Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33322e302f32342d3234203d3e203338333230.roa
File:                     3137352e3130332e33322e302f32342d3234203d3e203338333230.roa (raw, json)
Hash identifier:          6wQP1TUaGv11NN5xCi8iSmi6Gs27Ap4krBdDfO8jl/I=
Subject key identifier:   3E:D9:4F:DC:33:1C:1C:84:BB:76:6A:5F:AE:D1:1A:2F:69:B7:38:44
Certificate issuer:       /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Certificate serial:       7B4F12EB48D36245CB98165E40239CD04364F731
Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33322e302f32342d3234203d3e203338333230.roa
Signing time:             Mon 26 Feb 2024 06:02:06 +0000
ROA not before:           Mon 26 Feb 2024 05:57:06 +0000
ROA not after:            Mon 24 Feb 2025 06:02:06 +0000
asID:                     38320
IP address blocks:        175.103.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl
                          rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:4f:12:eb:48:d3:62:45:cb:98:16:5e:40:23:9c:d0:43:64:f7:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
        Validity
            Not Before: Feb 26 05:57:06 2024 GMT
            Not After : Feb 24 06:02:06 2025 GMT
        Subject: CN=3ED94FDC331C1C84BB766A5FAED11A2F69B73844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7f:3c:ad:f1:e8:67:1b:01:76:50:00:52:b7:
                    79:41:30:15:05:fd:37:28:2c:45:99:ec:4a:15:5c:
                    f1:d9:63:09:9f:c4:86:b4:d7:14:66:83:de:0d:05:
                    34:4e:68:e1:ce:c9:a7:2c:6d:20:71:dd:28:ba:13:
                    c1:d7:fc:9a:89:91:f9:f3:4a:a0:ad:fd:ed:68:8f:
                    a8:14:05:a0:b3:d2:2d:41:ca:60:25:d6:9b:65:d6:
                    94:bb:a2:a4:fb:1e:f7:af:22:df:49:94:cb:61:c5:
                    57:c0:05:0a:51:93:03:88:1e:86:59:33:64:ac:b9:
                    65:2a:a8:33:e5:67:f6:01:9f:a2:62:61:fe:47:a8:
                    39:c9:a9:29:3e:f0:cf:51:c8:b4:0d:ed:e9:e1:97:
                    01:93:d2:f8:ac:e1:18:f0:b6:c4:37:a8:96:f5:3c:
                    ae:7b:17:82:5f:32:f0:37:14:a6:f0:ce:c7:74:63:
                    42:aa:4d:2a:f5:10:84:d9:e9:d8:5a:ad:df:96:d7:
                    c4:85:b3:27:ab:d6:e7:33:8b:a9:55:8f:c7:9a:9b:
                    fb:e3:20:60:64:4c:d0:51:ac:1e:58:a9:25:2b:a7:
                    bc:fb:0a:4b:6b:28:3a:6b:94:f0:bc:ac:b3:9b:34:
                    ce:fb:b9:1e:66:3a:da:62:2f:66:1d:fb:a9:41:9b:
                    af:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D9:4F:DC:33:1C:1C:84:BB:76:6A:5F:AE:D1:1A:2F:69:B7:38:44
            X509v3 Authority Key Identifier:
                keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3137352e3130332e33322e302f32342d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:b0:c4:b5:11:8e:71:30:fd:fd:2e:7c:59:e3:96:fe:d5:0e:
         63:31:ef:0a:58:ec:23:11:c4:0a:b3:7d:f5:9f:a3:e6:44:19:
         fd:cc:73:54:00:77:b7:25:b0:2d:a8:31:f1:80:8a:61:9b:cf:
         cd:25:62:60:ba:e3:a9:c7:2a:c8:17:3f:87:92:24:84:14:ed:
         ca:dd:65:55:cd:15:83:31:a1:80:fb:ec:db:73:86:7a:fd:57:
         1f:5f:9c:34:ab:b1:27:38:30:51:c2:e9:ed:27:73:dd:79:a2:
         ca:4d:ca:06:90:da:78:56:30:a1:95:33:8e:1d:59:75:f4:34:
         c5:f9:b1:58:cb:04:70:7d:32:03:02:39:da:d1:31:43:f1:a1:
         a1:54:3d:59:3d:9f:9f:9d:f7:fb:58:06:7b:fc:26:b1:82:98:
         64:8d:cd:8e:cd:54:48:ea:6f:05:2f:3b:bd:20:c7:4a:1a:f0:
         88:63:77:10:ef:51:6d:b9:3b:3d:67:5c:a9:74:49:10:70:46:
         4e:65:da:b9:39:4c:cc:65:05:93:3d:4a:64:49:c2:a3:d2:3a:
         d9:69:0b:d6:a5:5a:a8:af:d8:54:5a:b1:a9:b7:90:14:84:e6:
         74:b3:69:a7:d2:85:18:af:7b:a7:47:fc:b5:1a:0b:99:e4:14:
         f3:43:1e:e4
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUe08S60jTYkXLmBZeQCOc0ENk9zEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMz
MUY4MDJFMTAeFw0yNDAyMjYwNTU3MDZaFw0yNTAyMjQwNjAyMDZaMDMxMTAvBgNV
BAMTKDNFRDk0RkRDMzMxQzFDODRCQjc2NkE1RkFFRDExQTJGNjlCNzM4NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsfzyt8ehnGwF2UABSt3lBMBUF
/TcoLEWZ7EoVXPHZYwmfxIa01xRmg94NBTROaOHOyacsbSBx3Si6E8HX/JqJkfnz
SqCt/e1oj6gUBaCz0i1BymAl1ptl1pS7oqT7HvevIt9JlMthxVfABQpRkwOIHoZZ
M2SsuWUqqDPlZ/YBn6JiYf5HqDnJqSk+8M9RyLQN7enhlwGT0vis4RjwtsQ3qJb1
PK57F4JfMvA3FKbwzsd0Y0KqTSr1EITZ6dhard+W18SFsyer1uczi6lVj8eam/vj
IGBkTNBRrB5YqSUrp7z7CktrKDprlPC8rLObNM77uR5mOtpiL2Yd+6lBm69NAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUPtlP3DMcHIS7dmpfrtEaL2m3OEQwHwYDVR0j
BBgwFoAUyN1dhPr6v36vYrOw9ORaIzH4AuEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
OTQ1Yjg2ZS0wODk1LTQ3NTktYTc3Yy1hMDZjZTE0ZTI0M2MvMC9DOERENUQ4NEZB
RkFCRjdFQUY2MkIzQjBGNEU0NUEyMzMxRjgwMkUxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzhERDVEODRGQUZBQkY3RUFGNjJCM0IwRjRFNDVBMjMzMUY4
MDJFMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E5NDViODZlLTA4OTUtNDc1OS1h
NzdjLWEwNmNlMTRlMjQzYy8wLzMxMzczNTJlMzEzMDMzMmUzMzMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODMzMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAK9nIDANBgkqhkiG
9w0BAQsFAAOCAQEAwrDEtRGOcTD9/S58WeOW/tUOYzHvCljsIxHECrN99Z+j5kQZ
/cxzVAB3tyWwLagx8YCKYZvPzSViYLrjqccqyBc/h5IkhBTtyt1lVc0VgzGhgPvs
23OGev1XH1+cNKuxJzgwUcLp7Sdz3Xmiyk3KBpDaeFYwoZUzjh1ZdfQ0xfmxWMsE
cH0yAwI52tExQ/GhoVQ9WT2fn533+1gGe/wmsYKYZI3Njs1USOpvBS87vSDHShrw
iGN3EO9Rbbk7PWdcqXRJEHBGTmXauTlMzGUFkz1KZEnCo9I62WkL1qVaqK/YVFqx
qbeQFITmdLNpp9KFGK97p0f8tRoLmeQU80Me5A==
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:37:58 2024 by rpki-client on console-ams.rpki-client.org