Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3230332e302f32342d3234203d3e20313333383431.roa
File:                     3132332e3233312e3230332e302f32342d3234203d3e20313333383431.roa (raw, json)
Hash identifier:          hK2DAg5XgPT4H0ydd+YjbNspFVW4UvuedwKmYK7QRaY=
Subject key identifier:   F1:D7:AA:F8:D8:C2:41:C1:A9:15:57:EC:FC:85:04:CD:F0:3B:41:3D
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       6004B3355A68D9C9AA6BAACA859CACB46B353FC0
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3230332e302f32342d3234203d3e20313333383431.roa
Signing time:             Mon 31 Jul 2023 00:04:30 +0000
ROA not before:           Sun 30 Jul 2023 23:59:30 +0000
ROA not after:            Mon 29 Jul 2024 00:04:30 +0000
asID:                     133841
IP address blocks:        123.231.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 00:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:04:b3:35:5a:68:d9:c9:aa:6b:aa:ca:85:9c:ac:b4:6b:35:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul 30 23:59:30 2023 GMT
            Not After : Jul 29 00:04:30 2024 GMT
        Subject: CN=F1D7AAF8D8C241C1A91557ECFC8504CDF03B413D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ad:99:58:b1:86:54:f7:1b:0b:55:12:f7:f6:
                    ec:21:94:b5:9f:fd:33:f3:c5:11:49:63:97:9c:ff:
                    3a:28:eb:56:81:3f:c3:ef:ac:37:e3:fe:3e:1d:13:
                    cc:80:ae:38:49:16:f7:03:b4:1a:29:50:8a:1c:37:
                    79:0b:0b:64:8e:bd:26:d1:79:a7:26:d3:11:cc:16:
                    24:e2:f1:5c:3f:b4:5e:cd:ee:14:99:7f:a3:77:33:
                    99:9d:ac:be:82:98:ca:dc:5e:67:95:3a:ed:a6:39:
                    b0:6e:48:cb:67:ee:ce:27:67:61:e4:e5:5c:24:0a:
                    db:c0:62:9f:f8:19:20:d2:e0:68:ad:08:5d:be:f9:
                    4a:45:06:a3:b0:46:0a:f4:9a:83:56:f4:9c:99:98:
                    a1:6d:cf:db:3f:c1:a8:d5:de:00:a1:73:66:16:b3:
                    7d:41:8c:ef:2d:77:38:4a:0f:1c:96:5b:fe:7d:47:
                    25:9c:55:c3:d7:cb:5b:1e:27:2b:a8:6f:a3:75:d3:
                    11:50:e3:04:78:ba:cd:db:24:ae:51:69:74:20:74:
                    9f:72:7b:a2:0f:86:c6:ae:01:ee:e2:fa:87:18:68:
                    7f:a2:1f:50:af:17:3d:2a:82:41:35:f2:73:3e:90:
                    2b:7c:b8:08:00:39:f2:a0:93:bd:c0:b2:67:22:4d:
                    4f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D7:AA:F8:D8:C2:41:C1:A9:15:57:EC:FC:85:04:CD:F0:3B:41:3D
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3230332e302f32342d3234203d3e20313333383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.231.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:4e:8b:95:f2:fa:b5:30:f7:a3:39:92:e4:b0:7e:6f:51:7b:
         26:5f:63:a6:f2:5d:17:6d:9b:52:91:57:c0:db:1f:4f:0c:08:
         09:30:e4:61:44:79:5e:8f:23:b8:69:97:a8:3b:17:47:c0:02:
         15:99:c1:5e:eb:a8:33:88:ef:97:74:4c:44:51:9c:fd:ad:87:
         60:83:df:14:65:8d:e1:e1:99:6c:1f:62:7d:31:58:3e:41:a5:
         9b:c0:dd:32:57:14:fb:9c:fa:7e:60:1b:94:ee:bb:76:a2:0f:
         82:8e:4a:a3:4d:7b:8e:ad:fc:f8:d5:4f:69:d1:10:9a:71:f8:
         df:a8:9a:16:47:83:96:82:6e:6d:6a:18:60:2d:41:c6:ac:3a:
         94:4d:42:58:e9:85:6c:22:c1:4f:3c:a4:5e:a5:27:3e:22:a1:
         9a:cc:ef:03:82:f4:13:c6:45:c5:db:c8:e3:d2:50:2b:b3:06:
         94:14:ae:f5:00:4e:a6:46:3f:aa:bb:d5:22:27:f1:7a:0d:00:
         17:28:59:3e:20:69:5b:0d:e4:35:9b:97:57:84:a3:b6:13:a9:
         56:74:6f:c3:81:1b:0e:48:45:43:61:e7:11:56:be:71:dd:a2:
         90:4a:9f:d4:d8:af:9f:37:ad:35:aa:09:df:66:43:f0:6c:84:
         9e:90:de:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 23:20:38 2024 by rpki-client on console-fra.rpki-client.org