Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137372e302f32342d3234203d3e20313430343231.roa
File:                     3230322e38372e3137372e302f32342d3234203d3e20313430343231.roa (raw, json)
Hash identifier:          AgWY24sSo6wKDU6nhRa3kOkMKyGMEck94Cr/nW4IAo4=
Subject key identifier:   0B:A9:B2:AF:88:C0:40:D9:4F:2A:D8:2A:B5:D8:07:07:F4:7D:0B:EF
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       5DA0178A38A56F4AC3A87C7DE913E13806241363
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137372e302f32342d3234203d3e20313430343231.roa
Signing time:             Thu 08 Aug 2024 08:44:37 +0000
ROA not before:           Thu 08 Aug 2024 08:39:37 +0000
ROA not after:            Thu 07 Aug 2025 08:44:37 +0000
asID:                     140421
IP address blocks:        202.87.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a0:17:8a:38:a5:6f:4a:c3:a8:7c:7d:e9:13:e1:38:06:24:13:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Aug  8 08:39:37 2024 GMT
            Not After : Aug  7 08:44:37 2025 GMT
        Subject: CN=0BA9B2AF88C040D94F2AD82AB5D80707F47D0BEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:23:e7:14:5a:2d:e5:95:b0:bd:04:9d:d4:e1:
                    8b:85:9c:64:47:f0:80:ab:c0:05:e3:d9:7f:89:5b:
                    4f:0d:38:68:83:16:e5:21:54:f4:31:b0:9d:1d:96:
                    b0:a9:7c:44:70:79:d8:37:c2:51:af:24:1c:a9:a0:
                    f5:86:81:40:a2:d9:a6:d7:d1:06:6c:21:8e:03:93:
                    49:8a:c1:95:16:cd:6c:48:fd:81:52:42:5c:df:d7:
                    a2:0e:92:4c:f2:12:4a:4d:05:c4:aa:88:96:12:7d:
                    09:1e:6c:21:12:13:34:2f:4a:ea:2a:07:0f:f4:38:
                    9b:6f:e4:b7:a9:58:b7:0a:67:36:37:cd:3a:23:b6:
                    ec:a6:18:04:2c:08:45:72:97:b8:1e:d1:48:e9:74:
                    d3:23:39:73:a3:fa:de:db:eb:c1:f8:de:7f:3d:44:
                    ff:f8:fd:fe:8a:5b:58:99:6a:1b:bc:8b:59:e3:f2:
                    7d:ec:51:06:b7:78:68:53:d2:5e:8b:de:fe:18:33:
                    3d:20:81:d2:7f:74:2f:85:9e:d0:ea:41:b2:7d:fa:
                    5c:03:ba:1e:91:66:08:4e:5a:14:12:b3:b2:5e:ca:
                    4a:d8:1f:a5:2b:71:e8:28:c2:66:93:0f:da:a3:58:
                    52:2c:42:44:6c:89:3a:d2:e9:42:2c:79:68:2f:76:
                    92:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A9:B2:AF:88:C0:40:D9:4F:2A:D8:2A:B5:D8:07:07:F4:7D:0B:EF
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137372e302f32342d3234203d3e20313430343231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.87.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:fb:95:d8:25:49:68:0b:c7:f6:05:48:ce:ea:5b:8f:e9:26:
         37:5c:e4:3e:db:93:7d:21:d7:60:83:12:f9:e1:3c:62:21:c7:
         47:ba:bf:27:b4:1d:4f:31:30:b5:55:0d:9a:ac:aa:20:6d:86:
         3f:fa:0a:af:a4:2f:70:01:7a:63:85:06:15:91:4e:bc:aa:fb:
         54:9d:5c:2e:72:1b:bb:d2:fd:23:06:6e:46:22:ad:13:b7:f8:
         16:8c:1f:34:0f:18:d5:4e:36:b9:09:7d:23:44:df:7e:ae:91:
         d6:ce:78:8c:bc:f8:94:f5:73:ca:61:a1:fb:6b:12:0c:37:7b:
         3c:06:2b:06:f7:d9:63:47:4d:3b:4e:49:94:e8:a8:58:ee:17:
         ea:12:df:0c:77:a5:1a:b8:7e:50:c6:69:c4:f5:1c:2e:ee:03:
         75:32:2c:aa:93:3f:ea:06:7b:fd:fd:72:68:47:0a:1a:e8:95:
         ca:98:19:b7:e2:7e:9b:ef:e1:f3:b7:0b:82:83:cc:de:f8:10:
         4c:60:04:65:5b:85:2d:1a:ca:87:df:db:c3:32:cb:43:7b:5f:
         c9:fc:93:c1:7f:1f:45:b2:c1:4d:96:fb:74:b6:d9:0b:af:e6:
         e6:65:ba:d3:6b:6d:93:7a:3d:cb:69:83:31:7a:1e:52:13:3f:
         97:2d:c8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 23:38:10 2024 by rpki-client on console-fra.rpki-client.org