Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/3230322e34372e39302e302f32332d3234203d3e203436303230.roa
File:                     3230322e34372e39302e302f32332d3234203d3e203436303230.roa (raw, json)
Hash identifier:          RBNyRkY1QL0Yso7dtgEEzwUDHAISx/lShMVxOGdrF+A=
Subject key identifier:   21:93:70:F0:91:D9:E8:42:BF:E9:AA:A9:DC:68:8F:4F:0D:D1:64:37
Certificate issuer:       /CN=B2BCF7264F89246583B384F354CB350DF3B6AADB
Certificate serial:       65FCC2837A92EF67F032B750D13AF411514809D2
Authority key identifier: B2:BC:F7:26:4F:89:24:65:83:B3:84:F3:54:CB:35:0D:F3:B6:AA:DB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/3230322e34372e39302e302f32332d3234203d3e203436303230.roa
Signing time:             Mon 01 Jul 2024 01:04:14 +0000
ROA not before:           Mon 01 Jul 2024 00:59:14 +0000
ROA not after:            Mon 30 Jun 2025 01:04:14 +0000
asID:                     46020
IP address blocks:        202.47.90.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.crl
                          rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:fc:c2:83:7a:92:ef:67:f0:32:b7:50:d1:3a:f4:11:51:48:09:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2BCF7264F89246583B384F354CB350DF3B6AADB
        Validity
            Not Before: Jul  1 00:59:14 2024 GMT
            Not After : Jun 30 01:04:14 2025 GMT
        Subject: CN=219370F091D9E842BFE9AAA9DC688F4F0DD16437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:32:26:20:ea:4b:f4:d8:63:f1:ec:95:da:b7:
                    fe:74:24:fd:28:67:dc:33:38:13:c4:63:ef:0e:62:
                    71:ba:7e:3e:9d:1f:de:28:56:ea:dd:7e:66:46:9d:
                    bf:9d:ce:c8:c0:f6:95:26:b5:b1:56:25:21:b3:80:
                    d0:7c:00:95:b0:0d:d4:a3:e9:cf:e6:e1:69:58:19:
                    2f:1b:a0:2e:f8:91:33:37:04:0c:7d:34:bc:02:88:
                    70:5f:ad:d8:07:e9:99:7a:32:b1:c6:2f:e7:98:b8:
                    33:84:57:d8:43:04:2b:bc:a7:91:51:4f:02:fb:f7:
                    e9:b0:6a:1c:8c:05:46:70:5a:3b:2f:5b:45:f8:b0:
                    84:c7:44:a6:f7:38:3c:ec:f3:02:c7:ad:b6:a8:81:
                    02:0a:46:6f:71:23:36:89:c7:be:2b:96:8c:b5:7c:
                    aa:4d:b9:13:9a:3c:f5:d6:a8:0f:d7:f9:4e:81:76:
                    95:1e:f6:dd:a5:0f:ac:7c:33:8c:7c:86:03:ae:b6:
                    31:92:3c:04:0a:24:3c:33:41:ee:04:18:fc:f5:61:
                    ae:45:4e:8f:00:6f:2a:66:48:2a:f1:a3:b9:8a:6b:
                    29:f7:8d:39:b6:dc:7c:1c:8c:57:2d:d2:c0:94:7f:
                    dd:87:91:50:06:3b:7e:12:f2:63:41:d7:23:06:64:
                    4b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:93:70:F0:91:D9:E8:42:BF:E9:AA:A9:DC:68:8F:4F:0D:D1:64:37
            X509v3 Authority Key Identifier:
                keyid:B2:BC:F7:26:4F:89:24:65:83:B3:84:F3:54:CB:35:0D:F3:B6:AA:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/B2BCF7264F89246583B384F354CB350DF3B6AADB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2BCF7264F89246583B384F354CB350DF3B6AADB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2a0a771-62d2-4238-a406-7999f224849c/0/3230322e34372e39302e302f32332d3234203d3e203436303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.47.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:f9:14:0a:e0:27:61:ad:84:c0:61:25:a9:78:dc:00:c2:b5:
         23:67:f1:a4:76:77:d9:32:07:78:7f:01:59:0f:3a:4d:35:ae:
         45:38:2e:41:ed:f7:96:14:b6:86:76:30:0b:ed:b4:8f:69:c7:
         b0:b3:b4:16:45:32:70:5c:e4:68:b9:c4:cf:b8:12:16:2b:b4:
         c1:06:9b:de:60:b1:6b:ba:ba:73:59:e5:8a:8b:58:d1:7f:7b:
         c7:b9:96:e0:52:9b:80:a8:96:f3:0b:72:6c:7b:ef:d0:85:bb:
         48:8a:7d:46:3f:95:87:51:e1:44:ca:c5:ce:9e:1c:31:c9:59:
         93:ed:7f:06:74:b9:23:35:16:85:1c:c0:f7:de:98:9d:ed:2c:
         01:e5:76:ec:a5:5f:d7:cc:66:32:17:fd:18:af:8c:cb:b0:f8:
         c6:ac:dd:40:d9:9f:05:10:ad:60:48:52:f4:a0:fb:1d:6e:eb:
         cc:5d:43:9f:28:a1:6c:ee:08:97:8a:78:31:de:df:b8:30:9b:
         4e:36:fb:47:6c:85:17:30:65:e5:c2:83:63:91:d5:ad:66:bc:
         e8:91:c8:f6:4a:e1:70:bb:06:5d:10:42:76:14:4d:b9:e0:2b:
         c9:f0:bb:8e:92:fe:2c:e0:09:2a:28:4d:2a:92:62:76:d5:03:
         94:cf:c4:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 01:31:57 2024 by rpki-client on console-ams.rpki-client.org