Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/3230322e3136322e33322e302f32302d3234203d3e203137393936.roa
File:                     3230322e3136322e33322e302f32302d3234203d3e203137393936.roa (raw, json)
Hash identifier:          U+YDWcJFoL5SQBm/z5X6b/pSTYjpY5iGFuHcFPVb3SQ=
Subject key identifier:   CE:FE:BA:D1:48:EB:D0:55:20:F4:7E:81:B7:D2:80:36:4C:1E:50:26
Certificate issuer:       /CN=E530A7B43C0C79FD8707007080E2F7AEA478FD1C
Certificate serial:       7E4589FE63FAC86D22BB98090A3A276DEC8ACA4D
Authority key identifier: E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/3230322e3136322e33322e302f32302d3234203d3e203137393936.roa
Signing time:             Wed 03 Jul 2024 13:00:01 +0000
ROA not before:           Wed 03 Jul 2024 12:55:01 +0000
ROA not after:            Wed 02 Jul 2025 13:00:01 +0000
asID:                     17996
IP address blocks:        202.162.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl
                          rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:45:89:fe:63:fa:c8:6d:22:bb:98:09:0a:3a:27:6d:ec:8a:ca:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E530A7B43C0C79FD8707007080E2F7AEA478FD1C
        Validity
            Not Before: Jul  3 12:55:01 2024 GMT
            Not After : Jul  2 13:00:01 2025 GMT
        Subject: CN=CEFEBAD148EBD05520F47E81B7D280364C1E5026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a5:b8:47:25:ad:fe:0d:e8:be:61:8d:5a:cd:
                    15:90:ea:61:1a:ca:52:e9:79:1e:15:01:5b:f1:ff:
                    8d:d1:08:26:ed:19:80:c3:27:77:e2:60:24:3c:90:
                    0b:2c:90:1c:4b:0e:15:00:c5:56:cd:d0:a3:48:3f:
                    5f:cf:9a:dd:9f:b5:94:f2:1c:31:ef:4a:0c:d8:b7:
                    4f:20:31:fd:58:91:50:31:08:49:c4:39:ba:d5:31:
                    6e:57:9f:97:6a:04:49:25:a3:1c:a3:67:3c:3e:72:
                    c4:9b:df:0b:74:5e:5e:be:28:e3:8c:15:1f:68:64:
                    d1:be:d0:37:5e:90:6c:6c:16:0b:9b:93:2a:64:80:
                    cf:c6:a1:fb:b7:0e:32:8e:bf:bd:dc:ed:20:2a:1f:
                    0f:7e:64:b9:ea:79:ee:71:c8:b7:a8:22:b2:89:8d:
                    57:8d:10:57:40:f3:12:48:7d:73:39:c1:dc:8d:4a:
                    cb:ef:19:17:78:30:7f:6b:d6:a6:86:e1:d3:36:60:
                    d9:17:ab:2c:70:0b:4a:53:f9:10:e3:2e:0d:ba:9d:
                    7e:52:02:c7:70:2f:db:a0:f3:1a:3c:04:7b:26:c0:
                    f0:06:2c:1f:8b:95:4f:08:1b:68:04:31:c9:92:4f:
                    ca:ea:eb:e5:39:bc:4a:5b:a5:59:7a:6a:34:be:38:
                    84:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FE:BA:D1:48:EB:D0:55:20:F4:7E:81:B7:D2:80:36:4C:1E:50:26
            X509v3 Authority Key Identifier:
                keyid:E5:30:A7:B4:3C:0C:79:FD:87:07:00:70:80:E2:F7:AE:A4:78:FD:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E530A7B43C0C79FD8707007080E2F7AEA478FD1C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3d2f2f8-3512-43e5-be17-b11b58f96083/0/3230322e3136322e33322e302f32302d3234203d3e203137393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.162.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0d:8d:4d:86:25:c4:62:5e:d2:10:e6:e7:90:53:c2:ad:ad:65:
         95:80:95:07:ca:af:4b:25:cf:4f:3f:3f:a6:c1:05:bb:0a:c6:
         f3:77:24:0b:29:54:15:88:e7:23:eb:b3:83:ae:6f:c0:16:14:
         1e:f1:29:6c:88:a1:6e:fd:05:a2:b6:00:6b:e7:0b:72:f3:e7:
         10:2f:5b:d0:49:a3:cb:87:f7:53:1f:07:ee:44:10:da:34:9b:
         6e:12:aa:a9:8b:4b:7e:e3:e8:5a:7d:4e:ff:ee:5d:fc:99:6d:
         96:43:1c:71:da:3b:f6:a7:93:3c:c3:15:46:51:b2:3f:65:09:
         7c:e4:e8:47:07:c9:ef:0c:d3:43:33:a4:f4:a0:3e:a5:36:2d:
         b6:bd:b7:a9:f0:f0:a7:86:68:94:53:51:e0:e0:88:73:58:a6:
         21:a4:01:02:89:e4:3e:f1:43:14:04:4c:03:a6:b1:15:e1:96:
         6b:43:a5:c6:17:a8:a8:e0:ba:06:f3:a8:ec:ec:61:d3:a9:03:
         53:8f:6b:64:66:27:1a:71:3a:33:94:eb:99:4e:d9:4f:9c:70:
         46:de:08:d8:9f:cd:3f:f5:5c:20:7f:02:4e:65:48:db:d2:e3:
         a0:18:77:a5:6c:4f:11:cd:10:2e:ac:5d:d9:fa:fd:05:96:bc:
         48:45:fd:67
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUfkWJ/mP6yG0iu5gJCjonbeyKyk0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3QUVB
NDc4RkQxQzAeFw0yNDA3MDMxMjU1MDFaFw0yNTA3MDIxMzAwMDFaMDMxMTAvBgNV
BAMTKENFRkVCQUQxNDhFQkQwNTUyMEY0N0U4MUI3RDI4MDM2NEMxRTUwMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQpbhHJa3+Dei+YY1azRWQ6mEa
ylLpeR4VAVvx/43RCCbtGYDDJ3fiYCQ8kAsskBxLDhUAxVbN0KNIP1/Pmt2ftZTy
HDHvSgzYt08gMf1YkVAxCEnEObrVMW5Xn5dqBEkloxyjZzw+csSb3wt0Xl6+KOOM
FR9oZNG+0DdekGxsFgubkypkgM/Gofu3DjKOv73c7SAqHw9+ZLnqee5xyLeoIrKJ
jVeNEFdA8xJIfXM5wdyNSsvvGRd4MH9r1qaG4dM2YNkXqyxwC0pT+RDjLg26nX5S
AsdwL9ug8xo8BHsmwPAGLB+LlU8IG2gEMcmST8rq6+U5vEpbpVl6ajS+OIRFAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUzv660Ujr0FUg9H6Bt9KANkweUCYwHwYDVR0j
BBgwFoAU5TCntDwMef2HBwBwgOL3rqR4/RwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
M2QyZjJmOC0zNTEyLTQzZTUtYmUxNy1iMTFiNThmOTYwODMvMC9FNTMwQTdCNDND
MEM3OUZEODcwNzAwNzA4MEUyRjdBRUE0NzhGRDFDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTUzMEE3QjQzQzBDNzlGRDg3MDcwMDcwODBFMkY3QUVBNDc4
RkQxQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzZDJmMmY4LTM1MTItNDNlNS1i
ZTE3LWIxMWI1OGY5NjA4My8wLzMyMzAzMjJlMzEzNjMyMmUzMzMyMmUzMDJmMzIz
MDJkMzIzNDIwM2QzZTIwMzEzNzM5MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMqiIDANBgkqhkiG
9w0BAQsFAAOCAQEADY1NhiXEYl7SEObnkFPCra1llYCVB8qvSyXPTz8/psEFuwrG
83ckCylUFYjnI+uzg65vwBYUHvEpbIihbv0ForYAa+cLcvPnEC9b0Emjy4f3Ux8H
7kQQ2jSbbhKqqYtLfuPoWn1O/+5d/JltlkMccdo79qeTPMMVRlGyP2UJfOToRwfJ
7wzTQzOk9KA+pTYttr23qfDwp4ZolFNR4OCIc1imIaQBAonkPvFDFARMA6axFeGW
a0OlxheoqOC6BvOo7Oxh06kDU49rZGYnGnE6M5TrmU7ZT5xwRt4I2J/NP/VcIH8C
TmVI29LjoBh3pWxPEc0QLqxd2fr9BZa8SEX9Zw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:39 2024 by rpki-client on console-ams.rpki-client.org