Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3132382e302f31392d3234203d3e2034383030.roa
File:                     3132352e3231332e3132382e302f31392d3234203d3e2034383030.roa (raw, json)
Hash identifier:          d3juv13UcHDU46l7BWRluv6kCBTjKsoNABtGScfbcp8=
Subject key identifier:   F4:05:90:CA:98:CF:B4:69:B5:BE:58:58:9E:D4:D9:3F:E0:A2:0F:70
Certificate issuer:       /CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
Certificate serial:       4638B47B6495178224658FD63EC841C0799C5F55
Authority key identifier: 44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3132382e302f31392d3234203d3e2034383030.roa
Signing time:             Mon 31 Jul 2023 00:04:32 +0000
ROA not before:           Sun 30 Jul 2023 23:59:32 +0000
ROA not after:            Mon 29 Jul 2024 00:04:32 +0000
asID:                     4800
IP address blocks:        125.213.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl
                          rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 00:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:38:b4:7b:64:95:17:82:24:65:8f:d6:3e:c8:41:c0:79:9c:5f:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44BF6682B6B493048C6F1864A0DEA47ECF66752B
        Validity
            Not Before: Jul 30 23:59:32 2023 GMT
            Not After : Jul 29 00:04:32 2024 GMT
        Subject: CN=F40590CA98CFB469B5BE58589ED4D93FE0A20F70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:75:d2:46:4c:1e:1f:83:11:8c:d3:c5:c5:51:
                    a2:a0:d2:c8:49:a9:e3:47:8f:fa:72:51:b4:9f:dc:
                    a1:d9:ec:d2:03:63:04:ce:08:33:00:e4:a3:fe:e7:
                    f0:00:1b:7b:72:dc:08:c2:2b:af:ad:a3:c5:fe:a9:
                    42:50:7f:fa:ea:3a:72:8e:59:65:3a:1a:c4:2a:bf:
                    44:5a:0b:83:f3:2f:b8:19:72:10:5d:8c:06:e2:1b:
                    b5:2b:2a:9b:82:50:c8:8e:e5:51:27:77:81:a8:6d:
                    e4:e6:e5:69:6d:81:2b:82:c9:ba:d5:ba:a8:6a:3c:
                    99:0e:43:62:cc:0a:f4:dd:d3:8c:38:f3:a5:89:51:
                    48:47:05:16:ad:6f:81:02:c2:9b:d9:d8:41:5c:e9:
                    f5:a3:f1:63:2c:78:70:1e:91:0f:d2:d0:b8:29:b9:
                    6a:43:05:43:e5:b4:39:86:b3:9b:d1:95:a3:15:34:
                    30:36:b4:3c:1d:99:2d:be:92:cc:ec:8e:39:4c:df:
                    0f:da:a1:ea:ec:44:cb:e7:b7:e7:5c:7c:42:52:66:
                    29:00:84:0d:db:16:83:49:04:6b:11:29:d9:68:a6:
                    ee:0d:c8:d0:60:57:4a:5e:de:27:43:39:ac:0e:c0:
                    19:6e:bc:33:57:81:33:85:6c:6f:b6:7f:7c:fd:25:
                    f3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:05:90:CA:98:CF:B4:69:B5:BE:58:58:9E:D4:D9:3F:E0:A2:0F:70
            X509v3 Authority Key Identifier:
                keyid:44:BF:66:82:B6:B4:93:04:8C:6F:18:64:A0:DE:A4:7E:CF:66:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/44BF6682B6B493048C6F1864A0DEA47ECF66752B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44BF6682B6B493048C6F1864A0DEA47ECF66752B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ce36de-f921-4274-8497-2987d909543e/0/3132352e3231332e3132382e302f31392d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.213.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9b:75:31:af:ff:1a:bd:e9:07:28:20:18:bd:6d:d6:37:a5:ef:
         db:38:1d:49:63:b1:2d:97:e4:a9:2a:cc:17:2b:75:f8:92:03:
         a8:ca:9a:64:8a:6f:13:be:07:ce:30:8c:36:b7:e5:06:49:c0:
         f5:76:72:ce:e4:bd:b1:6b:35:90:c5:cf:c4:0b:5e:42:ff:2b:
         45:da:f8:7f:58:4b:09:c2:38:e4:2b:ea:25:c8:bf:2b:e4:30:
         b3:e3:49:9b:2c:da:52:6f:26:6b:08:97:fb:e2:c8:71:10:ad:
         f6:b2:89:57:e4:9e:91:d9:c3:29:6f:14:97:20:f5:40:c3:f8:
         d3:3c:ed:c4:03:1c:5a:0e:dd:7b:7f:02:50:3f:27:ff:7a:c4:
         46:64:60:1b:55:d2:b1:3a:4b:15:7f:a5:62:6e:1f:0e:82:94:
         e8:ac:9a:74:e0:24:e8:c9:cb:7b:48:e1:05:b8:ec:1b:7b:60:
         c3:06:ea:03:60:39:06:b6:43:4c:9b:a0:a5:55:00:ab:ef:f4:
         b5:fc:54:24:ff:2d:25:fc:d4:a6:32:e5:0f:5b:06:9f:d7:db:
         99:72:4a:a6:52:9f:c2:42:77:b1:c1:b1:6b:b4:2a:61:27:d7:
         11:72:28:f1:d6:af:14:b3:61:56:ee:1f:5f:42:6a:8d:2d:b5:
         7a:9a:11:cf
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIURji0e2SVF4IkZY/WPshBwHmcX1UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VD
RjY2NzUyQjAeFw0yMzA3MzAyMzU5MzJaFw0yNDA3MjkwMDA0MzJaMDMxMTAvBgNV
BAMTKEY0MDU5MENBOThDRkI0NjlCNUJFNTg1ODlFRDREOTNGRTBBMjBGNzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+ddJGTB4fgxGM08XFUaKg0shJ
qeNHj/pyUbSf3KHZ7NIDYwTOCDMA5KP+5/AAG3ty3AjCK6+to8X+qUJQf/rqOnKO
WWU6GsQqv0RaC4PzL7gZchBdjAbiG7UrKpuCUMiO5VEnd4GobeTm5WltgSuCybrV
uqhqPJkOQ2LMCvTd04w486WJUUhHBRatb4ECwpvZ2EFc6fWj8WMseHAekQ/S0Lgp
uWpDBUPltDmGs5vRlaMVNDA2tDwdmS2+kszsjjlM3w/aoersRMvnt+dcfEJSZikA
hA3bFoNJBGsRKdlopu4NyNBgV0pe3idDOawOwBluvDNXgTOFbG+2f3z9JfNBAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU9AWQypjPtGm1vlhYntTZP+CiD3AwHwYDVR0j
BBgwFoAURL9mgra0kwSMbxhkoN6kfs9mdSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NWNlMzZkZS1mOTIxLTQyNzQtODQ5Ny0yOTg3ZDkwOTU0M2UvMC80NEJGNjY4MkI2
QjQ5MzA0OEM2RjE4NjRBMERFQTQ3RUNGNjY3NTJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDRCRjY2ODJCNkI0OTMwNDhDNkYxODY0QTBERUE0N0VDRjY2
NzUyQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1Y2UzNmRlLWY5MjEtNDI3NC04
NDk3LTI5ODdkOTA5NTQzZS8wLzMxMzIzNTJlMzIzMTMzMmUzMTMyMzgyZTMwMmYz
MTM5MmQzMjM0MjAzZDNlMjAzNDM4MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBX3VgDANBgkqhkiG
9w0BAQsFAAOCAQEAm3Uxr/8avekHKCAYvW3WN6Xv2zgdSWOxLZfkqSrMFyt1+JID
qMqaZIpvE74HzjCMNrflBknA9XZyzuS9sWs1kMXPxAteQv8rRdr4f1hLCcI45Cvq
Jci/K+Qws+NJmyzaUm8mawiX++LIcRCt9rKJV+SekdnDKW8UlyD1QMP40zztxAMc
Wg7de38CUD8n/3rERmRgG1XSsTpLFX+lYm4fDoKU6KyadOAk6MnLe0jhBbjsG3tg
wwbqA2A5BrZDTJugpVUAq+/0tfxUJP8tJfzUpjLlD1sGn9fbmXJKplKfwkJ3scGx
a7QqYSfXEXIo8davFLNhVu4fX0JqjS21epoRzw==
-----END CERTIFICATE-----
Generated at Tue Apr 23 23:20:38 2024 by rpki-client on console-fra.rpki-client.org