Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa
File:                     3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa (raw, json)
Hash identifier:          0aRyZhQGWsMKYXDlEnbQv2PzDN2c5f2fxr/kT9NKBik=
Subject key identifier:   57:9D:5D:CC:57:B7:5B:79:26:62:C5:16:D9:EF:28:85:BB:83:8A:F6
Certificate issuer:       /CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808
Certificate serial:       27BCA3B1E3E24DA9F3629D7B416F728319C46A7F
Authority key identifier: 19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa
Signing time:             Wed 27 Mar 2024 09:08:28 +0000
ROA not before:           Wed 27 Mar 2024 09:03:28 +0000
ROA not after:            Wed 26 Mar 2025 09:08:28 +0000
asID:                     152014
IP address blocks:        203.175.102.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl
                          rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:bc:a3:b1:e3:e2:4d:a9:f3:62:9d:7b:41:6f:72:83:19:c4:6a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1911AE41845DEE2EB88490C5767E3C1A6E30E808
        Validity
            Not Before: Mar 27 09:03:28 2024 GMT
            Not After : Mar 26 09:08:28 2025 GMT
        Subject: CN=579D5DCC57B75B792662C516D9EF2885BB838AF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cc:bd:bc:00:4d:66:36:ea:d1:88:07:76:f8:
                    0f:26:3b:4b:c8:b5:8a:46:3e:55:90:b1:98:c6:54:
                    a6:fb:9d:20:a9:c3:f0:75:5b:c7:91:0b:ab:b4:e0:
                    1f:e5:a2:da:37:e6:f6:c5:f9:27:b2:c0:68:aa:30:
                    27:20:08:69:52:cb:7a:4f:c4:e1:e8:49:d0:88:db:
                    b6:c8:0a:48:29:52:89:81:61:56:2d:3c:7f:4a:9f:
                    25:1a:91:05:80:be:95:df:44:72:a1:1f:0d:e5:11:
                    bf:b1:b2:35:ab:ed:c2:6a:4a:ab:af:c9:d2:31:8f:
                    c2:e9:1d:b5:97:32:2e:c5:f2:4c:b3:84:53:fc:84:
                    a0:84:24:1a:ee:ae:d1:14:37:85:ab:1e:c4:60:f9:
                    a1:02:5b:89:b6:b6:66:e0:cf:53:cc:86:f1:b2:a4:
                    29:2b:f4:68:0d:02:cf:23:88:44:dc:e1:c6:f1:37:
                    a3:2e:bc:13:38:65:70:ac:ab:56:db:13:e3:4a:ef:
                    4a:24:8a:55:5c:7a:49:c2:76:ee:b1:6d:5e:fe:2c:
                    13:28:18:ca:a0:83:6e:89:f2:8d:ae:c5:11:6e:cf:
                    09:f0:ca:cd:13:cc:e9:43:ac:36:5c:f6:40:a1:62:
                    6b:85:92:d7:64:41:a1:7b:be:0e:4b:b3:3e:ff:87:
                    27:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9D:5D:CC:57:B7:5B:79:26:62:C5:16:D9:EF:28:85:BB:83:8A:F6
            X509v3 Authority Key Identifier:
                keyid:19:11:AE:41:84:5D:EE:2E:B8:84:90:C5:76:7E:3C:1A:6E:30:E8:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/1911AE41845DEE2EB88490C5767E3C1A6E30E808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1911AE41845DEE2EB88490C5767E3C1A6E30E808.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f957fa5d-fa67-4e6b-8920-c4747adb30bb/0/3230332e3137352e3130322e302f32332d3234203d3e20313532303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.175.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:20:d1:f5:03:61:56:f6:4e:91:81:6c:ef:e2:13:f7:43:d6:
         f7:9c:75:c0:20:e3:9c:4c:4b:dd:59:a3:f7:de:bd:3e:31:dc:
         dc:b3:45:c3:2f:97:76:ee:21:a3:0d:ad:5e:e7:b3:78:15:de:
         0c:73:64:20:88:8a:c4:07:ee:f2:c6:cc:aa:78:12:36:27:d6:
         09:f7:9e:c3:3d:48:b1:19:fe:da:10:76:ad:d6:8a:cf:c3:e0:
         04:66:6d:bf:f9:18:8d:d5:4f:d3:b4:56:20:cd:e6:39:a6:b5:
         7d:71:8c:53:67:34:8f:38:18:f1:bb:7e:ab:4b:d1:1a:a6:9a:
         ce:47:50:2c:4c:37:6b:df:91:78:3c:29:3f:75:96:83:9e:93:
         30:b8:4a:38:d1:d2:8a:b1:5d:fe:2b:73:47:e3:93:ff:e6:fb:
         39:3d:ce:11:b6:be:1c:10:9b:7f:40:87:8a:f9:56:b7:b6:75:
         d1:08:c1:19:76:ef:f8:02:48:6d:2f:64:00:4f:56:99:89:84:
         e7:5f:41:c5:74:d0:e7:86:86:be:94:b5:50:64:71:c4:5c:1c:
         63:92:f2:de:c4:c6:89:4c:2a:c9:ad:1d:51:28:81:9e:a9:5c:
         35:6b:ad:d2:79:ae:89:23:1c:e0:5c:08:7b:30:83:78:bc:b3:
         9b:b5:88:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:54 2024 by rpki-client on console-fra.rpki-client.org