOulzWgP8xxxwkvCdG61uo=
-----END CERTIFICATE-----
Generated at Wed May 8 21:02:26 2024 by rpki-client on console-fra.rpki-client.org