Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136382e302f32342d3234203d3e2039373934.roa
File:                     3230332e3230312e3136382e302f32342d3234203d3e2039373934.roa (raw, json)
Hash identifier:          NbnAxdt/n6rzupAqxL+zSXX4SfTiZaP9x/OeJxK10Os=
Subject key identifier:   3F:0E:A7:47:21:20:A3:FC:4E:92:0B:52:DC:6E:9C:17:A9:68:0E:EC
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       312EEA025033E951BE624ECF39509F17E1CBD4C1
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136382e302f32342d3234203d3e2039373934.roa
Signing time:             Thu 08 Aug 2024 10:00:00 +0000
ROA not before:           Thu 08 Aug 2024 09:55:00 +0000
ROA not after:            Thu 07 Aug 2025 10:00:00 +0000
asID:                     9794
IP address blocks:        203.201.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
                          rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Mar 2025 10:09:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:2e:ea:02:50:33:e9:51:be:62:4e:cf:39:50:9f:17:e1:cb:d4:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Aug  8 09:55:00 2024 GMT
            Not After : Aug  7 10:00:00 2025 GMT
        Subject: CN=3F0EA7472120A3FC4E920B52DC6E9C17A9680EEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a3:33:81:f9:2c:07:22:f0:77:13:35:8e:02:
                    13:67:59:4a:d4:50:08:45:46:c2:16:84:5c:8f:97:
                    bf:4d:19:8e:ca:fa:d5:bc:fa:69:fc:a8:36:af:7a:
                    94:b8:5c:b6:57:3b:c7:ea:63:83:85:0d:d7:e3:5a:
                    83:8d:8e:bc:e1:d6:e5:4c:e0:4c:96:c2:af:44:08:
                    90:99:07:93:0f:d9:30:90:3c:d0:03:d5:e1:ee:04:
                    21:9f:67:bf:b1:ad:1e:f4:14:83:be:bc:16:c7:26:
                    1d:d7:07:54:35:4c:14:9b:ad:f8:ad:c6:91:f4:07:
                    b2:cc:cd:40:1e:9d:f3:21:f9:2c:42:1f:1c:64:bf:
                    0e:14:06:1d:cf:47:d5:2c:e4:45:5f:92:20:c1:ab:
                    c8:88:60:a6:ec:43:7d:ef:9d:37:77:c4:2f:6f:1f:
                    a6:84:69:13:ec:80:05:28:9c:cb:e0:91:b2:0b:94:
                    2b:09:b8:59:bd:3e:f8:84:fb:67:fe:3d:18:90:8c:
                    05:f6:d2:4f:4a:f2:b5:22:a9:f7:ed:30:5b:7c:6f:
                    89:60:d6:79:42:15:62:d9:2a:b1:ef:79:ea:8e:85:
                    8c:e4:92:87:18:ee:5d:54:86:47:d7:9a:7e:f7:59:
                    2e:96:d2:97:8a:67:e1:2f:bd:28:5c:95:d7:4a:5e:
                    f6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0E:A7:47:21:20:A3:FC:4E:92:0B:52:DC:6E:9C:17:A9:68:0E:EC
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3230332e3230312e3136382e302f32342d3234203d3e2039373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.201.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:54:22:0b:55:12:02:92:75:bc:f8:1a:35:e0:ff:cc:f8:d2:
         5d:72:6b:ea:cb:ab:ea:a3:c6:63:03:f8:b5:11:3a:c8:ee:5c:
         c1:68:1f:54:f0:a8:3f:da:86:76:71:45:e1:07:56:5e:0e:57:
         2c:9b:99:3b:3e:f3:f0:ba:ce:cd:ed:71:40:a8:3b:80:1f:17:
         10:3f:5a:f5:04:bd:23:80:06:8a:aa:25:61:a9:9f:1f:18:1f:
         2f:c2:a1:1e:46:fc:c9:8f:a5:45:a9:fa:8e:9a:7c:fe:ef:de:
         7d:73:cf:1a:d7:ab:78:c9:43:42:8b:e0:9e:4d:0d:23:ad:7a:
         7b:5f:f6:cc:be:ec:2d:0b:82:6f:11:be:41:75:c2:9b:f5:5c:
         77:c6:f5:f2:5b:ec:38:c9:22:49:52:71:b0:1f:12:5d:9e:d2:
         80:3f:54:86:55:c4:a5:ca:80:83:e3:c8:7a:2d:18:8e:d4:d0:
         9a:f9:d1:5e:e5:18:0f:7d:82:ec:b8:3e:69:d8:24:5b:d0:a4:
         b0:02:11:c5:44:c0:7e:37:b1:26:73:c8:31:cf:6d:b4:ac:9c:
         a4:59:a3:66:67:be:96:12:88:00:c7:26:8f:02:8b:ea:8f:54:
         13:f6:3a:66:df:6f:84:59:a0:e5:3f:61:40:88:a0:4f:a8:02:
         54:d0:cc:56
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUMS7qAlAz6VG+Yk7POVCfF+HL1MEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3
NjNDRjM2MTAeFw0yNDA4MDgwOTU1MDBaFw0yNTA4MDcxMDAwMDBaMDMxMTAvBgNV
BAMTKDNGMEVBNzQ3MjEyMEEzRkM0RTkyMEI1MkRDNkU5QzE3QTk2ODBFRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaozOB+SwHIvB3EzWOAhNnWUrU
UAhFRsIWhFyPl79NGY7K+tW8+mn8qDavepS4XLZXO8fqY4OFDdfjWoONjrzh1uVM
4EyWwq9ECJCZB5MP2TCQPNAD1eHuBCGfZ7+xrR70FIO+vBbHJh3XB1Q1TBSbrfit
xpH0B7LMzUAenfMh+SxCHxxkvw4UBh3PR9Us5EVfkiDBq8iIYKbsQ33vnTd3xC9v
H6aEaRPsgAUonMvgkbILlCsJuFm9PviE+2f+PRiQjAX20k9K8rUiqfftMFt8b4lg
1nlCFWLZKrHveeqOhYzkkocY7l1UhkfXmn73WS6W0peKZ+EvvShclddKXva7AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUPw6nRyEgo/xOkgtS3G6cF6loDuwwHwYDVR0j
BBgwFoAUCabx+k/FMta04TRi/CNMnHY882EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MzRlY2M0MC02Yjg0LTQ5ZTgtYjYwYi02ZTk5MDQxMjhjYTgvMC8wOUE2RjFGQTRG
QzUzMkQ2QjRFMTM0NjJGQzIzNEM5Qzc2M0NGMzYxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDlBNkYxRkE0RkM1MzJENkI0RTEzNDYyRkMyMzRDOUM3NjND
RjM2MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzNGVjYzQwLTZiODQtNDllOC1i
NjBiLTZlOTkwNDEyOGNhOC8wLzMyMzAzMzJlMzIzMDMxMmUzMTM2MzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzOTM3MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMvJqDANBgkqhkiG
9w0BAQsFAAOCAQEAPFQiC1USApJ1vPgaNeD/zPjSXXJr6sur6qPGYwP4tRE6yO5c
wWgfVPCoP9qGdnFF4QdWXg5XLJuZOz7z8LrOze1xQKg7gB8XED9a9QS9I4AGiqol
YamfHxgfL8KhHkb8yY+lRan6jpp8/u/efXPPGtereMlDQovgnk0NI616e1/2zL7s
LQuCbxG+QXXCm/Vcd8b18lvsOMkiSVJxsB8SXZ7SgD9UhlXEpcqAg+PIei0YjtTQ
mvnRXuUYD32C7Lg+adgkW9CksAIRxUTAfjexJnPIMc9ttKycpFmjZme+lhKIAMcm
jwKL6o9UE/Y6Zt9vhFmg5T9hQIigT6gCVNDMVg==
-----END CERTIFICATE-----
Generated at Tue Mar 11 05:05:40 2025 by rpki-client