Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3230372e302f32342d3234203d3e20313333383431.roa
File:                     3132332e3233312e3230372e302f32342d3234203d3e20313333383431.roa (raw, json)
Hash identifier:          OKdGKRJzuwNy7zy1uVLVgVopN+o1EiLJ41Lz9zpqw8A=
Subject key identifier:   C7:3D:FA:79:5B:A5:B2:09:BA:27:E0:EC:D8:BA:24:4E:2F:9D:CF:C9
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       324C3DC157F18CEBFC2D0B26F324C1D171D66521
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3230372e302f32342d3234203d3e20313333383431.roa
Signing time:             Mon 31 Jul 2023 00:04:29 +0000
ROA not before:           Sun 30 Jul 2023 23:59:29 +0000
ROA not after:            Mon 29 Jul 2024 00:04:29 +0000
asID:                     133841
IP address blocks:        123.231.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 13:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:4c:3d:c1:57:f1:8c:eb:fc:2d:0b:26:f3:24:c1:d1:71:d6:65:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul 30 23:59:29 2023 GMT
            Not After : Jul 29 00:04:29 2024 GMT
        Subject: CN=C73DFA795BA5B209BA27E0ECD8BA244E2F9DCFC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:78:89:e5:8d:34:4b:3c:48:1d:ac:23:80:81:
                    da:95:9f:53:ba:6b:e2:c7:90:2b:f1:8a:6b:2f:9a:
                    2e:74:b0:f0:b7:ee:bf:e7:04:c6:dc:dd:c3:72:96:
                    2d:f5:c3:ba:03:55:04:3b:58:25:09:18:98:75:b4:
                    3e:e3:e6:3f:ac:45:ee:d7:74:43:24:ae:04:ef:99:
                    cf:da:e3:79:1f:37:ab:9d:c9:28:8e:46:c7:db:06:
                    ee:ff:47:d9:7e:64:b1:ca:31:9f:30:20:17:c9:bf:
                    99:6f:b8:98:f3:57:1e:0f:35:12:39:5a:96:5c:20:
                    46:33:b4:4c:3b:f8:f5:16:43:d9:38:05:72:2b:65:
                    97:08:cf:75:84:99:78:ad:d7:4f:28:67:e3:bf:d5:
                    ef:1c:d5:1f:7d:bb:44:f0:f5:34:ce:7a:cd:b8:da:
                    0a:87:1a:64:62:50:46:88:79:43:e1:47:1d:ef:07:
                    61:d9:39:00:0b:6a:53:53:79:38:75:df:f1:80:29:
                    76:0a:b3:86:7c:53:ee:91:ca:24:9c:3e:0d:31:f5:
                    74:56:18:1c:07:2c:28:9b:a7:27:be:a4:3d:c2:ec:
                    6b:aa:c3:45:11:79:ca:90:d9:e7:c1:81:30:c3:25:
                    b0:7a:4f:d2:58:e5:87:31:94:60:41:98:74:f3:2d:
                    ac:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:3D:FA:79:5B:A5:B2:09:BA:27:E0:EC:D8:BA:24:4E:2F:9D:CF:C9
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132332e3233312e3230372e302f32342d3234203d3e20313333383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.231.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:6d:78:00:06:6f:7a:74:62:62:d5:ac:a6:62:3a:17:24:eb:
         5f:76:bc:b3:9f:60:52:7f:b8:7d:59:9e:f9:00:2d:c0:ae:80:
         f8:da:f6:40:83:d5:a3:56:73:38:5a:b4:79:2c:d5:6d:da:22:
         76:ca:23:70:ae:c8:b9:b6:04:f9:d4:ae:b7:0f:7c:a9:42:fa:
         0e:d6:e5:4f:7c:d1:fa:81:dc:75:2c:09:f5:65:9a:b8:77:65:
         97:71:a4:24:91:18:47:f3:4c:78:f6:21:6c:6a:47:ec:5b:ba:
         4f:81:3e:25:77:12:a3:33:6c:d8:25:ce:0d:09:a3:c7:5e:5c:
         d5:af:a5:ca:69:1f:a6:7d:f8:81:29:74:30:93:a1:34:9d:0b:
         1c:46:5f:87:7a:bb:bc:d6:44:5e:f1:7c:49:7e:53:2f:87:54:
         0d:eb:19:46:cd:39:6d:91:f9:5c:2b:81:30:89:65:eb:2b:63:
         16:d9:1a:e5:9b:eb:75:37:dd:4f:f5:e7:1d:f2:3c:ab:e9:eb:
         bd:25:8a:c6:33:ac:f6:56:57:4b:b5:d7:60:ed:08:4f:f1:a0:
         1d:f3:be:0b:1d:31:ad:85:5b:9c:eb:98:79:7b:45:4d:88:ad:
         6a:87:8a:9a:61:0b:ea:21:44:51:d6:ef:e4:e7:a5:a7:2c:a6:
         23:1a:6a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 06:27:58 2024 by rpki-client on console-fra.rpki-client.org