Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e34382e302f32342d3234203d3e203338313435.roa
File:                     3230322e3138302e34382e302f32342d3234203d3e203338313435.roa (raw, json)
Hash identifier:          umck0XTR+E9mNIAWy6V3tOgnQrjbNtu9Pno/ZP2+at8=
Subject key identifier:   7E:D6:57:B4:68:CE:61:D8:40:12:C9:37:A6:A0:F6:93:1F:FC:51:70
Certificate issuer:       /CN=365454AF0090F9E623861AF2120855412F7447D1
Certificate serial:       66C8FCB15EA5F01CD63BFD6ED9D0D056B8C75A5A
Authority key identifier: 36:54:54:AF:00:90:F9:E6:23:86:1A:F2:12:08:55:41:2F:74:47:D1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e34382e302f32342d3234203d3e203338313435.roa
Signing time:             Thu 12 Oct 2023 06:00:00 +0000
ROA not before:           Thu 12 Oct 2023 05:55:00 +0000
ROA not after:            Thu 10 Oct 2024 06:00:00 +0000
asID:                     38145
IP address blocks:        202.180.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.crl
                          rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 12:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c8:fc:b1:5e:a5:f0:1c:d6:3b:fd:6e:d9:d0:d0:56:b8:c7:5a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=365454AF0090F9E623861AF2120855412F7447D1
        Validity
            Not Before: Oct 12 05:55:00 2023 GMT
            Not After : Oct 10 06:00:00 2024 GMT
        Subject: CN=7ED657B468CE61D84012C937A6A0F6931FFC5170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:74:1e:77:f8:f3:b1:ae:dc:86:78:26:81:7b:
                    06:aa:ba:26:b6:c1:fe:a4:0f:5d:30:81:28:b2:94:
                    58:50:33:04:a9:57:3b:e5:f0:e4:26:92:03:3c:d7:
                    dc:66:0f:f3:e7:03:b2:b7:7a:c0:a8:cd:d3:2f:be:
                    c7:ff:c3:75:f6:33:e9:8e:e0:36:c5:9f:c4:ba:3a:
                    12:9f:35:f8:15:ab:e7:94:59:3d:a3:01:05:4c:2e:
                    be:6c:2c:ff:4d:78:1b:73:59:eb:77:2b:b3:38:da:
                    90:f4:d2:4c:d2:e7:98:21:75:34:db:99:15:29:ec:
                    3d:c3:bb:dc:09:fe:0a:39:62:4c:40:51:d1:45:77:
                    3b:80:46:d9:aa:f6:9d:14:30:7e:e0:a6:45:0b:29:
                    4d:cd:32:71:9e:66:65:35:55:bb:45:7b:9d:ac:41:
                    ce:bd:cc:38:9c:64:3f:b4:54:c6:71:10:89:ed:0d:
                    fe:19:43:8f:4e:e1:5f:0f:ea:95:08:c7:a4:ce:52:
                    32:77:0f:5c:d5:b2:b6:9c:6f:dd:4a:6b:09:e4:d4:
                    e4:05:93:b5:6d:a3:b8:65:38:da:c1:ec:3a:6f:a3:
                    87:4b:ec:0b:73:6b:62:11:f7:f5:a9:42:21:60:65:
                    b0:22:8b:48:ec:4c:32:e3:e6:6c:6f:a6:70:0d:55:
                    cc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D6:57:B4:68:CE:61:D8:40:12:C9:37:A6:A0:F6:93:1F:FC:51:70
            X509v3 Authority Key Identifier:
                keyid:36:54:54:AF:00:90:F9:E6:23:86:1A:F2:12:08:55:41:2F:74:47:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/365454AF0090F9E623861AF2120855412F7447D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/365454AF0090F9E623861AF2120855412F7447D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57984e3a-48f9-4cda-be6c-4006c08f8fd2/0/3230322e3138302e34382e302f32342d3234203d3e203338313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.180.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:63:ff:8b:77:e8:3c:54:9b:a8:fa:40:00:67:21:33:8b:f0:
         1c:4b:f3:57:be:6b:11:ef:2f:2c:9d:00:d4:cc:60:c7:cf:89:
         40:68:59:e9:85:93:e8:16:8a:9e:bd:54:c9:9d:c3:36:b5:d1:
         5b:10:16:32:6c:44:80:65:c4:04:ec:fd:c6:8b:ec:de:1a:ab:
         69:aa:af:b8:45:99:05:1f:eb:f0:d1:1d:02:31:8e:8c:4e:b5:
         e9:69:ac:dd:b6:70:c1:44:5e:42:7c:2f:49:5b:14:10:34:c9:
         3c:e3:94:7a:de:c8:3a:75:72:aa:83:c8:a4:3f:6d:02:3f:e7:
         4d:ef:85:a0:85:6c:bb:50:b7:89:70:70:74:1d:f5:ab:d8:5b:
         5b:d2:1e:3d:53:48:a5:60:81:c9:b1:66:33:0a:0b:4e:e9:23:
         bc:c1:0f:9e:e2:ab:b1:03:d6:20:c4:52:a6:71:dd:b8:f0:74:
         0d:c2:81:2d:7f:3a:9b:07:19:a4:58:af:19:ed:c1:d0:00:87:
         b8:e1:0e:7c:a7:0b:67:d6:0a:2d:5d:c5:dc:b1:98:d0:d5:a6:
         85:cb:b6:8b:3e:95:e9:0b:96:75:83:70:a6:5c:36:e3:51:ec:
         19:e0:80:d0:3a:54:5d:c0:71:1c:ef:18:0d:b7:f3:8b:5c:51:
         39:b5:3f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 07:23:20 2024 by rpki-client on console-ams.rpki-client.org