Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e312e302f32342d3234203d3e2039373934.roa
File:                     3230322e3134382e312e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          eYF3kpw0eWcGhmM1J054XLyGWyqvNuIA92cDW+UHb+c=
Subject key identifier:   7B:E4:AC:1B:48:17:9D:29:8F:7D:E6:E6:8C:6B:1D:8A:88:BA:70:D3
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       7FC8936015541D12C5B5AE90FF4161C86047756C
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e312e302f32342d3234203d3e2039373934.roa
Signing time:             Mon 31 Jul 2023 00:03:53 +0000
ROA not before:           Sun 30 Jul 2023 23:58:53 +0000
ROA not after:            Mon 29 Jul 2024 00:03:53 +0000
asID:                     9794
IP address blocks:        202.148.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
                          rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 16:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c8:93:60:15:54:1d:12:c5:b5:ae:90:ff:41:61:c8:60:47:75:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Jul 30 23:58:53 2023 GMT
            Not After : Jul 29 00:03:53 2024 GMT
        Subject: CN=7BE4AC1B48179D298F7DE6E68C6B1D8A88BA70D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:88:7a:1c:1f:b9:19:14:d1:79:bc:9f:d2:39:
                    73:19:c7:58:ba:11:fd:66:99:30:67:97:76:d0:9b:
                    d8:97:28:cf:98:9e:6b:41:bc:5b:8d:b8:1a:8a:4a:
                    63:f4:d5:a7:f9:4e:8a:e5:88:73:40:55:07:3b:fb:
                    84:75:c2:78:c8:8c:42:c0:0c:6a:dd:2b:58:58:98:
                    ef:79:c4:7b:1c:8e:26:99:c8:b1:3e:5d:fb:b0:27:
                    eb:eb:53:a2:99:df:79:59:bc:84:50:5a:ec:af:cd:
                    66:0f:cb:4e:f4:26:7a:d5:86:57:6f:ec:18:d8:a9:
                    aa:21:9a:86:90:02:b7:a9:e6:89:bc:3f:8f:d9:04:
                    d0:81:93:27:4b:7e:b9:56:30:05:d5:72:0e:c8:12:
                    97:9a:8c:13:56:ee:a1:f4:27:5f:6d:c2:d4:ee:5d:
                    cc:f8:58:1c:60:7a:4a:a8:ca:bb:54:11:49:65:b8:
                    b5:cf:b3:89:ee:93:7e:4c:94:b9:35:19:f6:cc:de:
                    50:a0:be:5c:db:2c:19:9d:d0:52:1c:14:3b:a9:80:
                    70:38:d1:aa:c3:73:22:7f:ea:f5:8f:6d:98:79:20:
                    b1:f6:0c:e6:9b:86:31:c1:0e:3a:29:4c:2c:84:d2:
                    7d:d9:4e:73:bb:ba:8c:05:dd:e0:bc:d5:04:00:c8:
                    e6:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E4:AC:1B:48:17:9D:29:8F:7D:E6:E6:8C:6B:1D:8A:88:BA:70:D3
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e312e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:41:65:dd:52:63:59:93:97:84:b4:6b:0a:e9:ad:36:41:f4:
         a1:cd:ca:75:f3:7f:17:c1:b4:10:84:76:ec:e6:39:f1:71:e4:
         0a:96:f9:72:79:fd:80:64:28:75:53:eb:5f:54:9a:49:de:f3:
         74:38:69:80:0f:b4:cb:b7:9a:2b:1d:e0:0d:11:dd:3b:16:b8:
         a0:f7:a9:b2:9f:19:a8:f1:b4:c0:71:fd:df:35:24:b9:59:8f:
         01:a8:d8:f5:a0:a6:cc:e2:72:4d:0a:23:81:7c:b3:8b:eb:32:
         e1:3e:27:76:0d:3c:2a:15:38:b1:58:e0:19:6f:5f:ff:62:ba:
         41:8e:82:b1:d2:68:75:d4:c1:fd:e5:a4:38:5d:af:64:be:e2:
         00:48:1b:d3:53:1c:2a:2a:76:e9:4a:33:ea:58:14:32:05:94:
         75:ca:e0:42:36:45:e1:63:a5:33:5c:a6:29:ea:49:a4:4d:88:
         81:5f:17:2f:a9:c0:e6:7a:0a:7e:53:cb:84:78:73:55:2f:72:
         34:e5:47:d5:30:62:51:e0:48:f8:fe:5b:08:25:38:05:29:c7:
         b0:ca:af:25:cb:72:02:b0:ee:7d:b7:f7:31:46:24:ce:31:91:
         92:e5:2d:24:82:ff:8a:cb:db:b7:7e:97:1b:bc:b6:a0:61:6e:
         aa:61:13:b8
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUf8iTYBVUHRLFta6Q/0FhyGBHdWwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3
NjNDRjM2MTAeFw0yMzA3MzAyMzU4NTNaFw0yNDA3MjkwMDAzNTNaMDMxMTAvBgNV
BAMTKDdCRTRBQzFCNDgxNzlEMjk4RjdERTZFNjhDNkIxRDhBODhCQTcwRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4iHocH7kZFNF5vJ/SOXMZx1i6
Ef1mmTBnl3bQm9iXKM+YnmtBvFuNuBqKSmP01af5TorliHNAVQc7+4R1wnjIjELA
DGrdK1hYmO95xHscjiaZyLE+XfuwJ+vrU6KZ33lZvIRQWuyvzWYPy070JnrVhldv
7BjYqaohmoaQArep5om8P4/ZBNCBkydLfrlWMAXVcg7IEpeajBNW7qH0J19twtTu
Xcz4WBxgekqoyrtUEUlluLXPs4nuk35MlLk1GfbM3lCgvlzbLBmd0FIcFDupgHA4
0arDcyJ/6vWPbZh5ILH2DOabhjHBDjopTCyE0n3ZTnO7uowF3eC81QQAyOYPAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUe+SsG0gXnSmPfebmjGsdioi6cNMwHwYDVR0j
BBgwFoAUCabx+k/FMta04TRi/CNMnHY882EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MzRlY2M0MC02Yjg0LTQ5ZTgtYjYwYi02ZTk5MDQxMjhjYTgvMC8wOUE2RjFGQTRG
QzUzMkQ2QjRFMTM0NjJGQzIzNEM5Qzc2M0NGMzYxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3NjND
RjM2MS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM0ZWNjNDAtNmI4NC00OWU4LWI2
MGItNmU5OTA0MTI4Y2E4LzAvMzIzMDMyMmUzMTM0MzgyZTMxMmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzkzNzM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKlAEwDQYJKoZIhvcNAQEL
BQADggEBAFVBZd1SY1mTl4S0awrprTZB9KHNynXzfxfBtBCEduzmOfFx5AqW+XJ5
/YBkKHVT619Umkne83Q4aYAPtMu3misd4A0R3TsWuKD3qbKfGajxtMBx/d81JLlZ
jwGo2PWgpszick0KI4F8s4vrMuE+J3YNPCoVOLFY4BlvX/9iukGOgrHSaHXUwf3l
pDhdr2S+4gBIG9NTHCoqdulKM+pYFDIFlHXK4EI2ReFjpTNcpinqSaRNiIFfFy+p
wOZ6Cn5Ty4R4c1UvcjTlR9UwYlHgSPj+WwglOAUpx7DKryXLcgKw7n239zFGJM4x
kZLlLSSC/4rL27d+lxu8tqBhbqphE7g=
-----END CERTIFICATE-----
Generated at Tue Apr 30 19:13:26 2024 by rpki-client on console-ams.rpki-client.org