Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/3230332e332e39302e302f32342d3234203d3e20313531353938.roa
File:                     3230332e332e39302e302f32342d3234203d3e20313531353938.roa (raw, json)
Hash identifier:          UKrCX8hKXX35lIh4CDsi03CNL9TxqP58DmrUATuzZOk=
Subject key identifier:   7A:0C:4E:57:74:B0:14:3C:CA:60:C9:B1:71:25:E4:C5:4B:EE:36:E3
Certificate issuer:       /CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D
Certificate serial:       61832E66200C784F165B64DC937B82744A32D654
Authority key identifier: AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/3230332e332e39302e302f32342d3234203d3e20313531353938.roa
Signing time:             Tue 17 Oct 2023 10:32:54 +0000
ROA not before:           Tue 17 Oct 2023 10:27:54 +0000
ROA not after:            Tue 15 Oct 2024 10:32:54 +0000
asID:                     151598
IP address blocks:        203.3.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl
                          rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 05:13:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:83:2e:66:20:0c:78:4f:16:5b:64:dc:93:7b:82:74:4a:32:d6:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACE2DABAA249D56AD968AD7D60A09642B626CA4D
        Validity
            Not Before: Oct 17 10:27:54 2023 GMT
            Not After : Oct 15 10:32:54 2024 GMT
        Subject: CN=7A0C4E5774B0143CCA60C9B17125E4C54BEE36E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2e:5e:8d:95:54:d0:1e:b3:7a:03:93:2f:91:
                    0b:5c:c3:35:cc:83:2c:e9:b7:b5:cd:f5:e8:df:d7:
                    7b:31:6c:ab:1d:2b:47:19:89:23:e0:31:9e:44:d7:
                    57:7e:ca:7a:9f:9c:b9:c2:11:5e:d3:83:45:ca:19:
                    9f:36:f6:2a:8a:ab:5b:44:52:e5:1d:25:04:b2:9a:
                    a7:28:04:6d:b8:8a:23:24:ee:74:2a:b1:de:af:7f:
                    48:31:7d:17:67:eb:5a:ee:ce:88:82:fd:9e:e5:2c:
                    ee:43:9f:3d:95:df:0c:8f:12:5f:7c:4f:19:e9:40:
                    d0:f7:82:d5:25:c5:b2:44:ec:98:73:c5:12:1f:05:
                    dc:3f:5d:68:c0:7c:d2:bb:71:fc:c7:7f:21:1b:87:
                    15:55:62:29:b2:85:cb:13:5f:ab:a8:88:92:2d:5a:
                    d4:a0:b2:62:86:ae:02:eb:a6:aa:38:8c:68:50:58:
                    29:0d:4b:67:53:c8:02:b3:78:bb:60:36:55:b1:04:
                    b8:0b:cb:93:82:2d:d3:e4:65:b3:13:2b:31:01:69:
                    65:88:1c:65:86:94:89:3d:e4:fb:28:4e:7e:a1:45:
                    6d:df:dc:ca:16:78:dd:e0:44:56:ff:36:ce:eb:35:
                    bc:ef:5b:bb:31:13:1c:9b:28:ba:78:20:76:96:d3:
                    45:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0C:4E:57:74:B0:14:3C:CA:60:C9:B1:71:25:E4:C5:4B:EE:36:E3
            X509v3 Authority Key Identifier:
                keyid:AC:E2:DA:BA:A2:49:D5:6A:D9:68:AD:7D:60:A0:96:42:B6:26:CA:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACE2DABAA249D56AD968AD7D60A09642B626CA4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd871303-021a-4a0b-9efb-ae2db6c90d84/0/3230332e332e39302e302f32342d3234203d3e20313531353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.3.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:15:e9:13:cb:9a:23:00:eb:14:e8:b8:3d:b6:ec:e8:0d:7b:
         d2:25:a3:73:cb:6d:c5:ba:04:7b:75:c7:63:4d:6b:ca:1d:91:
         c5:6b:6a:39:2e:84:91:70:0e:a1:9a:5f:a4:45:79:45:d7:2c:
         84:d2:e1:b2:1a:63:27:df:0e:f7:9c:3e:40:2b:8f:0f:b6:6a:
         4d:8b:2c:bd:65:48:c2:e3:ba:f5:5a:03:b9:87:4b:88:3c:51:
         31:8b:ec:a9:87:68:ee:d7:2c:2a:3c:dd:53:30:62:9f:7f:98:
         4b:10:62:c0:0e:a7:8f:1d:9e:71:7a:6b:71:96:e7:ad:8d:c7:
         e0:95:2a:f5:9a:1a:0c:18:70:9c:a0:81:44:e7:5a:c5:9e:da:
         71:8c:20:03:b3:0a:22:fb:08:5e:1b:cf:7f:ae:d3:4a:bc:3a:
         3b:a1:5b:6d:7c:ca:f9:e6:98:61:d6:f3:6c:dc:87:aa:26:2c:
         91:6a:eb:3e:72:cf:1d:88:fc:8c:f6:01:87:4e:4a:27:9e:3c:
         fe:bb:a2:1b:c5:8c:ba:29:f1:ae:84:5b:52:de:39:7d:df:6f:
         d9:84:65:21:68:d0:58:8b:dc:dd:e3:16:56:b4:d0:41:02:d9:
         2b:fd:31:cc:17:10:c2:0a:74:34:d9:43:6a:36:66:7d:57:97:
         13:f4:b1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:12:05 2024 by rpki-client on console-ams.rpki-client.org