Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3132352e36322e39322e302f32322d3234203d3e20313338383032.roa
File:                     3132352e36322e39322e302f32322d3234203d3e20313338383032.roa (raw, json)
Hash identifier:          /8UFXVuYS96FxmSFc9k37z+SpG6AVqs6WfVpQ3qXrdk=
Subject key identifier:   88:85:6A:66:23:31:CA:80:47:A6:DD:FB:A5:15:71:0D:B0:18:C5:48
Certificate issuer:       /CN=03315D0E966A85B878EA9058B8CF03EAF2881889
Certificate serial:       71D1ABA41AE756E611803F441B023EA6BA919ACF
Authority key identifier: 03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3132352e36322e39322e302f32322d3234203d3e20313338383032.roa
Signing time:             Mon 31 Jul 2023 00:07:37 +0000
ROA not before:           Mon 31 Jul 2023 00:02:37 +0000
ROA not after:            Mon 29 Jul 2024 00:07:37 +0000
asID:                     138802
IP address blocks:        125.62.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl
                          rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 20:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d1:ab:a4:1a:e7:56:e6:11:80:3f:44:1b:02:3e:a6:ba:91:9a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03315D0E966A85B878EA9058B8CF03EAF2881889
        Validity
            Not Before: Jul 31 00:02:37 2023 GMT
            Not After : Jul 29 00:07:37 2024 GMT
        Subject: CN=88856A662331CA8047A6DDFBA515710DB018C548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cc:48:a8:8f:f2:a3:dc:41:e9:fc:77:6c:a1:
                    d8:3d:ca:06:fa:0d:25:03:51:5d:11:c6:09:b1:8c:
                    5e:21:45:8e:f1:6c:87:38:87:66:30:82:02:47:1a:
                    88:78:ce:a3:82:b9:9f:97:26:a1:8d:cc:2d:0d:5c:
                    f4:39:b7:7f:cc:97:02:86:55:ec:ec:93:ed:2f:2e:
                    d0:cc:7f:67:87:82:79:b4:be:be:4b:b3:79:21:d5:
                    d4:6d:bf:47:f7:6a:eb:be:db:84:a0:86:36:05:f1:
                    14:17:b3:74:9f:48:0c:c5:7b:a7:0d:f6:b7:51:b0:
                    ca:91:53:82:fe:e3:57:21:ae:0f:63:a3:50:17:fb:
                    4e:d8:3a:bd:68:2d:9b:b6:4d:7e:ce:8b:b8:e4:fd:
                    70:1e:03:22:38:3c:f0:83:55:28:8d:c3:9d:e9:19:
                    bf:7c:d2:86:ef:92:35:14:69:58:09:69:15:54:3f:
                    17:58:cb:99:fd:84:09:e1:e4:b7:7f:e6:e7:37:02:
                    57:d3:7a:79:64:3b:90:53:84:10:4a:6d:c4:77:fc:
                    42:10:2d:4f:86:eb:77:42:55:b0:d5:61:d6:4d:57:
                    2f:3e:32:08:d9:2e:7a:65:b8:c5:2c:33:d3:9c:56:
                    50:b4:a4:64:ff:9f:93:18:8f:ab:b8:90:aa:1b:76:
                    8b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:85:6A:66:23:31:CA:80:47:A6:DD:FB:A5:15:71:0D:B0:18:C5:48
            X509v3 Authority Key Identifier:
                keyid:03:31:5D:0E:96:6A:85:B8:78:EA:90:58:B8:CF:03:EA:F2:88:18:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/03315D0E966A85B878EA9058B8CF03EAF2881889.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03315D0E966A85B878EA9058B8CF03EAF2881889.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/059acb97-6e87-4e31-a569-a2660df4f2b8/0/3132352e36322e39322e302f32322d3234203d3e20313338383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.62.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:84:2f:b5:58:5c:42:fe:1c:bf:85:18:60:7b:f9:c0:b0:64:
         21:83:af:96:5a:2a:6f:6b:f2:f5:cb:05:5e:7a:e4:e8:b4:51:
         b4:d0:dd:75:03:a3:a2:5f:54:a1:2a:8b:06:b2:e7:cd:11:6c:
         8d:0e:58:a2:c2:66:a1:d4:24:c8:3c:78:39:19:41:90:07:97:
         65:48:a4:72:91:1e:d2:9d:d8:11:7f:1b:b7:46:a7:3c:c1:34:
         e0:c4:5f:4d:7f:c2:2a:6c:35:c7:f5:89:8d:36:43:46:de:ff:
         76:a8:0a:44:2f:7f:1b:42:a8:60:69:15:8a:ac:76:d4:60:1a:
         1e:60:63:5e:c7:99:e3:ae:e0:e7:74:4f:8d:5d:c4:a8:d5:7d:
         ef:48:ac:4e:f6:60:a4:a6:f4:dc:b9:26:74:90:55:93:51:c3:
         e7:b9:4e:d3:a6:9f:3f:0e:b7:28:41:90:46:c2:22:02:d6:08:
         70:d4:7b:93:2a:ce:23:72:92:8b:d4:c3:b7:c2:1f:d4:6a:5c:
         b7:04:96:f8:82:d6:e9:7d:fd:71:83:98:1e:40:bb:53:fb:9d:
         b3:50:0e:a6:e0:fc:db:e0:91:96:b0:a7:bc:46:c1:3b:f6:c1:
         96:92:17:cb:bb:98:38:77:e7:ef:2c:fa:37:99:23:2c:1c:57:
         8a:10:8b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 21:25:09 2024 by rpki-client on console-ams.rpki-client.org