Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35322e302f32342d3234203d3e203435333132.roa
File:                     3230322e38312e35322e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier:          /dy/QXe6kq6jehNtf50cRD4MnljK96Oz45Idtyr5p3Q=
Subject key identifier:   77:76:5D:4D:E1:25:2B:BA:C7:DA:D7:20:1B:6C:5C:CF:99:AB:F2:41
Certificate issuer:       /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial:       75B176ABE4DB7C69AE7B771E73A14C6A81D41E3E
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35322e302f32342d3234203d3e203435333132.roa
Signing time:             Mon 01 Jul 2024 01:04:13 +0000
ROA not before:           Mon 01 Jul 2024 00:59:13 +0000
ROA not after:            Mon 30 Jun 2025 01:04:13 +0000
asID:                     45312
IP address blocks:        202.81.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
                          rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 13:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:b1:76:ab:e4:db:7c:69:ae:7b:77:1e:73:a1:4c:6a:81:d4:1e:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
        Validity
            Not Before: Jul  1 00:59:13 2024 GMT
            Not After : Jun 30 01:04:13 2025 GMT
        Subject: CN=77765D4DE1252BBAC7DAD7201B6C5CCF99ABF241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:cc:98:25:32:a5:c8:ba:f7:5e:71:11:eb:a3:
                    5b:9f:2a:08:21:c0:ad:0e:38:db:45:be:92:d0:03:
                    56:cb:95:49:91:48:f8:e0:6d:0c:df:ae:3e:68:7b:
                    e8:d2:0c:82:9e:74:1d:6d:7a:d8:5f:f6:fc:79:d9:
                    ed:2b:ca:e9:13:c6:d3:84:90:76:ce:8e:d7:25:ca:
                    80:2e:85:e2:bd:aa:c7:5e:23:9c:21:31:6e:48:6a:
                    28:82:16:0f:d5:02:c3:8a:37:86:24:31:88:9c:2b:
                    ab:71:72:09:d1:34:7b:0e:8c:79:fa:98:02:98:a0:
                    7a:fb:53:57:9c:a2:fa:0e:84:80:02:23:ac:86:0c:
                    53:65:ad:64:3f:a1:18:db:2b:ea:5b:f2:b4:f3:06:
                    b3:b5:50:ca:e6:a2:d9:f7:68:32:76:a5:1d:b4:1b:
                    f2:2f:77:d3:f1:32:45:11:b9:1f:09:ad:11:be:be:
                    89:b1:6f:99:60:fc:82:10:f3:0e:80:17:7f:86:ef:
                    a5:7c:74:b1:ba:3b:f5:9d:92:32:3c:c7:2c:3c:e5:
                    49:02:3c:6c:93:b4:b4:f4:63:5e:69:23:a9:9b:cd:
                    96:78:76:ac:e1:30:8b:cd:b2:76:3b:48:af:f0:03:
                    e8:cf:33:be:5a:a9:e5:33:b8:64:4d:21:78:e6:0b:
                    c6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:76:5D:4D:E1:25:2B:BA:C7:DA:D7:20:1B:6C:5C:CF:99:AB:F2:41
            X509v3 Authority Key Identifier:
                keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3230322e38312e35322e302f32342d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.81.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:0a:5d:1e:28:9d:3d:31:99:95:e7:8b:f8:61:de:df:b5:f8:
         87:2f:5a:97:4c:81:bc:6f:4e:bf:35:06:98:10:82:f5:77:17:
         d3:04:81:87:66:a7:e3:02:36:12:c7:33:aa:b5:8c:50:72:e8:
         1a:94:43:3a:0e:96:2e:f8:81:6b:f2:47:d2:be:91:83:3f:1e:
         86:ca:4a:01:6a:41:52:0c:48:41:9d:e3:72:93:48:be:1d:0d:
         e6:33:a1:ec:06:77:13:b6:57:cf:47:a8:89:74:03:de:56:5c:
         1a:a0:7b:1e:a5:0c:2e:3b:49:e2:f5:8a:4b:ba:e3:ec:bd:fc:
         20:96:af:17:70:97:0e:db:09:ca:ee:5b:21:0b:4a:3b:ee:cd:
         c9:37:8e:39:b6:7d:95:97:8a:71:d4:ec:d3:cf:fb:79:b5:fd:
         f8:a5:52:b9:17:1b:57:91:e4:c3:bf:0e:0d:ee:26:70:5b:7b:
         93:4f:c9:d8:72:5e:79:dd:e9:c4:9a:8d:cc:2d:0e:2c:56:ad:
         28:7d:0b:6f:ec:c5:40:e0:eb:5a:06:3e:07:67:87:8a:81:78:
         a5:50:f7:91:7b:19:04:50:65:86:89:09:25:fd:af:99:c5:00:
         90:6b:f0:4f:39:48:82:cf:4c:4a:d5:23:af:0a:2f:2c:a4:72:
         72:2f:76:71
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUdbF2q+TbfGmue3cec6FMaoHUHj4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NB
MEJGQzQ0MTAeFw0yNDA3MDEwMDU5MTNaFw0yNTA2MzAwMTA0MTNaMDMxMTAvBgNV
BAMTKDc3NzY1RDRERTEyNTJCQkFDN0RBRDcyMDFCNkM1Q0NGOTlBQkYyNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3zJglMqXIuvdecRHro1ufKggh
wK0OONtFvpLQA1bLlUmRSPjgbQzfrj5oe+jSDIKedB1tethf9vx52e0ryukTxtOE
kHbOjtclyoAuheK9qsdeI5whMW5IaiiCFg/VAsOKN4YkMYicK6txcgnRNHsOjHn6
mAKYoHr7U1ecovoOhIACI6yGDFNlrWQ/oRjbK+pb8rTzBrO1UMrmotn3aDJ2pR20
G/Ivd9PxMkURuR8JrRG+vomxb5lg/IIQ8w6AF3+G76V8dLG6O/WdkjI8xyw85UkC
PGyTtLT0Y15pI6mbzZZ4dqzhMIvNsnY7SK/wA+jPM75aqeUzuGRNIXjmC8brAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUd3ZdTeElK7rH2tcgG2xcz5mr8kEwHwYDVR0j
BBgwFoAUFU7gMZhGe5YxX9tSf7O7zKC/xEEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NjIxZjc1My1hODhlLTRlZGYtYTMwNi1iZDkzZDVhMzhmZWEvMC8xNTRFRTAzMTk4
NDY3Qjk2MzE1RkRCNTI3RkIzQkJDQ0EwQkZDNDQxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NBMEJG
QzQ0MS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2MjFmNzUzLWE4OGUtNGVkZi1h
MzA2LWJkOTNkNWEzOGZlYS8wLzMyMzAzMjJlMzgzMTJlMzUzMjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM0MzUzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKUTQwDQYJKoZIhvcN
AQELBQADggEBAC4KXR4onT0xmZXni/hh3t+1+IcvWpdMgbxvTr81BpgQgvV3F9ME
gYdmp+MCNhLHM6q1jFBy6BqUQzoOli74gWvyR9K+kYM/HobKSgFqQVIMSEGd43KT
SL4dDeYzoewGdxO2V89HqIl0A95WXBqgex6lDC47SeL1iku64+y9/CCWrxdwlw7b
CcruWyELSjvuzck3jjm2fZWXinHU7NPP+3m1/filUrkXG1eR5MO/Dg3uJnBbe5NP
ydhyXnnd6cSajcwtDixWrSh9C2/sxUDg61oGPgdnh4qBeKVQ95F7GQRQZYaJCSX9
r5nFAJBr8E85SILPTErVI68KLyykcnIvdnE=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:13 2024 by rpki-client on console-ams.rpki-client.org