Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3230322e3134352e362e302f32332d3234203d3e203535363636.roa
File:                     3230322e3134352e362e302f32332d3234203d3e203535363636.roa (raw, json)
Hash identifier:          aK3f+d9s+gwONCvZ3xG7sx7kw9AOd8+DVU40GSf/nYI=
Subject key identifier:   D4:38:C9:B5:86:89:A4:89:7B:83:AC:A2:5D:86:49:92:04:F2:09:1F
Certificate issuer:       /CN=C00163880F235714759920507217F2A7D557C953
Certificate serial:       12331996A092A6B9ABF916532ACD7DBA1B1D4EDF
Authority key identifier: C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3230322e3134352e362e302f32332d3234203d3e203535363636.roa
Signing time:             Mon 31 Jul 2023 00:14:35 +0000
ROA not before:           Mon 31 Jul 2023 00:09:35 +0000
ROA not after:            Mon 29 Jul 2024 00:14:35 +0000
asID:                     55666
IP address blocks:        202.145.6.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl
                          rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:33:19:96:a0:92:a6:b9:ab:f9:16:53:2a:cd:7d:ba:1b:1d:4e:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C00163880F235714759920507217F2A7D557C953
        Validity
            Not Before: Jul 31 00:09:35 2023 GMT
            Not After : Jul 29 00:14:35 2024 GMT
        Subject: CN=D438C9B58689A4897B83ACA25D86499204F2091F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5d:62:3b:14:97:64:15:31:42:e6:9a:c8:22:
                    08:e6:82:a9:cc:dc:ce:0e:d6:fe:57:19:b1:b5:7a:
                    a3:a0:b3:7b:dd:06:99:a8:7a:5c:c8:ec:c2:c1:99:
                    69:e7:9c:1d:35:7f:4c:4b:09:8d:7a:69:88:f9:a3:
                    8a:e9:4e:7c:e7:4f:6d:57:bd:4a:4c:8c:d7:38:ce:
                    51:12:2b:97:4d:a4:f5:cb:be:8e:44:a5:29:80:d3:
                    8f:f1:27:95:f7:b8:c8:7d:6d:ac:f4:d5:a2:20:95:
                    e5:ee:8d:01:53:7d:4d:a5:d7:fc:34:21:85:00:f9:
                    7d:c5:95:19:2f:2a:56:c0:40:ea:d3:07:1d:67:ca:
                    18:1d:23:88:fe:74:a9:fb:f1:e7:38:7c:cb:d6:66:
                    0b:35:2c:e5:b0:ef:02:04:a2:15:0d:c0:89:e4:23:
                    33:ce:19:23:da:ad:53:c9:1c:96:db:98:0c:51:05:
                    04:6e:b7:e5:40:ce:18:42:0a:53:ae:6e:e0:25:e6:
                    aa:0a:a7:40:2e:d3:95:33:36:e2:c3:87:99:15:ca:
                    88:74:05:d7:57:77:6a:62:42:78:97:a4:9d:0a:7f:
                    0f:43:11:08:f8:78:42:cb:8f:d5:d8:ae:e0:3f:cd:
                    6f:cf:90:a8:b6:21:0c:b9:20:01:d7:d1:77:31:f1:
                    e9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:38:C9:B5:86:89:A4:89:7B:83:AC:A2:5D:86:49:92:04:F2:09:1F
            X509v3 Authority Key Identifier:
                keyid:C0:01:63:88:0F:23:57:14:75:99:20:50:72:17:F2:A7:D5:57:C9:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/C00163880F235714759920507217F2A7D557C953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00163880F235714759920507217F2A7D557C953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aea7a115-b8b8-490b-8320-c9e59a1003dd/0/3230322e3134352e362e302f32332d3234203d3e203535363636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.145.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:d2:ba:85:f0:20:97:c3:8d:ce:63:79:ad:4e:97:e4:6d:42:
         33:52:00:ef:02:b2:0e:62:e0:f9:69:9b:2f:44:75:8a:3a:f5:
         66:03:07:fd:1d:65:ea:13:02:0e:56:a0:b6:b2:14:fd:d2:d7:
         d5:ea:c2:6a:d1:75:41:3e:a2:b3:7a:4f:fe:06:60:3e:fe:9d:
         50:3c:65:4b:67:da:78:06:e8:c0:95:cd:42:b4:43:45:09:ee:
         be:b9:0c:77:ec:d0:71:5b:49:1e:a1:88:44:d3:61:7a:d6:38:
         3f:88:2c:a0:95:ef:de:bc:45:5f:0b:60:ec:1f:da:9c:b9:f0:
         bd:71:8d:0f:7b:61:a1:16:f7:5a:8f:de:f1:09:ae:f8:8a:49:
         66:ec:29:ee:cf:05:3e:60:84:31:7d:1a:d2:03:82:48:5d:f3:
         ae:00:16:c1:10:e3:3b:a4:1e:dd:f5:e0:a5:81:31:86:25:a7:
         76:3f:b3:a0:e9:7a:30:bb:83:55:fa:63:3e:26:5a:40:0f:bc:
         a2:fb:54:28:1b:ce:75:ac:2b:90:8f:9e:e9:70:c2:af:08:ed:
         89:c5:0a:15:47:f8:1f:7a:9b:f9:d3:ef:ec:9e:f6:4e:f2:a0:
         ef:15:bc:1f:1a:dc:73:ab:eb:ef:e5:80:6d:88:73:f6:4b:0b:
         63:f9:ba:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:35:14 2024 by rpki-client on console-ams.rpki-client.org