Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136322e302f32342d3234203d3e2039373934.roa
File:                     3230332e3230312e3136322e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          yI2I2ez33GQdVzSsF92Ij1Uko4lApwluehUJ6kIQWQw=
Subject key identifier:   24:FB:0F:32:31:1E:3B:39:87:2F:A9:6A:53:B5:61:15:C6:71:D7:E0
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       036A569E6DD8AA043D0F5B29C205C848E5C4E6E8
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136322e302f32342d3234203d3e2039373934.roa
Signing time:             Mon 31 Jul 2023 00:03:54 +0000
ROA not before:           Sun 30 Jul 2023 23:58:54 +0000
ROA not after:            Mon 29 Jul 2024 00:03:54 +0000
asID:                     9794
IP address blocks:        203.201.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
                          rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 16:50:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:6a:56:9e:6d:d8:aa:04:3d:0f:5b:29:c2:05:c8:48:e5:c4:e6:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Jul 30 23:58:54 2023 GMT
            Not After : Jul 29 00:03:54 2024 GMT
        Subject: CN=24FB0F32311E3B39872FA96A53B56115C671D7E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:d6:58:70:d6:00:38:cf:17:c6:16:0a:de:
                    60:26:7c:86:08:df:0d:6b:6c:13:cd:d3:3b:34:10:
                    03:0f:e3:a3:58:ed:b6:ae:b3:a1:9c:7b:8e:24:a6:
                    a2:8f:1d:0f:d2:48:dd:d2:6d:8c:68:04:37:11:bb:
                    df:64:5c:65:95:f1:e7:76:22:fd:26:91:62:09:4d:
                    3b:fc:ca:3e:4e:2a:1b:3e:28:42:d8:e8:a8:4d:02:
                    da:0a:dc:1e:ae:ea:a6:86:10:0e:36:24:2a:a2:ac:
                    71:a1:0d:e8:a1:6a:83:ba:49:15:47:82:88:55:9e:
                    3e:11:ca:95:45:77:6e:e0:ad:26:05:f7:36:b3:f0:
                    a7:36:6a:88:c3:77:77:39:ab:84:f0:91:31:e6:84:
                    87:e6:37:18:a1:b1:ee:7e:75:a5:36:8e:23:93:6c:
                    9e:cf:b3:38:5f:b7:da:9e:ae:3c:fe:fe:a0:03:b2:
                    75:3e:72:57:ee:e6:a9:c6:2d:59:2e:8d:cc:55:6b:
                    98:59:e9:77:b1:78:85:cf:c7:09:52:51:f7:b1:11:
                    3b:b1:ec:ad:40:e5:f0:e1:46:76:b1:21:0f:13:26:
                    2a:f9:7c:25:5e:c9:04:ae:6b:8f:d6:e6:12:bc:93:
                    36:83:3a:66:33:bc:92:9c:77:10:14:01:4c:5e:e0:
                    66:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FB:0F:32:31:1E:3B:39:87:2F:A9:6A:53:B5:61:15:C6:71:D7:E0
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136322e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.201.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:83:7b:17:e4:7b:86:74:03:f1:50:a5:f1:e8:4b:c5:ac:5e:
         0f:cf:b5:ba:62:6f:45:23:ee:89:5a:29:56:94:0d:7b:2e:d2:
         95:c7:f0:a5:f4:7a:c1:73:43:50:c8:ab:80:37:82:e9:59:74:
         75:13:7f:48:a3:27:6b:e9:69:2a:46:d7:98:95:6e:ef:0f:e4:
         1a:5b:ec:3c:86:08:2d:8b:21:dd:11:49:e5:69:93:9d:6e:20:
         df:44:51:53:a7:b6:2f:6c:94:ce:1d:a0:64:95:41:59:af:b6:
         1b:38:fb:bb:6b:ba:3b:c3:a9:00:bb:86:5d:a0:f5:92:11:9a:
         22:ce:d9:01:72:64:c6:2b:38:05:49:cf:50:bd:e0:59:fe:04:
         32:ee:28:22:50:7c:de:83:44:40:64:74:39:39:28:65:d4:55:
         3e:58:b3:07:99:a5:30:dd:0e:4d:5a:2b:80:bd:9a:2e:b5:8f:
         a1:ef:f8:4d:03:e4:97:3c:f8:db:35:c7:58:30:eb:4f:25:11:
         fc:15:1a:35:ab:cb:cc:3b:9a:69:b5:ca:ac:14:ab:d7:e5:08:
         bf:0c:b6:77:15:49:f4:1e:a1:a5:45:5e:76:65:f8:3a:fe:d0:
         80:2a:12:ad:96:51:cf:65:bf:3f:1a:42:57:fb:bd:93:d0:7a:
         c6:0d:25:d7
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUA2pWnm3YqgQ9D1spwgXISOXE5ugwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3
NjNDRjM2MTAeFw0yMzA3MzAyMzU4NTRaFw0yNDA3MjkwMDAzNTRaMDMxMTAvBgNV
BAMTKDI0RkIwRjMyMzExRTNCMzk4NzJGQTk2QTUzQjU2MTE1QzY3MUQ3RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBG9ZYcNYAOM8XxhYK3mAmfIYI
3w1rbBPN0zs0EAMP46NY7baus6Gce44kpqKPHQ/SSN3SbYxoBDcRu99kXGWV8ed2
Iv0mkWIJTTv8yj5OKhs+KELY6KhNAtoK3B6u6qaGEA42JCqirHGhDeihaoO6SRVH
gohVnj4RypVFd27grSYF9zaz8Kc2aojDd3c5q4TwkTHmhIfmNxihse5+daU2jiOT
bJ7Pszhft9qerjz+/qADsnU+clfu5qnGLVkujcxVa5hZ6XexeIXPxwlSUfexETux
7K1A5fDhRnaxIQ8TJir5fCVeyQSua4/W5hK8kzaDOmYzvJKcdxAUAUxe4GYHAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUJPsPMjEeOzmHL6lqU7VhFcZx1+AwHwYDVR0j
BBgwFoAUCabx+k/FMta04TRi/CNMnHY882EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MzRlY2M0MC02Yjg0LTQ5ZTgtYjYwYi02ZTk5MDQxMjhjYTgvMC8wOUE2RjFGQTRG
QzUzMkQ2QjRFMTM0NjJGQzIzNEM5Qzc2M0NGMzYxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3NjND
RjM2MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i
NjBiLTZlOTkwNDEyOGNhOC8wLzMyMzAzMzJlMzIzMDMxMmUzMTM2MzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzOTM3MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMvJojANBgkqhkiG
9w0BAQsFAAOCAQEAj4N7F+R7hnQD8VCl8ehLxaxeD8+1umJvRSPuiVopVpQNey7S
lcfwpfR6wXNDUMirgDeC6Vl0dRN/SKMna+lpKkbXmJVu7w/kGlvsPIYILYsh3RFJ
5WmTnW4g30RRU6e2L2yUzh2gZJVBWa+2Gzj7u2u6O8OpALuGXaD1khGaIs7ZAXJk
xis4BUnPUL3gWf4EMu4oIlB83oNEQGR0OTkoZdRVPlizB5mlMN0OTVorgL2aLrWP
oe/4TQPklzz42zXHWDDrTyUR/BUaNavLzDuaabXKrBSr1+UIvwy2dxVJ9B6hpUVe
dmX4Ov7QgCoSrZZRz2W/PxpCV/u9k9B6xg0l1w==
-----END CERTIFICATE-----
Generated at Tue Apr 30 19:13:26 2024 by rpki-client on console-ams.rpki-client.org