Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32342e302f32322d3232203d3e203234353235.roa
File:                     3230332e3135332e32342e302f32322d3232203d3e203234353235.roa (raw, json)
Hash identifier:          FguSbN3XdJbxzcoq7RtBirw4JS0jUEh467buC/pIaGU=
Subject key identifier:   FC:53:31:FF:16:42:5A:A8:F0:E7:50:B3:84:72:25:A2:59:13:C0:C6
Certificate issuer:       /CN=ADCB9F9DF56E90B39B5344118194104F46A83702
Certificate serial:       06E56A2572FC12A0007626FC8BDC1D1B636E53F4
Authority key identifier: AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32342e302f32322d3232203d3e203234353235.roa
Signing time:             Tue 21 May 2024 07:00:01 +0000
ROA not before:           Tue 21 May 2024 06:55:01 +0000
ROA not after:            Tue 20 May 2025 07:00:01 +0000
asID:                     24525
IP address blocks:        203.153.24.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl
                          rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e5:6a:25:72:fc:12:a0:00:76:26:fc:8b:dc:1d:1b:63:6e:53:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADCB9F9DF56E90B39B5344118194104F46A83702
        Validity
            Not Before: May 21 06:55:01 2024 GMT
            Not After : May 20 07:00:01 2025 GMT
        Subject: CN=FC5331FF16425AA8F0E750B3847225A25913C0C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:19:2f:84:59:09:67:d7:f1:cf:7e:5a:a3:63:
                    1c:6b:2d:fb:44:02:34:2e:a6:43:43:f7:da:03:6c:
                    da:d8:c7:64:98:dc:c7:7c:5f:e8:15:27:d2:1c:55:
                    2f:55:37:dd:c9:2a:e7:75:f8:3d:4a:06:e2:5f:51:
                    dd:6b:ad:17:41:87:40:2f:1d:43:0e:08:8c:4d:68:
                    88:09:10:06:01:49:b8:7c:70:62:9a:24:fe:d2:3c:
                    72:11:ce:83:1e:59:9f:f2:c6:72:f8:f8:48:a7:77:
                    9f:70:55:0c:43:e8:d5:fd:a2:ba:1e:91:a1:29:e7:
                    f7:14:67:67:ae:5f:86:61:72:de:59:4d:4a:27:7f:
                    b3:49:ab:19:96:30:31:8b:e6:ac:c8:e7:2f:2d:c7:
                    00:b9:5b:50:e5:18:c1:34:9f:12:cb:bc:e4:39:aa:
                    3e:fb:ab:54:95:0f:6e:61:3d:2d:b4:5b:29:6d:4b:
                    6f:68:f9:1f:88:07:bb:2b:89:eb:82:f1:47:22:37:
                    d6:30:6b:e8:7e:18:7e:a9:ea:a0:80:c9:9d:66:c2:
                    2f:2a:e8:2b:21:f8:ce:5a:1e:c2:f8:c9:fc:ee:c2:
                    a8:d5:95:0f:7b:40:e9:2b:85:92:15:40:36:19:ce:
                    40:02:39:d7:6d:87:88:f5:df:4f:99:0c:9c:60:80:
                    cc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:53:31:FF:16:42:5A:A8:F0:E7:50:B3:84:72:25:A2:59:13:C0:C6
            X509v3 Authority Key Identifier:
                keyid:AD:CB:9F:9D:F5:6E:90:B3:9B:53:44:11:81:94:10:4F:46:A8:37:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/ADCB9F9DF56E90B39B5344118194104F46A83702.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADCB9F9DF56E90B39B5344118194104F46A83702.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1f4fd38-7826-4201-9f9b-1d7c76aa24dd/0/3230332e3135332e32342e302f32322d3232203d3e203234353235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.153.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:e7:9d:cf:94:c4:f0:91:0e:1b:72:6d:fa:2e:d9:e5:bb:b9:
         74:27:d2:53:40:26:f4:20:1b:f0:c6:6d:ff:fa:73:d9:8f:c5:
         91:db:35:b3:8c:af:f9:9e:80:ac:9e:19:6a:68:a0:f3:01:0f:
         41:a8:00:06:5d:8c:6a:7a:78:5a:a9:82:81:22:ae:0c:50:1a:
         b6:a5:d3:03:9d:75:c2:ea:e3:88:80:0f:40:cf:02:db:c8:1b:
         08:f3:26:bf:7b:af:a9:bc:9f:b4:38:d5:fd:11:36:32:e7:1a:
         e3:99:cd:df:7d:15:24:ae:d1:b2:26:59:d5:76:8d:2d:89:a4:
         54:f1:0c:91:75:bf:e1:28:47:70:60:95:e8:fd:41:c8:e9:c1:
         30:06:35:fd:0c:ae:91:65:ba:af:6f:ba:5c:b3:a8:3b:9c:75:
         22:6b:cb:cc:e3:1e:d6:31:ad:3b:15:b2:e7:20:d1:3f:ab:12:
         e0:2a:93:62:96:a1:72:34:75:1e:56:1c:e6:13:73:36:43:c7:
         cb:7e:eb:26:4b:23:15:f4:70:2f:ad:e8:88:e5:40:91:8f:74:
         6c:7b:8c:3e:76:bd:24:98:89:04:72:a8:25:21:52:ba:50:57:
         b5:49:68:51:3e:4b:a3:2b:d8:41:91:fc:0d:5c:c0:dd:96:15:
         96:72:a2:a4
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUBuVqJXL8EqAAdib8i9wdG2NuU/QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0
NkE4MzcwMjAeFw0yNDA1MjEwNjU1MDFaFw0yNTA1MjAwNzAwMDFaMDMxMTAvBgNV
BAMTKEZDNTMzMUZGMTY0MjVBQThGMEU3NTBCMzg0NzIyNUEyNTkxM0MwQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeGS+EWQln1/HPflqjYxxrLftE
AjQupkND99oDbNrYx2SY3Md8X+gVJ9IcVS9VN93JKud1+D1KBuJfUd1rrRdBh0Av
HUMOCIxNaIgJEAYBSbh8cGKaJP7SPHIRzoMeWZ/yxnL4+Eind59wVQxD6NX9oroe
kaEp5/cUZ2euX4Zhct5ZTUonf7NJqxmWMDGL5qzI5y8txwC5W1DlGME0nxLLvOQ5
qj77q1SVD25hPS20WyltS29o+R+IB7srieuC8UciN9Ywa+h+GH6p6qCAyZ1mwi8q
6Csh+M5aHsL4yfzuwqjVlQ97QOkrhZIVQDYZzkACOddth4j130+ZDJxggMx9AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU/FMx/xZCWqjw51CzhHIlolkTwMYwHwYDVR0j
BBgwFoAUrcufnfVukLObU0QRgZQQT0aoNwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MWY0ZmQzOC03ODI2LTQyMDEtOWY5Yi0xZDdjNzZhYTI0ZGQvMC9BRENCOUY5REY1
NkU5MEIzOUI1MzQ0MTE4MTk0MTA0RjQ2QTgzNzAyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQURDQjlGOURGNTZFOTBCMzlCNTM0NDExODE5NDEwNEY0NkE4
MzcwMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxZjRmZDM4LTc4MjYtNDIwMS05
ZjliLTFkN2M3NmFhMjRkZC8wLzMyMzAzMzJlMzEzNTMzMmUzMjM0MmUzMDJmMzIz
MjJkMzIzMjIwM2QzZTIwMzIzNDM1MzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsuZGDANBgkqhkiG
9w0BAQsFAAOCAQEAFOedz5TE8JEOG3Jt+i7Z5bu5dCfSU0Am9CAb8MZt//pz2Y/F
kds1s4yv+Z6ArJ4Zamig8wEPQagABl2Manp4WqmCgSKuDFAatqXTA511wurjiIAP
QM8C28gbCPMmv3uvqbyftDjV/RE2Muca45nN330VJK7RsiZZ1XaNLYmkVPEMkXW/
4ShHcGCV6P1ByOnBMAY1/QyukWW6r2+6XLOoO5x1ImvLzOMe1jGtOxWy5yDRP6sS
4CqTYpahcjR1HlYc5hNzNkPHy37rJksjFfRwL63oiOVAkY90bHuMPna9JJiJBHKo
JSFSulBXtUloUT5LoyvYQZH8DVzA3ZYVlnKipA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:52:55 2024 by rpki-client on console-ams.rpki-client.org