Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31392e302f32342d3234203d3e2039373934.roa
File:                     3230322e3134382e31392e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          tjWi7K8p+jl0qKb277ZgBcAzeWkCwTTKXqz8Wm4OgQI=
Subject key identifier:   81:64:0F:1E:C9:15:EF:38:1F:7B:02:C4:EE:0B:53:44:13:03:A6:CD
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       69C49F348FA3B249C9269D363B456D98903658FD
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31392e302f32342d3234203d3e2039373934.roa
Signing time:             Mon 31 Jul 2023 00:03:53 +0000
ROA not before:           Sun 30 Jul 2023 23:58:53 +0000
ROA not after:            Mon 29 Jul 2024 00:03:53 +0000
asID:                     9794
IP address blocks:        202.148.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
                          rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 16:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c4:9f:34:8f:a3:b2:49:c9:26:9d:36:3b:45:6d:98:90:36:58:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Jul 30 23:58:53 2023 GMT
            Not After : Jul 29 00:03:53 2024 GMT
        Subject: CN=81640F1EC915EF381F7B02C4EE0B53441303A6CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e7:d6:23:5a:83:ab:3e:54:57:a9:90:cf:c5:
                    02:0d:28:59:8f:b7:fd:bf:6f:4d:51:a9:33:cc:e5:
                    53:d9:9c:65:93:e0:70:41:56:c5:ea:d2:cf:f7:bb:
                    9b:b2:62:aa:5b:b7:68:08:22:db:d1:aa:35:79:ad:
                    5e:4e:e0:f7:71:03:2a:21:a8:8f:96:aa:73:9d:0a:
                    76:90:74:c5:7f:0c:ff:7c:35:c0:40:87:b8:42:47:
                    33:8a:dd:8f:74:b0:bf:17:c3:90:1d:da:da:ed:2d:
                    85:1b:ef:2e:86:b0:12:ff:06:56:7f:4a:26:52:21:
                    6b:45:dd:3d:4d:6d:bc:76:37:6a:f7:d3:33:2d:19:
                    22:ed:42:c4:34:6a:d0:c9:1f:eb:70:9f:ec:9e:aa:
                    2a:0d:c5:19:d2:5b:ee:ba:31:32:52:3c:68:94:81:
                    78:fc:cd:cc:97:47:5a:d3:3e:2a:a4:eb:13:ee:56:
                    8b:03:15:ef:30:b2:22:d9:ac:d0:49:df:88:0f:1e:
                    e1:40:6d:6a:bb:43:93:4c:17:28:b2:50:56:ef:96:
                    35:c4:a0:66:58:90:b7:6b:fe:67:c6:84:70:1f:ce:
                    65:ba:88:8d:39:72:b0:48:9b:03:c4:13:a7:1c:6f:
                    e4:a2:5a:97:52:04:1a:4c:bf:f0:40:35:4c:d4:08:
                    0a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:64:0F:1E:C9:15:EF:38:1F:7B:02:C4:EE:0B:53:44:13:03:A6:CD
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230322e3134382e31392e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.148.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:2e:21:6f:f5:03:58:25:3d:4b:75:fb:94:1a:f3:23:3b:97:
         a1:04:e0:ce:29:e2:0a:53:6c:0c:52:5b:9c:83:37:df:79:fe:
         e5:aa:a4:c7:d6:8c:db:84:d9:df:09:af:51:62:df:4c:67:44:
         24:1e:7e:d5:fc:ea:51:ba:6b:59:3d:94:ec:55:35:5e:94:da:
         5c:3a:c3:18:31:91:9d:1c:d3:d1:7e:54:b8:b5:fc:d2:63:5d:
         ac:42:6d:99:23:7e:4b:1d:0b:82:a0:d4:7c:c2:3b:c8:cf:91:
         90:e0:3c:e0:5c:59:4e:a0:c5:b1:fa:18:70:e3:b8:bf:76:a7:
         26:9e:00:7d:8e:80:7f:e2:cb:de:39:28:4a:3c:53:0f:a7:f1:
         06:ee:d5:bb:9f:a5:c6:9b:c4:96:d9:a8:d3:e7:78:f6:b8:88:
         1b:70:60:1e:f3:f2:3e:a8:1e:d5:95:d3:6b:a9:7c:ab:70:ca:
         1c:90:a6:85:2d:fe:c4:a8:75:f5:c9:9b:01:d0:42:7a:84:9f:
         73:b9:33:43:ca:b9:a2:4f:76:0f:f5:21:2f:bd:c4:56:a4:76:
         67:ed:7a:4e:e5:8f:d9:2d:e0:69:f9:9a:5c:ec:13:13:1a:4c:
         0e:5c:c1:af:21:ee:d4:12:67:1e:51:8b:66:c7:11:eb:a9:e6:
         8a:0d:3b:e9
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUacSfNI+jsknJJp02O0VtmJA2WP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3
NjNDRjM2MTAeFw0yMzA3MzAyMzU4NTNaFw0yNDA3MjkwMDAzNTNaMDMxMTAvBgNV
BAMTKDgxNjQwRjFFQzkxNUVGMzgxRjdCMDJDNEVFMEI1MzQ0MTMwM0E2Q0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb59YjWoOrPlRXqZDPxQINKFmP
t/2/b01RqTPM5VPZnGWT4HBBVsXq0s/3u5uyYqpbt2gIItvRqjV5rV5O4PdxAyoh
qI+WqnOdCnaQdMV/DP98NcBAh7hCRzOK3Y90sL8Xw5Ad2trtLYUb7y6GsBL/BlZ/
SiZSIWtF3T1Nbbx2N2r30zMtGSLtQsQ0atDJH+twn+yeqioNxRnSW+66MTJSPGiU
gXj8zcyXR1rTPiqk6xPuVosDFe8wsiLZrNBJ34gPHuFAbWq7Q5NMFyiyUFbvljXE
oGZYkLdr/mfGhHAfzmW6iI05crBImwPEE6ccb+SiWpdSBBpMv/BANUzUCApjAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUgWQPHskV7zgfewLE7gtTRBMDps0wHwYDVR0j
BBgwFoAUCabx+k/FMta04TRi/CNMnHY882EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MzRlY2M0MC02Yjg0LTQ5ZTgtYjYwYi02ZTk5MDQxMjhjYTgvMC8wOUE2RjFGQTRG
QzUzMkQ2QjRFMTM0NjJGQzIzNEM5Qzc2M0NGMzYxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3NjND
RjM2MS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i
NjBiLTZlOTkwNDEyOGNhOC8wLzMyMzAzMjJlMzEzNDM4MmUzMTM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzkzNzM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADKlBMwDQYJKoZIhvcN
AQELBQADggEBADsuIW/1A1glPUt1+5Qa8yM7l6EE4M4p4gpTbAxSW5yDN995/uWq
pMfWjNuE2d8Jr1Fi30xnRCQeftX86lG6a1k9lOxVNV6U2lw6wxgxkZ0c09F+VLi1
/NJjXaxCbZkjfksdC4Kg1HzCO8jPkZDgPOBcWU6gxbH6GHDjuL92pyaeAH2OgH/i
y945KEo8Uw+n8Qbu1bufpcabxJbZqNPnePa4iBtwYB7z8j6oHtWV02upfKtwyhyQ
poUt/sSodfXJmwHQQnqEn3O5M0PKuaJPdg/1IS+9xFakdmftek7lj9kt4Gn5mlzs
ExMaTA5cwa8h7tQSZx5Ri2bHEeup5ooNO+k=
-----END CERTIFICATE-----
Generated at Tue Apr 30 18:54:28 2024 by rpki-client on console-fra.rpki-client.org