Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3230322e3136392e3232342e302f32302d3234203d3e203233363731.roa
File:                     3230322e3136392e3232342e302f32302d3234203d3e203233363731.roa (raw, json)
Hash identifier:          VvawElHSEjgLUquHqE+8vgYpB9KNUoz3JVsFKzZYRSY=
Subject key identifier:   11:63:84:50:3C:05:F4:4A:D5:60:D0:E9:0A:EC:07:BE:D6:0E:2E:44
Certificate issuer:       /CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
Certificate serial:       51730329FBAF337398C3DF081D2FEE50A445A4B3
Authority key identifier: 47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3230322e3136392e3232342e302f32302d3234203d3e203233363731.roa
Signing time:             Mon 31 Jul 2023 00:04:37 +0000
ROA not before:           Sun 30 Jul 2023 23:59:37 +0000
ROA not after:            Mon 29 Jul 2024 00:04:37 +0000
asID:                     23671
IP address blocks:        202.169.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl
                          rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:73:03:29:fb:af:33:73:98:c3:df:08:1d:2f:ee:50:a4:45:a4:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47661DC42A2BCC5BCEEE73AC8ABA71B12188866F
        Validity
            Not Before: Jul 30 23:59:37 2023 GMT
            Not After : Jul 29 00:04:37 2024 GMT
        Subject: CN=116384503C05F44AD560D0E90AEC07BED60E2E44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:15:4b:61:bf:18:9f:0a:4a:10:ee:21:77:d4:
                    28:da:7a:13:cd:9d:0a:fc:d5:d4:07:e0:19:a8:49:
                    b7:54:81:49:84:f7:9c:ee:34:71:99:24:f1:9b:62:
                    b8:4e:77:ea:47:a1:b8:ab:da:d9:fa:39:43:20:5d:
                    9d:f5:c3:e4:7e:a1:6a:b5:f6:3f:67:98:b8:93:fa:
                    12:0c:29:cd:65:f8:2f:fd:05:40:c7:06:4c:1a:cd:
                    c6:3f:fc:ff:cf:58:04:45:75:90:e2:9d:9e:a4:d3:
                    90:ef:a5:2c:df:e4:e2:71:cd:3c:07:80:b3:ad:14:
                    a5:81:a4:84:e8:47:3d:95:5b:18:47:bb:3d:5b:4d:
                    48:63:32:26:74:f5:f3:4d:10:67:d0:28:9d:fe:b8:
                    16:21:d6:d1:28:30:11:a8:7a:e4:b2:07:15:44:58:
                    fd:0e:89:4d:e7:33:82:a6:df:b1:2a:b5:e3:64:6f:
                    2a:fe:0b:6b:88:7c:5b:97:c6:9a:96:30:ee:8b:90:
                    75:3c:1c:81:d3:94:6a:7b:ee:a0:62:25:f5:e0:b0:
                    d6:77:4a:2b:69:b0:c5:15:e0:fe:24:eb:09:f6:6f:
                    2d:c6:d2:05:3f:bd:d2:8f:2f:c5:27:46:95:ef:5e:
                    35:08:bd:89:31:04:f0:9e:bd:47:c7:6b:42:63:9f:
                    90:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:63:84:50:3C:05:F4:4A:D5:60:D0:E9:0A:EC:07:BE:D6:0E:2E:44
            X509v3 Authority Key Identifier:
                keyid:47:66:1D:C4:2A:2B:CC:5B:CE:EE:73:AC:8A:BA:71:B1:21:88:86:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/47661DC42A2BCC5BCEEE73AC8ABA71B12188866F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed9ba953-8489-450e-bbdf-764571fbace7/0/3230322e3136392e3232342e302f32302d3234203d3e203233363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1b:30:70:b6:5d:2b:0f:ba:62:f6:fb:58:6f:3d:06:d7:9e:4b:
         7a:88:df:52:45:db:69:57:0d:8b:f5:63:8b:b3:86:40:1b:d4:
         d0:23:3a:83:8d:3c:8a:e8:ca:60:ac:81:a3:37:6e:d8:08:1b:
         7c:02:70:28:d8:2e:c4:7f:54:20:6f:61:3c:63:9f:78:18:99:
         c0:58:ef:c3:8b:5c:66:34:74:9a:b2:8c:87:b3:a7:31:cf:64:
         6e:4e:10:42:04:0b:6c:a2:49:00:2b:e2:51:44:ef:ce:48:e1:
         33:65:7e:16:78:c9:c1:f2:66:08:b3:0a:ef:9d:d1:33:f4:3f:
         8b:7d:f7:98:48:3c:f5:49:af:e7:14:46:f7:02:89:a3:da:1d:
         1b:9c:6a:61:17:a6:f7:c1:e6:38:e4:57:9f:ce:19:d1:72:61:
         bc:03:55:74:ba:0a:5c:92:ba:c0:c4:f9:d8:b3:ca:85:9b:5a:
         0c:6e:a2:ed:b4:b5:2a:fa:37:78:f1:af:5a:fe:92:8d:df:df:
         87:48:48:b1:f6:60:a4:a5:cd:49:3b:04:98:87:8c:33:d8:07:
         91:a2:bd:0d:be:3b:41:50:b5:db:0a:1a:c6:d6:6c:d6:7c:04:
         ae:7a:f2:ca:0b:19:ac:45:e2:1e:71:3e:23:88:1e:a3:83:4a:
         38:0d:68:17
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUUXMDKfuvM3OYw98IHS/uUKRFpLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDc2NjFEQzQyQTJCQ0M1QkNFRUU3M0FDOEFCQTcxQjEy
MTg4ODY2RjAeFw0yMzA3MzAyMzU5MzdaFw0yNDA3MjkwMDA0MzdaMDMxMTAvBgNV
BAMTKDExNjM4NDUwM0MwNUY0NEFENTYwRDBFOTBBRUMwN0JFRDYwRTJFNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqFUthvxifCkoQ7iF31CjaehPN
nQr81dQH4BmoSbdUgUmE95zuNHGZJPGbYrhOd+pHobir2tn6OUMgXZ31w+R+oWq1
9j9nmLiT+hIMKc1l+C/9BUDHBkwazcY//P/PWARFdZDinZ6k05DvpSzf5OJxzTwH
gLOtFKWBpIToRz2VWxhHuz1bTUhjMiZ09fNNEGfQKJ3+uBYh1tEoMBGoeuSyBxVE
WP0OiU3nM4Km37EqteNkbyr+C2uIfFuXxpqWMO6LkHU8HIHTlGp77qBiJfXgsNZ3
SitpsMUV4P4k6wn2by3G0gU/vdKPL8UnRpXvXjUIvYkxBPCevUfHa0Jjn5ChAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUEWOEUDwF9ErVYNDpCuwHvtYOLkQwHwYDVR0j
BBgwFoAUR2YdxCorzFvO7nOsirpxsSGIhm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZDliYTk1My04NDg5LTQ1MGUtYmJkZi03NjQ1NzFmYmFjZTcvMC80NzY2MURDNDJB
MkJDQzVCQ0VFRTczQUM4QUJBNzFCMTIxODg4NjZGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDc2NjFEQzQyQTJCQ0M1QkNFRUU3M0FDOEFCQTcxQjEyMTg4
ODY2Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VkOWJhOTUzLTg0ODktNDUwZS1i
YmRmLTc2NDU3MWZiYWNlNy8wLzMyMzAzMjJlMzEzNjM5MmUzMjMyMzQyZTMwMmYz
MjMwMmQzMjM0MjAzZDNlMjAzMjMzMzYzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEyqngMA0GCSqG
SIb3DQEBCwUAA4IBAQAbMHC2XSsPumL2+1hvPQbXnkt6iN9SRdtpVw2L9WOLs4ZA
G9TQIzqDjTyK6MpgrIGjN27YCBt8AnAo2C7Ef1Qgb2E8Y594GJnAWO/Di1xmNHSa
soyHs6cxz2RuThBCBAtsokkAK+JRRO/OSOEzZX4WeMnB8mYIswrvndEz9D+LffeY
SDz1Sa/nFEb3Aomj2h0bnGphF6b3weY45FefzhnRcmG8A1V0ugpckrrAxPnYs8qF
m1oMbqLttLUq+jd48a9a/pKN39+HSEix9mCkpc1JOwSYh4wz2AeRor0NvjtBULXb
ChrG1mzWfASuevLKCxmsReIecT4jiB6jg0o4DWgX
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:46:17 2024 by rpki-client on console-ams.rpki-client.org