Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3137332e39322e302f32342d3234203d3e203138303539.roa
File:                     3230332e3137332e39322e302f32342d3234203d3e203138303539.roa (raw, json)
Hash identifier:          GP7CnsFbzzcjKL+AT9gisKNf7+jPsHWSkutVT6iaRGY=
Subject key identifier:   A9:00:62:13:CA:A6:2D:E7:28:02:31:B9:1F:A7:9B:1E:D9:2B:83:A3
Certificate issuer:       /CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
Certificate serial:       67BC1340CC3ED38A15B9E722DD37AE979D0521FF
Authority key identifier: 82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3137332e39322e302f32342d3234203d3e203138303539.roa
Signing time:             Fri 25 Oct 2024 04:00:32 +0000
ROA not before:           Fri 25 Oct 2024 03:55:32 +0000
ROA not after:            Fri 24 Oct 2025 04:00:32 +0000
asID:                     18059
IP address blocks:        203.173.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl
                          rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:bc:13:40:cc:3e:d3:8a:15:b9:e7:22:dd:37:ae:97:9d:05:21:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82884151A5283F43CA97CE1ACE95A51C6C8A1D8E
        Validity
            Not Before: Oct 25 03:55:32 2024 GMT
            Not After : Oct 24 04:00:32 2025 GMT
        Subject: CN=A9006213CAA62DE7280231B91FA79B1ED92B83A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ca:33:73:a8:fc:5d:54:ae:ba:4b:e3:a9:83:
                    e6:a5:0d:23:45:3e:79:64:ff:29:cc:8e:79:91:95:
                    5b:e0:8c:6b:c4:6a:2a:a1:55:6f:72:2b:f0:b2:80:
                    39:23:a1:64:3f:5f:8e:8c:13:08:fd:e2:22:00:cc:
                    8e:1f:9d:fa:b9:a4:1f:90:6c:c3:c2:28:69:b9:bb:
                    93:06:0b:09:1f:30:73:2f:12:d2:d6:8b:5b:bf:27:
                    71:4d:b4:9c:93:c5:b9:4f:2c:b4:96:2e:f1:69:6e:
                    3a:cb:80:bf:e7:2a:f6:71:9d:a8:a5:1e:0b:0e:84:
                    2c:54:e6:15:22:39:6c:f0:b5:a8:b7:67:aa:19:f9:
                    97:d8:46:cb:c7:30:18:09:7d:30:cd:2d:17:10:91:
                    b8:fa:f7:48:b0:26:a4:79:95:4f:ff:61:c4:7d:95:
                    a6:57:22:22:70:7f:0d:17:69:21:a9:1f:e0:0c:33:
                    51:14:b0:31:c0:dc:a1:19:22:c4:2c:87:4b:4e:c7:
                    10:72:62:1c:88:0d:1b:6d:82:6d:4c:9b:49:c6:31:
                    65:39:a7:4e:e0:25:0c:95:72:87:79:b5:2a:b9:f1:
                    e1:50:70:ca:c5:f4:76:ca:07:86:ca:74:ed:08:c2:
                    63:0d:38:2c:9a:f6:5a:12:f7:1b:12:c0:40:44:0d:
                    42:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:00:62:13:CA:A6:2D:E7:28:02:31:B9:1F:A7:9B:1E:D9:2B:83:A3
            X509v3 Authority Key Identifier:
                keyid:82:88:41:51:A5:28:3F:43:CA:97:CE:1A:CE:95:A5:1C:6C:8A:1D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/82884151A5283F43CA97CE1ACE95A51C6C8A1D8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c2836763-12b6-4d8f-ad0b-4cd5b61959ef/0/3230332e3137332e39322e302f32342d3234203d3e203138303539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.173.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:f3:a9:eb:fc:ba:97:56:df:59:49:27:6e:e5:af:82:bc:e8:
         f2:f3:9e:c8:fa:e9:c2:8f:0f:72:63:5c:f0:3f:60:af:37:20:
         5c:55:84:2d:08:37:e3:ba:1d:46:a6:8c:4c:68:32:bf:b4:6f:
         27:d7:1f:8b:67:d4:54:c5:77:c4:3a:eb:f0:ff:a2:c0:a7:f1:
         18:cf:17:1f:e0:85:9b:68:07:1d:9f:d5:cb:22:3f:24:f4:de:
         91:e0:44:9f:7d:a0:05:b6:bd:fa:c3:ce:7f:f5:3f:56:b1:a1:
         e6:ae:5c:e8:10:0f:e4:b3:91:24:60:68:ca:50:b1:2c:07:24:
         73:08:cd:a5:34:ba:9e:c2:80:1e:87:c7:29:94:02:dc:5e:04:
         9e:03:15:6a:96:e8:06:a0:4f:fd:86:37:43:df:f8:98:d8:b1:
         9c:85:b1:c3:50:f6:20:e0:9c:1b:34:97:88:05:0b:92:e8:72:
         2f:a5:37:bd:6e:38:f4:87:fb:78:2b:68:e4:df:eb:f7:c6:54:
         2d:c1:1f:4c:d1:d1:ba:38:f2:2e:38:2b:b5:4e:db:2e:56:3e:
         ff:4e:da:96:f5:fb:04:aa:82:f3:ab:6a:f5:a2:21:c9:ac:75:
         ad:f5:e1:22:ff:94:c6:65:97:e5:22:01:07:b9:6c:9d:36:ad:
         fc:5c:df:9b
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUZ7wTQMw+04oVueci3Teul50FIf8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2
QzhBMUQ4RTAeFw0yNDEwMjUwMzU1MzJaFw0yNTEwMjQwNDAwMzJaMDMxMTAvBgNV
BAMTKEE5MDA2MjEzQ0FBNjJERTcyODAyMzFCOTFGQTc5QjFFRDkyQjgzQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkyjNzqPxdVK66S+Opg+alDSNF
Pnlk/ynMjnmRlVvgjGvEaiqhVW9yK/CygDkjoWQ/X46MEwj94iIAzI4fnfq5pB+Q
bMPCKGm5u5MGCwkfMHMvEtLWi1u/J3FNtJyTxblPLLSWLvFpbjrLgL/nKvZxnail
HgsOhCxU5hUiOWzwtai3Z6oZ+ZfYRsvHMBgJfTDNLRcQkbj690iwJqR5lU//YcR9
laZXIiJwfw0XaSGpH+AMM1EUsDHA3KEZIsQsh0tOxxByYhyIDRttgm1Mm0nGMWU5
p07gJQyVcod5tSq58eFQcMrF9HbKB4bKdO0IwmMNOCya9loS9xsSwEBEDUJJAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUqQBiE8qmLecoAjG5H6ebHtkrg6MwHwYDVR0j
BBgwFoAUgohBUaUoP0PKl84azpWlHGyKHY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MjgzNjc2My0xMmI2LTRkOGYtYWQwYi00Y2Q1YjYxOTU5ZWYvMC84Mjg4NDE1MUE1
MjgzRjQzQ0E5N0NFMUFDRTk1QTUxQzZDOEExRDhFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODI4ODQxNTFBNTI4M0Y0M0NBOTdDRTFBQ0U5NUE1MUM2QzhB
MUQ4RS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyODM2NzYzLTEyYjYtNGQ4Zi1h
ZDBiLTRjZDViNjE5NTllZi8wLzMyMzAzMzJlMzEzNzMzMmUzOTMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzODMwMzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMutXDANBgkqhkiG
9w0BAQsFAAOCAQEAdPOp6/y6l1bfWUknbuWvgrzo8vOeyPrpwo8PcmNc8D9grzcg
XFWELQg347odRqaMTGgyv7RvJ9cfi2fUVMV3xDrr8P+iwKfxGM8XH+CFm2gHHZ/V
yyI/JPTekeBEn32gBba9+sPOf/U/VrGh5q5c6BAP5LORJGBoylCxLAckcwjNpTS6
nsKAHofHKZQC3F4EngMVapboBqBP/YY3Q9/4mNixnIWxw1D2IOCcGzSXiAULkuhy
L6U3vW449If7eCto5N/r98ZULcEfTNHRujjyLjgrtU7bLlY+/07alvX7BKqC86tq
9aIhyax1rfXhIv+UxmWX5SIBB7lsnTat/Fzfmw==
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:52 2024 by rpki-client on console-fra.rpki-client.org